Safety Center

We review AI tools we recommend against a published rubric written from a parent perspective, covering age fit, privacy behavior, subscription model, and advertising. The full rubric — including what we currently cannot test for — is laid out on our methodology page.

Our platform is designed with parental involvement as a core principle. All AI learning missions encourage parent participation, and key actions require parental confirmation. Parents can control daily usage time, content filtering levels, and more through safety settings.

All user data is encrypted using industry-standard TLS 1.3 for transmission and at rest. We do not collect unnecessary personal information. All data is stored on security-compliant cloud infrastructure. Passwords are hashed with bcrypt and never stored in plaintext.

Our privacy practices are designed with the children's online privacy frameworks (COPPA / GDPR-K) in mind. Accounts for children under 13 require parental authorization. We do not sell user data. To provide AI features (e.g. image generation), limited data is sent to subprocessors named in our privacy policy, used only to fulfill the request. We do not display targeted advertising on the platform.

AI-generated content may not always be accurate or appropriate. We have safety filters at every AI interaction point and educate children to critically evaluate AI outputs through our learning missions. If inappropriate content is found, it can be immediately reported through our reporting feature.

Our security architecture includes: Supabase Row Level Security (RLS) so users can only access their own data, the standard DDoS protection that ships with Vercel and Supabase, and app-level rules that block unauthorized AI crawlers from reading user works. We do not currently have a third-party independent security audit — if we ever commission one, we will state who and when on this page.