Children's Privacy Notice
This section applies to children under 13 and supplements the rest of this policy.
4.1 Parental consent first
We do not knowingly collect personal information from a child under 13 until we have obtained verifiable parental consent from the child's parent or legal guardian. A parent creates the family account, receives a direct notice describing our practices, and gives consent before the child's profile is activated. [Describe final consent method(s) — see parental-consent.md; e.g., "a card verification through our payment processor" or "a signed consent form."]
A parent can consent to our collection and use of their child's information without consenting to disclosure of that information to third parties, except to service providers that are necessary to operate the Service (Section 4.3).
4.2 What we collect from children and why
| Information | Why we collect it |
|---|---|
| Nickname or first name, birth month/year or age band, avatar (provided by parent) | To create the child's profile and show the right age experience |
| Learning activity, XP, badges, levels | To run lessons and games and to show progress to the parent |
| Creator Studio projects | To let the child save and revisit their work |
| Text typed to the Robo AI assistant | To generate an age-appropriate learning response |
| Session cookie, device/browser type, IP address | To keep the child signed in, secure the Service, and make it work (internal operations only) |
We collect only the information reasonably necessary for the child to participate in an activity. We do not condition a child's participation on disclosing more information than is reasonably necessary.
4.3 Who we share children's information with
We do not sell children's personal information and do not disclose it to third parties for advertising. We disclose it only to service providers that process it on our behalf to operate the Service, under written contracts that require them to protect it and use it only for our purposes:
| Service provider | Purpose |
|---|---|
| [HOSTING PROVIDER — currently planned: Vercel] | Hosting and delivery of the website and app |
| [DATABASE PROVIDER — currently planned: Supabase] | Secure database storage |
| [AI PROVIDER — currently planned: Anthropic] | Generating Robo assistant responses (see 4.4) |
| [EMAIL PROVIDER] | Sending service emails to parents |
| [PAYMENT PROCESSOR — currently planned: Stripe] | Processing parent payments (no child data is shared) |
We may also disclose information if required by law, to protect the safety of a child, or in connection with a merger or acquisition, in which case the successor must honor this policy.
4.4 The Robo AI assistant
Robo is an AI learning assistant designed for each age group. Text a child types to Robo is sent to our AI provider to generate a response. We instruct children not to share personal details, we filter messages for personal information and unsafe content before they are sent, and [we require our AI provider by contract not to use this data to train its models and to delete it after processing — confirm contract terms]. Parents can review their child's Robo conversations in the parent dashboard, turn Robo off for any child, and delete conversations. [Confirm final retention period in Section 9.]
4.5 Parents' rights
A parent or legal guardian may at any time:
- review the personal information we have collected from their child;
- request deletion of that information;
- refuse to permit further collection or use of their child's information (which may mean closing the child's profile);
- withdraw consent to any disclosure to third parties beyond what is needed to operate the Service.
Parents can do most of this directly in the parent dashboard (Settings → Child profile → Privacy). Parents may also email privacy@aiplaybase.com or write to [POSTAL ADDRESS]. Before we provide a child's information, we take reasonable steps to confirm that the requester is the child's parent.
4.6 Teens (13–17)
Teen profiles are also created and managed by a parent. We apply the same protections to teens: no sale of personal information, no targeted advertising, no public profiles, and no messaging between users. Teens can see their own data, and parents can request access or deletion.