Privacy Policy

STEM Rabbit (this website) is operated by Scient Systems ("we," "us") as part of its STEM Quest Academy education programs. We are based in the United States and welcome students from other countries. For anything in this policy, contact us at ask@scientsystems.com.

Account information. A username, display name, account role, and a password we store only in hashed form — never as plain text.

Student profile.Entered by our staff during enrollment: membership type, grade level, age, learning goals, and a parent or guardian's contact details (phone, WhatsApp, or email). Parent contact details are visible only to administrators — not to teachers or other students.

Class records. Cohort enrollment, class schedules, and attendance (present, absent, late, or excused).

Learning progress. Lesson progress, quiz results, and in-app rewards such as coins and saved avatars.

Class recordings. Live classes are usually not recorded. An instructor may record a class at their discretion — for example, to review a lesson. Recordings are kept private, and would only ever be made public with the prior consent of the parents or guardians of the students who appear in them. They are covered by the same parental rights described in this policy: a parent or guardian may ask us what recordings exist of their child and request deletion.

Email records. When we send class reminders or cancellation notices, we keep a log of what was sent and to whom. These logs delete automatically after 180 days.

Technical logs. Basic operational logs (for example, sign-in errors) that may include a username and account role. Routine entries are cleaned up automatically, and no log older than 30 days is kept.

• No advertising of any kind on the platform.
• No selling, renting, or sharing of personal information for marketing.
• No third-party analytics or tracking scripts.
• No public profiles — student information is never visible to other families.
• No student information on calendars: class events on our Google Calendar contain only the class name and time, never student names or contact details.

Our students are typically 10–11 years old, and we designed STEM Rabbit with that in mind. There is no self-signup: every student account is created by our staff after a family enrolls, and we collect a parent or guardian's consent as part of registration. We collect only the information described above — the minimum we need to teach classes and show progress.

A parent or guardian can review their child's information, ask us to correct it, or ask us to delete the account entirely by emailing ask@scientsystems.com. We honor these requests for all families, wherever they live.

We send class reminder and cancellation emails to the student and parent contact addresses our staff has on file — never to addresses typed into a form by someone else. Emails are delivered through Resend, our email provider, and each send is rate-limited to prevent misuse.

We use a small number of companies to run the platform. Each receives only what it needs to do its job:

• Vercel — hosts the website.
• MongoDB — stores our database.
• Resend — delivers class emails.
• Cloudflare Turnstile — protects the sign-in page from bots.
• Google Calendar — holds class schedules on our own academy calendar. As noted above, these events never contain student information.

We use one essential cookie: a secure, httpOnly session cookie that keeps you signed in. It contains no tracking identifiers, and we set no advertising or analytics cookies.

• Passwords are stored hashed, never as plain text.
• All traffic to the site is encrypted with HTTPS.
• Stored credentials for our calendar connection are encrypted at rest (AES-256-GCM).
• Access is role-based: teachers see only their own classes, and parent contact details are restricted to administrators.

• Account and profile information: for as long as the student is enrolled, and removed when a parent requests deletion.
• Email logs: deleted automatically after 180 days.
• Technical logs: kept no longer than 30 days.

We operate from the United States, and information is processed and stored on servers located there. If you enroll from another country, your information will be handled in the United States as described in this policy, with the same protections for every family.

If we change this policy, we will post the updated version on this page with a new effective date. Meaningful changes to how we handle student information will be communicated to enrolled families.

Effective July 23, 2026.