Privacy Notice
Version 6, in use since Saturday, October 31, 2026.
In short
- We collect only what we need to run a program and keep your child safe.
- We do not sell information. We do not use it for advertising. The site has no advertising or tracking scripts.
- Your child does not use this site and types nothing into it. You do.
- Details about emergencies, collection and support needs are seen only by our safeguarding lead, and every time they are read is recorded.
- Once your child has a confirmed place, your child and each adult who may collect them get an ID card with a photograph, which our staff scan at the door. Every scan is recorded.
- At the classrooms, our Welcome Screen reads ID cards to check children in and show them to their room. An adult may choose to check in with their face instead. We never use face recognition on children, and never to decide who may collect a child.
- In class, your child uses the computers of the room without an account of their own, and types at most their first name in their programs. Cameras in class are pointed at objects, never at people.
- When a course ends, your child may receive a certificate with the name you choose. Anyone with its code can check that it is genuine; the check never shows a name.
- If paying is hard, you may ask for more time or help from your family area. Only our administrators read what you write.
- You can ask to see or correct your family's records, or ask us to delete them.
Who we are
This site is run by ILM BRIDGE LLC, a New York limited liability company doing business as ilmBridge Solutions ("ilmBridge", "we"). We are responsible for the information described here.
To reach us about privacy, write to privacy@ilmbridges.com or to:
ILM BRIDGE LLC
2195 Central Ave
Schenectady, NY 12304
What we collect, and why
About you, the parent or guardian
| What | Why |
|---|---|
| Your name | To know who is registering the child |
| Your relationship to the child | To confirm you may register the child |
| Your email address, the one you sign in with | To sign you in, and to tell you about your registration, the schedule and changes to it |
| Your phone number | To reach you on the day if a session changes or your child needs you |
| Your preferred language | So that we know which language to use when we speak with you |
| A picture of you | So that the staff who run the program recognise you at the door, and for your ID card. Needed before the first session if you will collect your child. Please add a picture of yourself only here. We make it smaller and remove the hidden details a phone adds to a photograph, such as where it was taken |
| How you prefer to be contacted | So that we use email or a phone call as you prefer |
About your child
| What | Why |
|---|---|
| Legal name | To hold the place in the right name |
| The name your child goes by, if different | So that instructors use the name your child uses |
| Month and year of birth | To check that the program suits your child's age. We do not ask for the day |
| School, if you choose to give it | So that we can group children by school year and pitch the teaching |
| Earlier experience, if you choose to give it | So that the instructor can pitch the teaching |
Safety details, asked only after we offer a place
| What | Why |
|---|---|
| Up to three people to call, at least one, with their relationship to your child and their phone number | To reach an adult quickly if your child is unwell or hurt |
| Which of those people may collect your child, and a photograph of each of them | So that we release your child only to someone you have named, and can see that it is them |
| How your child leaves after a session | To know whether your child is collected or may leave alone |
| Whether your child has an allergy or a support need, with a short note | So that the adults at the session can keep your child safe and included |
| Whether you would rather talk than write the note | So that our safeguarding lead calls you instead |
We do not ask for these details when you apply. We ask when we offer a place. Staff decide on offers without seeing them.
The people you name to call are other adults. Please tell them that you have given us their name, relationship and telephone number, and, for those who may collect, their photograph, and why. We use them only to reach them about your child and to check them at the door, and keep them only as long as the safety details.
ID cards and collecting your child
Once your child has a confirmed place, we make an ID card for your child and for each adult who may collect them, you included. You print the cards from your family area, or we print them for you.
| What | Why |
|---|---|
| A photograph of your child, which you give us | So that the adult at the door can match your child to the adult collecting them. We make it smaller and remove the hidden details a phone adds to a photograph |
| A photograph of each adult who may collect your child | So that the adult at the door can see that the person collecting is the person you named. We do not release your child to a named adult with no photograph on record; we keep your child with our staff and call you |
| A card number | A long random code printed on the card as a QR code. It means nothing by itself; only our staff, signed in, and our Welcome Screen can look it up |
| Each scan of a card: who scanned it, which card, and when | To show who was checked at the door |
| When your child arrived at a session, and when they left: the time, the name of the adult who collected them, and the member of staff who let them go | To know who is at each session, and that each child left with an adult you named |
A card shows the photograph, the first name and the group of a child, or the name of an adult. It shows no surname of a child, no date of birth and no address. When a staff member scans an adult's card, they see that adult's photograph and name and the children they may collect that day, with each child's photograph, and nothing else: no telephone number and no safety note.
