Privacy Policy

We collect the following types of information: parent name and email address provided during account registration; learning profile information you create for your child (such as name, age, and interests); your child's learning activity records and creative works on the platform; and technical data such as device information and access logs. We only collect the minimum information necessary to provide our educational services.

We use the information we collect to: provide and improve our educational services; recommend age-appropriate learning content for your child; generate learning progress reports for parents to review; ensure the security and stability of our platform; and send service-related notifications with your consent. We do not sell your personal information to third parties, nor do we use it for commercial purposes unrelated to our educational services.

Our privacy practices are designed with the Children's Online Privacy Protection Act (COPPA) framework in mind. Children under 13 must use this platform under the supervision of a parent or guardian. We do not collect personal information from children under 13 without verifiable parental consent. Parents have the right to review, modify, or delete their child's personal information at any time. Children's works are set to private by default and may only be publicly displayed with parental authorization. We do not claim formal COPPA certification — please contact us if you need details about a specific data flow for your family.

We use cookies and similar technologies to maintain your login session, remember your preferences, and analyze platform usage. The cookies we use include: essential cookies (to maintain basic functionality), functional cookies (to remember your preferences), and analytical cookies (to improve our services). You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect some platform functionality.

We implement industry-standard security measures to protect your personal information, including: encryption in transit and at rest (TLS 1.3); Supabase Row Level Security (RLS) so users can only access their own data; passwords hashed with bcrypt; and incident response procedures. We do not currently have a third-party independent security audit — if one is commissioned, we will state who and when on this page. While we make every effort to protect your data, no method of internet transmission can guarantee absolute security. If you discover any security issues, please contact us immediately.

If you have any questions or suggestions about this Privacy Policy, or wish to exercise your data rights (including reviewing, modifying, or deleting personal information), please contact us at: support@kidsaitools.com. We will respond to your request as promptly as possible.