First Move is built by Cardan Marketing Solutions, based in Calgary, Alberta. This page describes exactly what we collect from a student and parent using First Move, why, and what a parent can do about it.
The short version
Nothing is sold. Nothing is public. Study results, mistakes, and essays are held on the student's own device by default, and the only things that ever reach our server are what the app needs to coach the student or report back to the parent. We collect a last name now, for one specific reason — to check that a multi-child discount is actually being used by one household, not shared between friends. We still don't collect school names, health information, or passwords — there are none; accounts use one-time join codes instead.
Who this is for
First Move is offered to students in Alberta Grade 9 and up. We don't knowingly collect information from children under 13. If we learn that we've collected information from a child under 13 without a parent having set up the account, we'll delete it.
What we collect
From a parent, at registration
- An email address, first name, and last name, so we know who to send a report to.
From a student
- A first name, last name, and grade level. The last name exists for one reason: confirming that a multi-child discount is being used within one household, not shared between friends — it isn't used for anything else, and we still don't collect a school name.
- Quiz results: which topics were answered correctly, which were missed, and which wrong answer was chosen (the wrong answer chosen is what tells us what to teach next).
- Vocabulary/word-check results.
- Essay text and timing behaviour (how long spent planning versus writing) from the diagnostic essay tool, if used.
- Answers to setup questions about study habits, schedule, extracurricular commitments, and post-secondary goals — this is used to plan a realistic study schedule, not to judge the student.
- A random device identifier, generated on the device, used only to prevent abuse of the review feature (rate limiting). It isn't tied to a name.
What we deliberately don't ask for: health information, diagnoses, disability status, or anything clinical. If a parent wants to tell us something that matters, there's a free-text field for it — we don't go looking for it.
What stays private, even from a parent
Before a study session, a student answers a short honesty check-in — where their phone is, whether they're distracted, that kind of thing. Those specific answers are never shown to a parent. They're stripped out on our server before a parent's report is generated. Honest self-report about distraction only works if the student trusts it stays private, so we built it that way rather than promising it and hoping.
How it's used
- Running the trainer. Scores, mistakes, and vocabulary results are stored on the student's own device and used to decide what question comes next. This works offline.
- The coaching review. When a student requests a review, we send Anthropic's Claude API the performance data needed to diagnose what went wrong — subject, missed topics, and which wrong answer was picked. We do not send a name. Claude returns a diagnosis and new practice questions, which are checked against a validator before they're shown to the student.
- The parent report. A parent can see their own child's scores, mistakes, and essay results — never another family's.
- Aggregate research. While we run a small pilot to see whether the training approach actually helps, results may be pooled into overall statistics — for example, average scores across everyone using the app. Individual results are never published or shared outside a family's own report, and any statistic drawn from a group too small to stay anonymous is withheld rather than shown.
Who we share data with
- Anthropic (the Claude API) — only for the coaching review described above, and only performance data, never a name.
- Cloudflare — our hosting and storage provider. Data submitted to our server is stored in Cloudflare's infrastructure.
We do not sell data, run advertising, or use third-party trackers or analytics on the app itself.
How long we keep it, and how to delete it
We keep account and study data for as long as the account is active, so a parent's report stays useful term over term. A parent can request deletion of their family's data at any time by emailing marc@cardanmarketing.com — we'll confirm once it's done. (We're working on making this a one-tap option inside the app itself rather than an email request.)
Security
We use reasonable technical measures to protect the data described above — access to it requires a private token, and nothing is stored with a password to leak in the first place, because there are no passwords. No online service can guarantee perfect security, and we'll tell affected families directly if that ever changes.
Changes to this policy
If this policy changes in a way that matters, we'll post the update here and change the date at the top of the page.
Contact
Questions about any of this: marc@cardanmarketing.com