At collection, a person compares the photograph with the face in front of them. We never use face recognition on children, and never to decide who may collect a child. We never make a face print from these photographs, and we never use them on the site, in publicity or anywhere else. They are separate from your answer on photographs and video during sessions.
A lost card is switched off, and a new one made with a new number. Switch it off yourself in your family area, or tell us.
The Welcome Screen at the classrooms
At the place where your child's group meets, a large screen near the classrooms, our Welcome Screen, welcomes people as they arrive. It has a camera, and a sign beside it says so.
- A child holds up their ID card to the camera. The screen says hello by first name and shows the room of the group, for example "Welcome, Bram! Young Innovators is in the Computer Lab". Your child is marked arrived.
- A parent or another adult you named holds up their own card, or checks in with their face if they chose to (below). The screen shows the first names of your children expected there at that time, and you check them in together with one press. "Not now" checks nobody in.
- At collection, nothing changes: our staff at the door scan the collecting adult's card and compare the photograph, as above. The screen never lets a child go.
| What | Why |
|---|---|
| That your child arrived, the time, and which screen recorded it | To know who is at each session, as with the door scan |
| When an adult checks children in at the screen: which adult, which children, the time, which screen, and whether by card or by face | To show who checked each child in |
The screen shows first names only, never a surname or a photograph, and never a list of who has not arrived. What it shows clears after a few seconds. The camera looks at the picture to find ID cards; it looks for faces only for fifteen seconds after an adult presses "Check in with faces". No picture or video from the screen is kept, recorded or sent anywhere. Only the number of a card it reads, or the face prints described below, are sent to our server. So that it does not greet the same person twice, the screen remembers for a few minutes (ten, unless our administrators choose another time up to an hour) that it greeted someone, by a code that says nothing by itself; anyone it sees again in that time gets a short "Welcome back". It forgets this when the time is up, or when its page is closed. The screen may play short sounds of its own making, such as a chime when someone is checked in. If we switch on the spoken welcome, the screen also says aloud the first name it shows, such as "Welcome, Bram", in a voice that runs on the screen itself; it never says a surname or a room, and nothing said is recorded or sent anywhere.
Checking in with your face: for adults who choose it
Checking in with your face is optional, and only for adults: a parent or guardian with an account, an adult you named as allowed to collect who agrees for themselves, and our staff. It is never needed for a place, and an ID card always works instead. No face print of a child is ever registered or kept.
What a face print is. A short list of numbers worked out from a photograph of a face. Two prints of the same face are close to each other. The photograph cannot be rebuilt from the print.
How you register. In your family area, under Faces for the Welcome Screen, you read what it is, tick that you agree and type your full name. Your phone's browser takes three photographs and works out your print on the phone itself. The photographs are not sent to us and are not kept on the phone. Only the print is sent.
An adult you named. An adult you named as allowed to collect, such as an uncle, may register their own face on your phone. You press "Ask them to register" and hand them the phone; the page then speaks to them, and they tick and type their own name to agree. We record that they agreed, on your phone. Their print is used only after our staff have seen them in person once, at the door, and confirmed it.
