iconfirm.appFAQ

Direct Notice to Parent and Consent for a Student to Use iConfirm — v2

Reviewed — enrollment-screen copy, effective 2026-08-31
Notice version: v3-2026-08-31
Effective date: 2026-08-31

Why you are receiving this notice

You are creating and authorizing an iConfirm account for a Student. iConfirm is operated by BIBS Specialty Services, Inc. Some Students are under 13, so the Children's Online Privacy Protection Act requires us to tell Parents what information we collect from children, how we use and disclose it, and to obtain verifiable parental consent before collection.

This notice applies to every Student enrollment, regardless of the Student's age.

Our contact information

BIBS Specialty Services, Inc.
735 Scanlan Avenue
St. Louis, Missouri 63139
office@iconfirm.app
314-222-2777

Information we want to collect

If you consent, iConfirm will collect or maintain the Student's:

We collect the Student's date of birth when you create the account, and use it only to check eligibility for the optional Discussion Board, which is limited to Students 13 and older. It is never shown to a Church Leader, never included in a roster or export, and not used for any other purpose. Photo uploads are disabled at launch and are not covered by this consent. We will provide new or updated notice and obtain any required consent before enabling a materially different photo feature.

If you begin enrollment but do not complete it or provide consent, we will delete the Student's contact and any incomplete Student information within 14 days, unless we need to keep a minimal record to prevent abuse or protect security.

How we use the information

We use Student information to create and secure the account, provide confirmation lessons, save Student work, display progress, follow sharing choices, process verified Parent requests, operate and protect the Service, and comply with law.

We do not sell or rent Student information. We do not use it for targeted advertising or another company's independent marketing. We do not use real Student reflections or other Student-generated content to train AI or language models.

Who may receive the information

Private reflections are not routinely read or monitored. They are not end-to-end encrypted. BIBS's sole authorized operator can technically access plaintext records through privileged database access when necessary to fulfill a verified Parent request, secure or troubleshoot the Service, comply with law, or address another documented operational need.

Retention

We retain Student information while the subscription is active to provide the Service. After paid access ends, ordinary use is intended to lock by day 5 while export remains available. Student content remains available for retrieval through day 90 and is then deleted from active systems and applicable backups under our control. We may retain minimal consent, transaction, security, dispute, and legal records longer when reasonably necessary for their specific purpose.

Your ongoing rights

You may email office@iconfirm.app from your verified Parent account email to:

Withdrawing consent or requiring deletion may end the Student's use of iConfirm. We will not collect more child information than is reasonably necessary for participation.

How we verify you

Resolved 2026-08-23. For a paid seat, our verification method is the payment-card process provided by Stripe; iConfirm does not receive or store the full card number. For a seat discounted to $0, we instead verify by confirming consent with the Parent directly before the Student's enrollment code is issued — comparable to the video-conference method enumerated at §312.5(b)(2)(iv). Every enrollment's verification method and timestamp are recorded regardless of which path applies.

Required enrollment choices

The production interface should use separate, initially unchecked controls and must record each choice with the notice version.

Required consent to collect and use

[ ] I am the Student's parent or legal guardian, or I otherwise have legal authority to provide this consent. I have read this Direct Notice, the Children's Privacy Notice, and the Privacy Policy. I consent to iConfirm collecting and using the Student information described above to provide and secure the Service.

Required consent to integral service-provider disclosures

[ ] I consent to iConfirm disclosing Student information to Supabase, Vercel, Resend, and Stripe only as necessary to operate, secure, and support iConfirm or comply with law.

(Note per memo finding F-15: this checkbox is likely unnecessary — Supabase/Vercel/Resend/Stripe probably fall outside COPPA's definition of "third party" as internal-operations support providers. Left in as belt-and-suspenders per the memo's own read; low priority to change.)

Consent to Student-directed sharing with Church Leaders

[ ] I authorize iConfirm to allow the Student to deliberately mark individual reflections or survey responses as shared with authorized Leaders at the participating Church. Private items will remain unavailable to Leaders through the Service.

This checkbox must remain genuinely optional and independently unchecked. Per memo finding F-15, Leader sharing is very likely not "integral" to the Service — a Student can complete every lesson, reflection, and survey without ever marking anything shared — which means a parent who declines this checkbox must still receive a fully working product. [VERIFY IN CODE] Confirm the enrollment flow does not block or degrade the account if this box is left unchecked.

Required consent record

Resolved. The parent_consent_events table records Parent ID, Student ID, UTC timestamp, direct-notice version, Privacy Policy version, Children's Privacy Notice version, Terms version, each consent choice, verification method, and discount/church-waived status for every enrollment. Confirm the enrollment flow actually writes a row here before treating this as launch-ready — not independently re-verified in this pass.