Privacy Policy
Effective October 4, 2026 · Last updated October 4, 2026
How LessonDone collects, uses and protects your information.
Who we are
LessonDone (lessondone.com) is operated by David Shizo ("we", "us"), based in Miami, Florida, United States.
LessonDone lets you connect your accounts on learning websites, queue your lessons and assignments, watch the sessions run live, and review the study guides it writes from them. This Privacy Policy explains what personal information we collect through the service, why, who can see it, how long we keep it, and the choices you have. It applies to lessondone.com and the service offered there.
If you have a question about this policy, write to [email protected].
Information we collect
The table lists each kind of information we collect, what we use it for, where it is stored, who can access it, and how long we keep it.
| Information | Why we collect it | Where it is stored | Who can access it | How long we keep it |
|---|---|---|---|---|
| Email address | To create your account, let you sign in and reset your password, and to contact you about the service. | The service database | You, the site owner and administrators | Until your account is deleted |
| Payment data | To add money to your wallet and to record what you paid, what you spent and what you withdrew. You pay through Cash App, PayPal or Zelle, which handle your payment details. We receive a notification (payer name, amount, time and the note you attach) and match it to your wallet. | The service database (a wallet ledger of deposits, charges and withdrawals) and the notification emails in the owner mailbox | You (your own wallet), and the site owner | Wallet records are kept while your account exists, and as long as needed afterwards for accounting and to resolve payment disputes. Payment notification emails are kept in the owner mailbox as long as needed for the same reasons. |
| Account data (username, password hash, profile) | To create and secure your account (username, password and settings). | The service database. Passwords are stored only as salted hashes. | You, and the site owner for support and security | Until your account is deleted |
| Credentials for other websites the user connects | To sign in to the websites you connect (for example IXL, CommonLit, Progress Learning and Colégia) and carry out the sessions you start. | The service database, encrypted | Only the automated process that runs your sessions. The site owner can see which accounts are connected but cannot view or export your passwords or browser cookies. | Until you disconnect the account or your account is deleted |
| Service activity and usage records | To run your sessions, show progress and results, keep your lesson list up to date, and track your credit balance. | The service database. Finished sessions and their detailed records are deleted a few minutes after they end. | You, and the site owner for support and security | Session details: a few minutes after a session ends. Lesson list, credit balance and ledger: until your account is deleted. |
| Cookies and similar technologies | To keep you signed in and remember your settings. | Your browser | You and the service | See the cookie list |
| IP address, device and browser data | To keep your account secure, show you where you are signed in, and prevent abuse. | The service database and the hosting provider request logs | You (your own sign-ins), the site owner, and the hosting provider | Sign-in records: while the sign-in is active and until it expires or is removed. Provider logs: the period the provider keeps them. |
| The note you write about who you are when you sign up | To understand who is using the service and to help with support. | The service database | The site owner and administrators | Until your account is deleted |
We collect information you give us directly (for example when you create an account or contact us), information created as you use the service, and information that your browser or device sends automatically.
Accounts on other websites that you connect
The service lets you connect accounts you hold on other websites. If you do, we store the sign-in details you provide for those accounts and use them only to carry out the actions you request, on your behalf.
Purpose: To sign in to the websites you connect (for example IXL, CommonLit, Progress Learning and Colégia) and carry out the sessions you start. Storage: The service database, encrypted. Access: Only the automated process that runs your sessions. The site owner can see which accounts are connected but cannot view or export your passwords or browser cookies. Retention: Until you disconnect the account or your account is deleted.
You can disconnect an account at any time from your account settings or by asking us. Connecting an account is optional, but the parts of the service that depend on it will not work without it.
Those other websites have their own privacy practices and terms. We do not control them, and they are not responsible for this policy.
How we use information
We use the information described above for the purposes below and for no other purpose without telling you first.
- To create your account, let you sign in and reset your password, and to contact you about the service.
- To add money to your wallet and to record what you paid, what you spent and what you withdrew. You pay through Cash App, PayPal or Zelle, which handle your payment details. We receive a notification (payer name, amount, time and the note you attach) and match it to your wallet.
- To create and secure your account (username, password and settings).
- To sign in to the websites you connect (for example IXL, CommonLit, Progress Learning and Colégia) and carry out the sessions you start.
- To run your sessions, show progress and results, keep your lesson list up to date, and track your credit balance.
- To keep you signed in and remember your settings.
- To keep your account secure, show you where you are signed in, and prevent abuse.
- To understand who is using the service and to help with support.
- To operate, secure and troubleshoot the service, including preventing abuse and fraud.
- To comply with legal obligations and to establish, exercise or defend legal claims.
How long we keep information
Finished sessions and their details are deleted shortly after they end. Account information is kept until your account is deleted.
The table in the "Information we collect" section gives the period for each kind of information. When information is no longer needed, we delete it or remove what identifies you.
Security
- Connections to the service use HTTPS.
- Passwords are stored only as salted hashes.
- Passwords and sign-in cookies for other websites are encrypted before they are stored.
- Sign-in attempts and sensitive actions are rate limited.
No method of storage or transmission over the internet is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep it private.
Your choices and rights
You can ask us for access to, correction of, or deletion of the personal information we hold about you. This covers: Email address; Payment data; Account data (username, password hash, profile); Credentials for other websites the user connects; Service activity and usage records; Cookies and similar technologies; IP address, device and browser data; The note you write about who you are when you sign up.
- You can update some details yourself in your account settings.
- You can ask us to delete your account and the information connected to it.
To make a request, follow the steps on our Privacy Requests page (/privacy-requests.html) or write to [email protected]. We may need to confirm your identity before we act on a request, and we respond within the time the applicable law requires.
Depending on where you live, you may have additional rights, for example under state privacy laws in the United States or under data protection law in the European Economic Area and the United Kingdom. Using this policy does not by itself mean that any particular law applies to or is satisfied by this service.
Children's privacy
- LessonDone is not directed to children under 13, and people under 13 may not use it or submit personal information to it.
- We do not knowingly collect personal information from anyone under 13.
- If we learn that personal information was submitted by someone under 13, we will delete it.
- If you believe a child under 13 has submitted personal information, write to [email protected] with what you know (for example a username or email address). We will delete the information and confirm when it is done.
International transfers
Our service providers may process information in countries other than the one where you live. Where this happens we rely on appropriate safeguards required by the applicable law.
Changes to this policy
We may update this policy. When we make a material change we will update the "Last updated" date above and, where appropriate, tell you in the service or by email. Please review this page from time to time.
Contact us
Questions, requests and complaints about privacy:
- Email: [email protected]