How it is used. At the screen, an adult presses "Check in with faces". For the next fifteen seconds the screen looks at the faces in front of it, the nearest first, then the next nearest; faces far behind are left out. For each, it works out a print, sends it to our server, and forgets it. Our server compares it only with the prints of the adults expected at that place that day, and if one is close enough and clearly the closest, the screen greets that adult and shows their children, as with a card. How close is close enough is one of three levels (strict, standard or relaxed) chosen by our administrators; each change is recorded. Anyone greeted is not looked at again. If no print is clearly the closest, nothing is shown for that face; a wrong name is worse than a card. A child who is in front of the screen in those fifteen seconds has a print worked out to be compared, which matches nobody and is forgotten at once: no face print of a child is ever registered or kept.
| What | Why |
|---|---|
| Your face print | To recognise you at the Welcome Screen, if you chose it |
| Your agreement: the words you agreed to, their version, your typed name, the time, and the phone it was given on | To show that you agreed, and to whom the print belongs |
| Each check-in by face: whose print matched, the time and which screen. Never the print | To show who checked children in |
| When you registered, and when the print was removed | To show that it was kept no longer than said here |
You can remove it at any time, in your family area, or by asking our staff. Removing an adult from the people who may collect removes their print too. Without a print you check in with your card, exactly as before.
If something happens at a session
If something happens at a session that we should write down, such as a fall, an illness, a worry about a child's safety or a problem at collection, the member of staff who saw it writes a report the same day, and our safeguarding lead keeps it. A report is never changed; anything learned later is added to it, with its date.
| What | Why |
|---|---|
| A report of something that happened at a session: when and where, which children were involved, what happened, what we did, and when we told you | To look after your child, to learn from what happened, and to answer any question about it later |
In class
Your child works on the computers of the room where the group meets, which belong to the host, and on ilmBridge's kits. Your child does not sign in to them with an account of their own. In their programs, learners type at most their first name, never their surname, age, date of birth, address or school. The tools a course uses are listed in the participation permission.
| What | Why |
|---|---|
| The programs and files your child saves in class, kept in the group's class folder on the room's computers | So that the work can go on from one class to the next |
| Pictures of objects taken with the class webcams. Never of people | To teach how a computer learns to recognise objects |
| Photographs of what a pair or team has built, showing the work and not faces, taken on ilmBridge's own device | For the team's logbook and poster |
| The team's paper logbook, design plan, poster and short report | The course's project work |
| The instructor's notes of your child's progress: answers to short quizzes, the course's checks along the way, and the final project's scores (beginning, developing or strong) | To help your child and to tell you how they are doing. They are not a grade, and they are never printed on a certificate |
| A make-up done after a missed class | So that it counts towards a certificate |
The host's staff do not open the class folder. If you said yes to photographs and video during sessions, the photographs permission covers pictures of your child at work; otherwise no picture shows your child.
Certificates
When a course ends, your child may receive a certificate: of completion, if they came to at least three quarters of the sessions held (an approved make-up counts as a session) and took part in presenting the final project; or of participation, if they came to at least half. The group's instructor proposes it from the record of arrivals, and an administrator approves it. You print it, or save it as a PDF, in your family area.
| What | Why |
|---|---|
| The name to print on your child's certificates, if you choose one other than the legal name | To print the name you chose |
| Each certificate: its kind, the course, its dates, the name printed on it, a code, who signed it, the number of sessions held and attended, any make-ups, and whether the final project was presented | To issue the certificate, to show how it was earned, and so that anyone you show it to can check it |
| Each check of a code on our check page: the time, the answer given, and a scrambled form of the network address it came from, which cannot be turned back into the address | To count checks, so that nobody can try one code after another |
A certificate shows no date of birth, address or photograph. Anyone who has a certificate's code can check at ilmbridges.com/certificates/check that it is genuine, and see its kind, the course and the months. The check page never shows a name: if a name is typed, it says only whether it matches. A certificate that is corrected gets a new code, and the old code then says it was replaced; a certificate that is withdrawn says it is no longer valid.
