Privacy Policy

We collect the following types of information: parent name and email address provided during account registration; learning profile information you create for your child (such as name, age, and interests); your child's learning activity records and creative works on the platform; and technical data such as device information and access logs. We only collect the minimum information necessary to provide our educational services.

We use the information we collect to: provide and improve our educational services; recommend age-appropriate learning content for your child; generate learning progress reports for parents to review; ensure the security and stability of our platform; and send service-related notifications with your consent. We do not sell your personal information to third parties, nor do we use it for commercial purposes unrelated to our educational services.

Our privacy practices are designed with the Children's Online Privacy Protection Act (COPPA) framework in mind. Children under 13 must use this platform under the supervision of a parent or guardian. We do not collect personal information from children under 13 without verifiable parental consent. Parents have the right to review, modify, or delete their child's personal information at any time. Children's works are set to private by default and may only be publicly displayed with parental authorization. We do not claim formal COPPA certification — please contact us if you need details about a specific data flow for your family.

We use cookies and similar technologies to maintain your login session, remember your preferences, and analyze platform usage. The cookies we use include: essential cookies (to maintain basic functionality), functional cookies (to remember your preferences), and analytical cookies (to improve our services). You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect some platform functionality.

We implement industry-standard security measures to protect your personal information, including: encryption in transit and at rest (TLS 1.3); Supabase Row Level Security (RLS) so users can only access their own data; passwords hashed with bcrypt; and incident response procedures. We do not currently have a third-party independent security audit — if one is commissioned, we will state who and when on this page. While we make every effort to protect your data, no method of internet transmission can guarantee absolute security. If you discover any security issues, please contact us immediately.

We do not sell, rent, or trade your or your child's personal data to anyone, and we never share it for advertising. We share data only with a small set of named service providers (subprocessors), strictly to operate the platform: Supabase (database, authentication, and file storage for your account, your child's profile, and their saved work); our AI providers — SiliconFlow and Google (Gemini API) — which receive the prompts, and any image your child submits, needed to generate chat replies, stories, drawing guesses, and images, and which under their terms do not use this data to train their models; Google Analytics and Microsoft Clarity (anonymized, aggregate usage analytics with text content masked by default); and Creem (our payment processor, which handles billing details if you subscribe to Pro — we never see or store your full card number). When transactional email is enabled, Resend delivers it (see the email subprocessor section). Each provider may process data only to deliver its specific function to us and is bound by its own data-processing and privacy terms. We do not run third-party advertising on the service, and we do not send your data to advertising networks.

If you have any questions or suggestions about this Privacy Policy, or wish to exercise your data rights (including reviewing, modifying, or deleting personal information), please contact us at: support@kidsaitools.com. We will respond to your request as promptly as possible.