Privacy policy

This is a kid-facing learning product. We take children's privacy extremely seriously and design for minimal data collection from the ground up.

What we collect

• Parent email address (for sign-in and billing).
• Child profile: name, optional birth date, optional avatar URL.
• Learning data: quiz answers, scores, level progression, badges earned, streaks.
• Subscription records (Stripe customer ID, subscription ID, billing tier).
• Gift card delivery email (provided by parent when claiming).

What we do NOT collect

• No advertising identifiers, no third-party trackers, no analytics scripts.
• No precise or coarse location data.
• No contact lists, no social graph data.
• No biometric data.

How we use data

We use the data above to (a) authenticate the parent, (b) power the learning experience for the child, and (c) bill subscriptions via Stripe and deliver Amazon gift cards via Tremendous. We do not sell or rent data to anyone, ever.

Compliance

We follow the Children's Online Privacy Protection Act (COPPA) and the GDPR-K guidance. Parents are the data controllers for their children's information. We do not condition participation on collecting more data than necessary.

Your rights

Parents can request access, correction, or deletion of their child's data at any time by emailing the address listed in your dashboard settings. We action verified requests within 30 days.

Security

All data is encrypted in transit (TLS) and at rest. Access is gated by Supabase Row Level Security so each parent can only see their own children's records.

Contact

Privacy questions? Email support at the address shown in your dashboard after sign-in.