About your registration
| What | Why |
|---|---|
| The program and group you asked for, and each step of the registration | To run the registration |
| The notices you answered: the exact text, its version, your answer, the time, and the account | To show what you agreed to |
| Your answer on photographs and video, and, when you say yes, the full name you type to sign it | To follow your choice, and to show that you gave it |
| Whether you asked to talk about help with the fee when you accepted your offer, and any request for more time or help you send from your family area: what you ask for, a day you name, any words you write, and our answer | To answer you privately |
| A discount you ticked when asking for a place, such as one for students of a partner school, and whether our staff confirmed it, with the school where it was checked | To apply the discount, and to show why it was applied |
| Each discount written with the fee when a place is offered | To show what you were asked to pay, and why |
| How you applied or accepted: on this site, on paper, in person or by phone, and who entered it | To show how each answer was given |
If you register on paper, in person or by phone, a member of staff enters the registration and your answers for you. When you later sign in with the same email address, and prove it is yours with the code we send, you see that registration in your family area.
Messages to your child's group
When staff write to the families of a group, the message is emailed to each parent or guardian of a confirmed place, on its own, and kept in your family area. Staff are asked not to name any child in a message. Messages are never changed or removed once sent.
The newsletter
Anyone may sign up for our newsletter, at the foot of a page of the site. It is for adults.
| What | Why |
|---|---|
| Your email address | To send you the newsletter |
| When you asked, when we sent the email to confirm, and when you confirmed | To show that you asked for it, and to stop the form being used to send floods of email |
We send one email with a link to confirm. Until it is pressed we send nothing else, and an address that is not confirmed is deleted soon after the link runs out, two days later. Every newsletter ends with a link that deletes your address from the list at once; many mail apps also show it as "Unsubscribe". You can also write to us and we delete it. The newsletter is separate from registration: signing up does not register a child, and registering does not sign you up.
About payments
We record payments. We do not take them through this site.
| What | Why |
|---|---|
| The amount, the date and the way you paid | To keep an accurate record and give you a receipt |
| The name of the person who paid | To show on the receipt |
| The name on the bank account you paid from, if you pay by Zelle | To match your payment to your registration |
| Help with the fee we give you: more days, a scholarship, payment from a grant we hold, or paying later, with the amount and the days | To show what you owe and by when |
| Why we gave the help, in a few words written by our administrators | So that the second administrator who approves it knows why |
We do not collect card numbers or bank account numbers. A receipt names the person who paid and the program fee. It does not name your child. Paying later has no interest and no fee.
When you use the site
| What | Why |
|---|---|
| A record of each sign-in, with the time | To protect your account |
| The address of your device on the network, and the kind of browser | To run the site and to stop misuse |
| A cookie that keeps you signed in | So that you do not sign in on every page |
| A cookie that remembers where you were going while you sign in, for fifteen minutes | To take you back there after signing in |
| A cookie that remembers your choice on reduced motion | To follow your choice |
We use no other cookies, and no analytics. The Welcome Screen keeps one cookie of its own, which tells our server which screen it is.
What we do not collect
Documents, medical records, government identity numbers, the day of birth, and anything typed by a child on this site. We hold no photograph of your child except the one you give us for the ID card and, if you said yes to them, photographs during sessions. We register or keep no face print of a child, and we keep no picture or video from the Welcome Screen.
Who sees what
| Information | Who sees it |
|---|---|
| Your contact details, your child's name and age, and the registration | The staff who run the program, each signing in with a password or an emailed code and an authenticator app |
| Photographs for the ID cards | The staff at the door (our administrators, our safeguarding lead and our instructors), only when they scan a card. Every scan is recorded. Our administrators also see your child's photograph in your family's records |
| When your child arrived and left, and who collected them | The staff at the door, on the day, by the name your child goes by (an instructor sees only the groups they teach); our administrators, who may also make a report of a group's attendance, recorded each time it is taken as a file |
| What the Welcome Screen shows | Whoever is standing near it: a first name and a room, for eight seconds; and, if the spoken welcome is on, whoever can hear it: the first name |
| A face print | Nobody. A computer compares it with the print the screen sends, and gives back a name or nothing. Our administrators see only whether an adult has registered, when, and when the print was last used |
| A report of something that happened at a session | Our safeguarding lead only. The member of staff who writes a report cannot read it again once it is sent |
| Safety details | Our safeguarding lead only, one registration at a time. Every reading is recorded with the person and the time. Before a session the lead may print a list of the group for the adults running it. It says who printed it and when, and is destroyed after the session. Every print is recorded |
| A request to talk about help with the fee, or for more time or help, the words you write, and why we gave any help | Our administrators only |
| The help with the fee we gave: its kind, the amount and the days | Our administrators and the staff who keep the accounts. Never your child's instructors or other families |
| Payment records | The staff who keep the accounts. A payment is recorded by a different person from the one who received it |
| Your answer on photographs and recordings | The staff who run the program |
| A message to your child's group | The parents and guardians of the group's confirmed places, and the staff who run the program |
| Your address on the newsletter's list | Our administrators. No reader is ever shown another reader's address |
| Class work, photographs of the work and the instructor's notes of progress | The group's instructors and our administrators; the learners of the same pair or team see their shared work; you, when you ask |
| Certificates | You, in your family area, and the staff who run the program. The group's instructor sees whether a certificate was proposed and approved, not its code. Anyone who has a certificate's code sees its kind, the course and the months, never the name |
Lists we make for running a group
Staff can make these lists. Each one is recorded before it is made: who made it, for which group or period, and how many rows it holds.
