Privacy Policy

This Privacy Policy explains what data Pixelkids collects, how we use it, and your rights regarding it. We've tried to write it in plain English. If anything is unclear, email hello@pixelkids.appand we'll explain.

1. Who we are

Pixelkids is an AI coaching product for kids ages 8–14. The primary user is a child; the account holder is a parent or guardian. This policy applies to anyone who visits our website or uses the product.

2. Data we collect

From the parent (account holder)

• Email address— collected at sign-up via Clerk. Used to identify your account, send important account notices, and (with your consent) marketing updates.
• First name + country— collected at the mini-profile step. Used for personalized emails and to choose regionally appropriate examples in the product (e.g. local food references in money quests).
• Marketing-channel attribution— how you heard about us. Used in aggregate to evaluate which channels work; never tied to your identity in third-party analytics.

From the kid (the actual user)

• