Privacy Policy

1. Who we are

AI Kids Club ("AI Kids Club", "we", "us") operates this platform and is the controller of the personal information described in this policy. This is an early-stage product (MVP) operated in beta. If you have any questions, contact us using the details in the "Contact us" section below.

2. Accounts are created and controlled by a parent or guardian

A child's account can only be created and consented to by a parent or legal guardian. During sign-up the parent confirms they are the child's parent or guardian and consents to the child's use of the platform and to the collection and use of the child's information as described here. Parents manage the account, including any subscription and any request to access or delete data.

3. Information we collect

Provided at sign-up

• Parent/guardian email address — used to create and secure the account, for account-related communication, and (only if opted in) beta updates.
• Password — stored in hashed form by our authentication provider; we never see it in plain text.
• Child's display name — a first name or chosen nickname shown in the experience and, where the child participates, on certificates, the project gallery, and competition leaderboards.
• Child's birth year — used to confirm eligibility (ages 7–18) and to place the child in the right age-appropriate curriculum group.
• Avatar selection — a chosen cartoon/robot avatar. If a profile photo is uploaded for certificates or the gallery, it is provided knowingly by the parent and treated as personal information under this policy.
• Consents — your parental consent, beta acknowledgement, and optional marketing opt-in.

Generated as the child learns

• Mission progress and completions, levels, points (XP), Bits, badges, and streaks.
• Projects and work the child creates and chooses to submit or showcase.
• Leaderboard standing (first name, optional photo, and points) where enabled.

Collected automatically

• Basic device and usage data (for example, pages viewed and feature interactions) through privacy-conscious product analytics, used to understand and improve the product.
• Essential cookies/local storage to keep the user signed in and remember preferences such as theme and sound.

4. How we use information

• To create and operate the child's account and deliver the learning experience.
• To run gamification features — points, badges, streaks, certificates, the project gallery, and competition leaderboards that celebrate the child's achievements.
• To keep the platform secure, prevent abuse, and fix problems.
• To understand usage and improve missions, content, and features.
• To contact the parent about the account, and — only with opt-in — about beta updates.

5. What we show publicly, and what we keep private

To encourage healthy motivation and friendly competition, a child's first name and (where provided) photo may appear on completion certificates, in the project gallery, and on competition leaderboards. We do not publicly display email addresses, contact details, home or school location, or other sensitive personal data, and there is no direct messaging between users.

6. We never sell data, and we don't advertise to children

AI Kids Club is a learning space, not an advertising platform. We do not sell or rent personal information, we do not show third-party ads to children, and we do not use children's information for behavioural advertising.

7. Service providers who process data for us

We use a small number of trusted providers strictly to operate the platform. They process data on our behalf under appropriate terms:

• Supabase — database, authentication, and storage.
• Vercel — application hosting and delivery.
• Upstash (Redis) — a fast, read-only mirror of leaderboard points.
• PostHog — product analytics to understand and improve usage.
• RoboHash — generates the cartoon/robot avatar images.

8. Children's privacy (COPPA / UK-GDPR & similar)

The platform is intended for children aged 7–18 with parental involvement. We collect the minimum information needed to provide the service, we rely on verifiable parental consent obtained at sign-up, and we give parents the ability to review or delete their child's information. We do not knowingly collect more personal information from a child than is reasonably necessary to participate.

9. Data retention

We keep account and learning data for as long as the account is active, and for a limited period afterwards as needed for security, legal, and operational reasons. As a beta product, data may also be reset between development phases. Parents can request deletion at any time.

10. Parent & guardian rights

• Review the personal information held about your child.
• Request correction or deletion of that information.
• Withdraw consent and close the account.
• Opt out of non-essential communications at any time.

To exercise any of these rights, contact us using the details below.

11. Security

We use encryption in transit, hashed passwords, role-based access controls, and row-level security so users can only access their own data. No system is perfectly secure, but we work to protect your information and to limit what is collected in the first place.

12. Changes to this policy

As an evolving beta, we may update this policy. We will revise the "Last updated" date above and, for material changes, take reasonable steps to notify parents.

13. Contact us

Questions or requests about privacy? Reach us through the contact options on our home page. See also our Terms & Conditions.