| List | What it holds | What it is for |
|---|---|---|
| Parents and guardians to telephone | Name, telephone number, language, whether an email reaches you, registration reference. No email address, no child | To call families when a session changes at short notice |
| Attendance sheet | The name each child goes by, and a column for each session | For the adults at the session |
| Payments | Each payment of a period: amount, date, way paid, who paid, the name on the account paid from, who recorded it, and the discount or help an entry gives. No child | To keep the accounts |
The host
Programs may be held at a partner's premises. We give the host nothing about you or your child, with one exception: if you tick a discount for students of the host school, we ask the school to confirm that your child is one of its students, giving it your child's name and nothing else. The Welcome Screen may be the host's own screen, used by us; what it shows and reads is ilmBridge's, and the host sees nothing of it beyond what anyone near it sees. Where you may pay in person at the host's premises, you pay our own staff, and we give you the receipt.
Once a place is offered, your family area shows where the group meets: the place, its address, how to get in, the room and a note on arriving.
Suppliers
These companies hold or pass information for us, under their terms, in the United States.
| Supplier | What it does for us |
|---|---|
| Vercel | Runs the website |
| Supabase | Holds the database, signs you in, and keeps daily copies of the database |
| Resend | Sends the site's emails, the newsletter among them |
| Microsoft | Provides the mailboxes you write to |
The model that works out a face print is open software served by our own site and run in the browser. No outside service sees a face or a face print.
Our emails carry no child's name. A message to a group carries the words staff wrote; every other email gives the registration reference and links to the page where you sign in.
Nobody else
We do not sell information, face prints included. We do not give it to advertisers. We share it with others only if the law requires it, or to protect a child from harm. We never share a face print.
If you work with us
This part is for our staff and instructors.
| What | Why | Kept for |
|---|---|---|
| Your name, email address, role and job titles | To give you the right screens in the console | While you hold a role, then 2 years |
| Your sign-ins and what you do in the console | To protect families' records | 2 years |
| Your photograph and staff card | So that families and the host can see who you are | Until you remove it, or your role ends |
| When you arrive at a session, if you check in at the Welcome Screen with your card or your face: the session, the time and which screen | To know which adults are at each session | 2 years after the group's last session |
| Your face print, only if you choose it, with your agreement | To recognise you at the Welcome Screen | Until you remove it, or your role ends |
| Your signature, only if you give it | To print it on the certificates our administrators issue, when they choose you to sign | Until you take it back; certificates already issued keep it for as long as they are kept |
| A certificate you receive, of instructor training or of thanks | To give it to you, and so that it can be checked | As for families' certificates, below |
Our administrators read the record of arrivals; on the day, our safeguarding lead sees it too; you see your own. A face print is never a condition of working with us: your card always works instead.
