Data Rights & Removal

Cadets does not sell personal information, and we do not share personal information for cross-context behavioural advertising. We have never done so. There is no advertising network, data broker, or marketing partner receiving Cadet, instructor, or school data from us, and we do not run behavioural advertising on the service at all.

Because Cadet accounts belong to students who are frequently minors — and in some programs are under 13 — we treat this as a hard product rule rather than a preference that could be changed by a future business decision. Any change to it would require notice to schools and, where required by COPPA, fresh verifiable parental consent before the change could take effect for a Cadet account.

Personal information is disclosed only to the service providers we depend on to operate: Stripe, which processes payments, and Google Firebase, which provides our hosting, authentication, and database infrastructure. These providers act on our instructions and are not permitted to use the information for their own purposes.

The rights below are drawn from the California Consumer Privacy Act as amended by the CPRA, and from comparable US state privacy laws. We extend them to everyone who uses Cadets, regardless of the state they live in, because operating two standards would be confusing for schools that enrol students across state lines.

Right to know and to access

You may ask us what personal information we hold about you and receive a copy of it. For a Cadet account this ordinarily includes: full name; the personal email address used to sign in; the unit and company the Cadet is assigned to; rank; any position held within the unit; the record of tasks assigned and completed, including completion dates; and payment status, meaning whether a required fee has been recorded as paid, outstanding, or waived. We do not hold payment card numbers — those go directly to Stripe. You may also ask about the categories of information we collect, the purposes we use it for, and the categories of third parties we disclose it to.

Right to delete

You may ask us to delete personal information we hold about you. Where the request concerns records that your school controls, see section 7 — that is the most common reason a deletion request cannot be completed by us alone. Where we are the controller, we will delete the information and direct our service providers to do the same, subject to the narrow exceptions in section 8.

Right to correct

You may ask us to fix personal information that is inaccurate. In practice, most corrections — a misspelled name, a wrong unit assignment, an incorrect rank or position, a task marked complete in error — are faster to resolve through your instructor, who can edit these fields directly in the platform. Use the formal request route if your instructor cannot make the change or if you disagree with the change they have made.

Right to portability

Where we provide a copy of your information, you may ask to receive it in a structured, commonly used, machine-readable format so that you can move it elsewhere. We supply exports as CSV or JSON.

Right to opt out of sale or sharing

Because we do not sell personal information and do not share it for cross-context behavioural advertising, there is nothing for you to opt out of. We provide no “Do Not Sell or Share My Personal Information” mechanism because it would be misleading to imply the practice exists. If this ever changes, we will publish the mechanism before the change takes effect.

Right to limit use of sensitive personal information

We do not use or disclose sensitive personal information for purposes beyond those permitted without a right to limit — that is, we use it only to provide the service you or your school asked for.

Right to non-retaliation

We will not retaliate against you for exercising any of these rights. Making a request will not affect a Cadet’s standing in their program, their rank, their position, their assigned tasks, or their access to Cadets. It will not change the price of anything. Instructors and schools are separately prohibited under our Terms from penalising a Cadet for exercising a privacy right, and we ask that you report any such incident to safeguarding@allcadets.com.

We accept requests from four categories of requester:

Instructors may correct information for the Cadets in their unit through the platform as part of their ordinary duties. An instructor is not automatically an authorised agent for a Cadet and cannot direct us to delete a Cadet’s account without the school’s instruction.

1. Email privacy@allcadets.com. This is the only intake channel for formal data rights requests. Requests sent to other addresses will be forwarded, which slows things down.
2. Put the request type in the subject line — for example “Access request”, “Deletion request”, “Correction request”, or “Portability request”.
3. Tell us who the request is about. Give the Cadet’s full name as it appears in Cadets, the email address on the account, and the school and unit or company if you know them. If the name in the platform differs from the legal name, tell us both.
4. Tell us who you are and in what capacity you are writing — the Cadet themselves, a parent or guardian, an authorised agent, or school staff.
5. Describe what you want. If you want only part of the record deleted or corrected, say which part. Broad requests take longer because we have to write back to narrow them.
6. Respond to our verification email. See section 5. The clock on our substantive response runs from the date we receive the request, but we cannot act until verification is complete.

There is no charge for a request. We may charge a reasonable fee, or decline, only if a request is manifestly unfounded or repetitive, and we will explain our reasoning in writing before doing so.

We verify every request before acting on it. Deleting or disclosing a student’s record on the strength of an unverified email would itself be a serious privacy failure, so we would rather be slow than wrong.

• Cadets and instructors: we send a confirmation link to the email address registered on the account and ask you to confirm the request from there. For a deletion request we send a second confirmation after a short interval.
• Parents and guardians: we ask you to identify the Cadet and to provide evidence of the relationship. Where the school already holds that record, we will normally confirm with the school instead of collecting documents from you.
• Authorised agents: we ask for the signed permission or power of attorney and separately verify the Cadet or parent who appointed you.
• Schools: we confirm the request originates from a known staff account or the district’s email domain, and for deletions affecting multiple Cadets we confirm by a second channel.

Documents you send for verification are used only to verify the request, are not added to the Cadet’s record, and are deleted once the request is closed and any appeal window has passed. Please do not send government identification unless we specifically ask for it.

Some information is ours rather than the school’s — for example, account authentication data, support correspondence you have had with us, and the billing records we keep for our own accounting. We act on requests about that information directly.

We may decline all or part of a request where the law permits or requires it. The realistic cases are:

• The records are education records under the school’s control, as described above.
• We need the information to complete a transaction you asked for, or to detect and prevent fraud or security incidents.
• We are required to retain it — for example, transaction records retained for tax and accounting purposes, or records subject to a legal hold or preservation request.
• Complying would compromise the privacy of another person, which most often arises where a single record concerns more than one Cadet.
• The request relates to an open safeguarding investigation and deletion would destroy evidence. In that case we retain the minimum necessary and tell you that we have done so.

When we decline, we tell you which exception applies and to what part of the request. A partial refusal never blocks the rest of the request.

Reply to our response at privacy@allcadets.com with the word “Appeal” and tell us what you think we got wrong. Your appeal is reviewed by someone who was not involved in the original decision, and we aim to give you a written outcome within 45 calendar days. If we still decline, we will explain why and tell you how to complain to your state Attorney General or other supervising regulator.

General questions that are not formal requests can go to support@allcadets.com. Written correspondence may be sent to {{LEGAL_ENTITY}}, {{POSTAL_ADDRESS}}. This page and the rights described in it are governed by the law of United States, without prejudice to rights you hold under the law of your own state.

Cadets is an independent product and is not affiliated with, endorsed by, or sponsored by the U.S. Department of Defense or any branch of the U.S. Armed Forces.