Security

Last updated October 30, 2026

Families trust us with information about their children. Here’s how we look after it.

How we protect your information

• Encrypted connections: every page is served over HTTPS, so what you send us can’t be read on the way.
• Encrypted storage: our database provider encrypts stored data.
• Passwords: we never store your password. We keep only a salted, scrambled version (scrypt) that can’t be turned back into it.
• Sign-in: your session cookie can’t be read by scripts on the page, and it expires after 30 days.
• Access: parents see only their own children, and teachers only their own classes. Very few people at Marigold Minds can see account data, and only to support you or keep the service running.
• Limits on misuse: we limit repeated attempts to sign in or make requests, to slow down anyone trying to guess passwords or overload the site.
• Less data, less risk: assessment answers stay on your device unless you save them, and we don’t keep the photos or topics you send for plans.

What you can do

• Use a password you don’t use anywhere else.
• Log out on shared devices.
• Don’t put your child’s full name or other personal details in photos or topics.

If something goes wrong

If we learn of a security problem that affects your information, we’ll tell you promptly and explain what we’re doing about it.

Report a problem

If you think you’ve found a security issue, please email hello@marigoldminds.com with the details. We’ll look into it quickly and won’t take action against anyone who reports in good faith and doesn’t access other people’s data.

Questions? Email hello@marigoldminds.com.