How long we keep it
| Record | Kept for |
|---|---|
| A registration that did not lead to a place | 90 days after the group's first session |
| Safety details | 30 days after the group's last session |
| Photographs of your child and of the other adults who may collect, and the ID cards | 30 days after the last session of your child's last group; the cards stop working then |
| A face print of a parent or of an adult you named | Until it is removed, and at the latest 30 days after the last session of your child's last group. An adult's print also goes when you remove them from the people who may collect |
| The record of each scan of a card, and of each check-in at the Welcome Screen | 2 years, with the record of who did what in the system |
| The record of when your child arrived and left a session, and who collected them | 2 years after the group's last session |
| A report of something that happened at a session | 3 years after it happened, or until each child named in it turns 21, if that is later |
| Your details, your child's details and the notices you answered, for a confirmed place | 2 years after the group's last session |
| Payment records and receipts, with any help with the fee we gave | 7 years |
| A request for more time or help, the words you wrote, our answer, and why we gave any help | 2 years after the group's last session |
| Certificates, with the name printed on them and the attendance that earned them | For as long as ilmBridge issues certificates, so that a certificate can still be checked years later. At your request we remove the name, and the code is then no longer found |
| The record of each check of a certificate's code | 2 years, with the record of who did what in the system |
| The class folder: your child's files and the pictures of objects | 30 days after the group's last session, then deleted. Before then you may ask for a copy of your child's own files |
| The team's paper logbook, poster and report | Given to the team's learners at the end of the course |
| The instructor's notes of progress | 2 years after the group's last session |
| The record of who did what in the system | 2 years |
| Records of sign-ins and of requests to the site, kept by our suppliers | Up to 30 days |
| Copies of the database | 7 days for the daily copies; 8 weeks for the weekly copies |
| Forms signed on paper | 6 months after the group's last session, locked away in the office room the host lets us use, then shredded |
| Your picture | Until you remove it, or your family's records are deleted. Without it you cannot collect your child |
| Your address on the newsletter's list | Until you leave the list. An address that is not confirmed: until shortly after its link runs out, two days after you asked |
At the end of each period the record is deleted, or kept without anything that names a person. We keep a record longer only while a safeguarding or legal matter is open; we never keep a face print longer. A deleted record leaves the copies of the database when those copies are replaced.
Your choices
You can ask us to:
- show you the records we hold about you and your child;
- correct anything that is wrong;
- delete your family's records;
- withdraw a permission you gave;
- remove a face print;
- remove the name from your child's certificates.
You can change your own details, and your child's details while no place is held, in your family area. You can also give a new answer on photographs and recordings, change the safety details while a place is held, and register or remove a face print; your earlier answer stays on record. For anything else, write to privacy@ilmbridges.com. We answer within 5 days.
If you ask us to delete records while your child is in a program, we may not be able to keep the place. We will tell you before we delete anything. Removing a face print never affects a place.
The notices you answered and the payment records are kept for the periods above even after a request to delete, because they show what was agreed and paid. We keep them without your contact details where we can.
How we protect it
- Staff sign in with a password or an emailed code, and always with a code from an authenticator app.
- You sign in with a one-time link or code sent to your email address. There is no password to lose.
- Every request goes through our own server, and the database checks each one, so that one family cannot see another.
- Safety details are kept apart, and every time they are read or printed is recorded.
- Every scan of an ID card is recorded. A card holds no information by itself.
- The Welcome Screen is joined to one place by our administrators, and can be cut off at once. Face prints are kept where no person can read them; only the screen's own steps compare them.
- A change to the fee, to how families are asked to pay, or to the words of a notice needs a second administrator's approval.
- Copies of the database are made every day.
- The site loads no advertising or tracking scripts.
No system is perfectly secure. If information about your family is lost, or seen by someone who should not see it, we tell you as soon as we can, and we tell anyone else the law requires us to tell.
Children
This site is for adults. Children do not have accounts on it and are not asked to type anything into it. In class, children use the room's computers as described under "In class", without accounts of their own. No face print of a child is ever registered or kept. The newsletter is for adults too; if we learn that a child signed up, we delete the address.
Changes to this notice
If we change this notice we publish the new version with its date. If the change affects what you agreed to, we ask you again.