Privacy notice

Not A Classroom, LLC is a limited liability company in Miami, Florida. It builds the learning engine described on this site and licenses it to other organizations. You can reach us about anything in this notice at enrollment@mybizkids.com.

This notice covers this website and the education products described on it. Where an organization licenses the engine and runs it under its own brand, that organization decides what it collects from its own users, and its own privacy notice governs that — not this one.

Not A Classroom is not a covered entity under HIPAA. It is not a health plan, not a health care clearinghouse, and not a health care provider that transmits health information in connection with a covered transaction. It is also not a business associate: it does not create, receive, maintain or transmit protected health information on behalf of a covered entity.

The medication-education product transmits no protected health information. A code on a prescription identifies a medication — which drug, which language — and never a person. There is no patient identifier in the code, nothing in it is linked to a prescription record, and scanning one tells us nothing about who scanned it.

HIPAA not applying is not the same as nothing applying. See breach notification below.

The pharmacy demonstration

Nothing. The medication schedule you type is held in the page while you have it open, and the calendar file is assembled by your own browser and handed straight to your device. No request carries it anywhere, and the page writes nothing to your browser's storage. Close the tab and it is gone.

The medication library

Generated lessons are cached on our side so the same medication does not have to be generated twice. The cache is keyed on the medication name and the language and nothing else — no visitor, no session, no account is attached to an entry, because there are no accounts. The medication name and language you type are sent to our text-generation provider in order to produce the lesson. The library also keeps a short-lived rate-limiting counter for about an hour, stored under a one-way hash of the requesting network address rather than the address itself, purely to stop the generator being run in a loop. Your browser stores the library access code locally on your own device so you do not have to retype it; it is never sent anywhere but to us, to check it.

The contact and licensing forms

Exactly what the person filling them in types: on the licensing application, the organization, contact name, email address, telephone number, number of locations, volume band, territory, any exclusivity request, and the message; on the general contact form, the name, email address, the program named, and the message. Nothing is inferred and nothing is added. Submissions are delivered to us through our web host's form service and are used to answer the enquiry.

Server logs

Our web host records ordinary request logs — the address a request came from, what was requested, and when — as part of serving the site. We do not build profiles from them and do not combine them with anything else.

Fonts

Every page on this site loads its two typefaces from Google Fonts, which means your browser makes a request to fonts.googleapis.com and fonts.gstatic.com and those requests reveal your network address to Google. That is the only third-party request any page on this site makes. It serves fonts; it is not advertising and it is not analytics.

There is no analytics on this site, no advertising, no tracking pixel, no tag manager and no cookie set by us for any purpose. There is no cookie banner because there is nothing to consent to.

Payment

Payment will be processed by Stripe. Stripe holds the card details and handles the transaction. We never see a card number, we never receive one, and we store nothing from a card. What we get back from Stripe is whether a subscription is active.

Where it lives

In our own database, encrypted in transit and encrypted at rest. It is not sold, not rented, not shared with anyone for their own purposes, and not moved into any product other than the one the subscriber signed up for.

HIPAA does not apply to us, but the Federal Trade Commission's Health Breach Notification Rule may. If there is ever a breach of unsecured health-related information we hold, we will notify the individuals affected, and the Federal Trade Commission, as that rule requires — and any other authority a law in force at the time requires us to notify.

Email enrollment@mybizkids.com and ask. You can ask to see what we hold about you, to correct it, or to have it deleted. We will answer within thirty days.

Deletion means deleted. The record is removed from the live database, and from our backups as those backups age out on their normal cycle — it is not flagged, hidden or retained in a form we could bring back.

Because there are no accounts today, there is nothing yet to see or delete for anyone beyond what they sent us in a form. If you sent us a form and want it removed, that request works now.

Form submissions are kept while we are dealing with the enquiry and for as long as the business relationship it started continues, and are deleted on request at any time.

Cached library lessons are kept indefinitely, because a lesson about a medication is not about a person and there is nobody attached to it to retain. The rate-limiting counter expires within about an hour.

When subscriptions open: if a subscriber cancels, the subscription stops and we delete the email address and the medication schedule within thirty days of the paid period ending, unless the subscriber asks us to delete them sooner — in which case we do it on request. We keep only the record of the transaction itself for as long as tax and accounting law requires.

This service is not directed at children under thirteen, and we do not knowingly create an account for one. Where the engine is licensed to a school or a program that teaches children, that organization holds the relationship with the child and the parent, and its own notice and consents govern it.

If you believe a child under thirteen has given us information directly, email enrollment@mybizkids.com and we will delete it.

When what we do changes, this notice is updated and re-dated to match. The date at the top is the date the current version took effect. It reads 20 August 2026.

See also the terms of service.