Privacy Policy

Welcome to Nurture, the Learning Management System ("LMS" or the "Platform") developed and operated by S2S Education ("we", "us", "our"). We are committed to protecting the privacy and personal data of our users, including students, facilitators, and educational administrators (collectively referred to as "Users" or "you").

This Privacy Policy describes how we collect, process, use, store, share, and protect your personal information when you access our Platform at nurture.s2seducation.com and use our services. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

To deliver a personalized and effective educational experience, we collect several categories of information:

• Account and Profile Information: When an account is created for you (either by your school administrator or directly through the Platform), we collect personal identification details such as your full name, email address, username, password, assigned role (Student, Facilitator, or Administrator), and school/educational institution affiliation.
• Educational and Progress Data: As you interact with the LMS, we log and process data concerning your academic journey. This includes active course enrollment, chapter progress, quiz attempts and scores, challenge submissions, time spent on lessons, and learning exploration actions.
• Communication Data: We collect information you provide when participating in interactive features, such as posting on the Bulletin Board, responding to system nudges, or contacting our technical support team.
• Usage and Device Metadata: When you access Nurture, our servers automatically collect details about your device and network, including your IP address, browser type and version, operating system, page response times, and navigation paths across the Platform.

2. Cookies and Tracking Technologies

We use essential cookies to maintain system security and support active sessions. These include:

• Authentication Cookies: Secure identifiers that keep you logged into the platform as you navigate from page to page.
• CSRF Protection Cookies: Security cookies designed to prevent Cross-Site Request Forgery (csrftoken) attacks, ensuring that commands executed on your browser are legitimate.
• User Preferences: Small preference cookies to store settings such as your "Remember Me" choice.

Please note: Third-party integrations, such as Google Identity Services (OAuth), may place cookies on your device to facilitate a secure single sign-on experience. For more details, please review our Cookie Notice.

3. Legal Basis for Processing Data

Under applicable data protection laws, S2S Education processes your personal data based on the following grounds:

• Contractual Obligation: To fulfill our agreement with your school or educational institution to provide access to the Nurture LMS and its curriculum.
• Consent: When you explicitly authorize the collection of data (e.g., using Google OAuth to sign in).
• Legitimate Interest: To protect, maintain, and optimize our platform services, detect security incidents, prevent fraud, and refine our educational tools.

4. How We Use Your Information

We use the collected data strictly for educational and operational purposes, specifically to:

• Provide, operate, and maintain the Nurture LMS.
• Track and display student learning progress, quiz metrics, and curriculum completion.
• Enable facilitators and administrators to review academic performance, assign material, and manage student advancement.
• Personalize your user interface, including presenting appropriate content, dashboard alerts, and educational nudges.
• Authenticate your identity and secure access to your account.
• Investigate and prevent security breaches, unauthorized access, and other system misuses.
• Send administrative messages, security alerts, and system support updates.

5. Data Sharing and Disclosure

We value your privacy and do not sell, rent, or trade your personal data to third parties. Your information is shared only under the following controlled circumstances:

• Educational Institution Sharing: Because Nurture is an educational portal, your curriculum progress, quiz scores, and academic submissions are visible to the assigned facilitators, educators, and administrators of your school or organization.
• Service Providers: We share data with verified third-party vendors who assist in hosting the platform, managing identity verification (such as Google Identity Services), and sending system notifications (such as Firebase). These vendors are contractually bound to safeguard your data and use it only for the services they provide.
• Legal Compliance: We may disclose your information if required to do so by law, court order, or government regulation, or to protect the safety, rights, or property of S2S Education, our users, or the public.

6. Data Security

We implement industry-standard administrative, technical, and physical security measures to protect your data:

• Encryption: Data is encrypted in transit using Secure Socket Layer/Transport Layer Security (SSL/TLS) protocols.
• Role-Based Access Control (RBAC): We enforce strict server-side checks to verify user roles, preventing students from accessing facilitator tools or administrators from violating peer partitions.
• Session Management: Secure token-based session handling ensures that inactive sessions expire automatically and unauthorized sessions are immediately rejected.

While we employ robust measures, no transmission over the internet or storage method is 100% secure. We cannot guarantee absolute security, but we act promptly to address any security anomalies.

7. Data Retention

S2S Education retains your personal information for as long as your account remains active or as needed to provide educational services under our agreement with your institution. Once your relationship with the institution terminates or the institution requests account deletion, we will securely delete or anonymize your data in accordance with our institutional contracts and legal compliance obligations.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access and Portability: You can request a copy of the personal data we hold about you.
• Correction: You may update your profile information within the platform or request corrections to inaccurate data.
• Deletion (Right to be Forgotten): You or your school administrator can request that we delete your account and associated records, subject to regulatory or contractual retention requirements.
• Restriction of Processing: You can ask us to temporarily halt the processing of your data under specific conditions.

To exercise these rights, please contact your school's LMS administrator or S2S Education support at the contact details provided below.

9. Children’s Privacy

S2S Education is committed to protecting the privacy of minors using the platform. When students under the age of digital consent use Nurture, we process their data solely for educational purposes under the direct supervision and authorization of their school or organization, in compliance with applicable children's privacy regulations (such as COPPA and FERPA).

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational changes, security enhancements, or regulatory compliance requirements. We will notify you of any material changes by updating the "Last updated" date at the top of this policy and posting a notification on the Platform dashboard.