Contents
This Policy covers information collected through the KidCommerce portal and curriculum, for both parent accounts and the child profiles parents create within them.
From you (the parent/guardian): name, email, phone number, password (stored as a one-way hash, never in plain text), billing information (handled by our payment processor — we don't store full card numbers), and a record of your Terms/Privacy acceptance (version, timestamp, typed signature, and IP address).
About your child, that you provide: first name, date of birth, a login PIN (hashed, and only collected for children old enough to use their own login), a learning-style profile (how they learn best, interests, how they approach challenges, attention span, motivation, reading comfort) used to personalize lesson pacing and the AI companion's tone, and any savings-project choices you make on their behalf.
Usage data: lessons completed, tasks submitted/approved, KA$H/Koins activity, and basic technical logs (IP address, device/browser info, timestamps) for security and troubleshooting.
We do not collect a child's precise location, contact list, or any information directly from a child through open-ended free text to the AI companion beyond what's needed to deliver the lesson in that session.
KidCommerce is a service parents set up and manage on behalf of their children; we do not knowingly collect personal information directly from a child without a parent's verified consent, in line with the Children's Online Privacy Protection Act (COPPA).
We use a two-tiered consent process based on each child's age, confirmed when you add them during signup:
Either way, you can review, correct, export, or delete your child's information at any time from your portal, or by contacting us (see Section 10). We do not use a child's information for behavioral advertising, do not sell it, and do not condition a child's participation in an activity on disclosing more information than is reasonably necessary for that activity.
We share information only as needed to run the service, and never sell it:
We do not share child information with advertisers, and we do not use it to serve targeted ads to a child.
Passwords and PINs are hashed (never stored in plain text). Access to the database is restricted to what the service needs to function. No system is perfectly secure, and we'll notify you as required by law if we become aware of a breach affecting your information.
We keep account and child-profile information for as long as your account is active, plus a limited period after cancellation in case you resubscribe (see the KA$H/Koins grace period in our Terms). Verification artifacts used for COPPA consent are retained only in the minimal "result" form described in Section 3. You can request deletion sooner at any time.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your (or your child's) information, and to object to certain uses. You can exercise most of these directly from your portal, or by contacting us. [Placeholder: state-specific disclosures — e.g. California (CCPA/CPRA), Virginia, Colorado, and similar state privacy laws — should be reviewed and added by counsel based on where KidCommerce actually operates and where its users are located.]
If we materially change how we handle child information or this Policy generally, we'll notify you and ask you to re-accept the current version before it applies to your account.
Privacy questions, or to review/delete your child's data: privacy@kidcommerce.com [placeholder address — update before launch].