Privacy Policy

We collect the minimum needed to run the service: account information (parent email), learning progress, and usage analytics. Analytics are provided by Google Analytics 4 and Vercel Web Analytics. GA4 analytics cookies are denied by default, so GA4 runs without a persistent identifier unless an adult explicitly grants consent on a parent-facing page, and that consent never applies on children's activity pages. Vercel Web Analytics counts page views without cookies and without a persistent identifier.

Your information is used solely to provide educational services, track learning progress, and improve our platform. We never sell or share personal data with third parties for marketing purposes.

Data is held in Supabase (Postgres) with row-level security, served over TLS, and payments are handled by Stripe — we never store card details. Access is limited to what the service needs to function.

We build to the Children's Online Privacy Protection Act (COPPA): child accounts are created and controlled by a parent, and children are not asked for personal details in-product. Our own funnel database records child-originated events only where an active parental consent record exists. Our analytics are separate from that gate: Google Analytics and Vercel Web Analytics load on every page, including children's activity pages, where they receive only cookieless pageview and event pings that are not tied to a persistent identifier. GA4 consent can only be granted by an adult on a parent-facing page, and it is switched off again on children's pages. We hold no third-party COPPA certification and do not claim one.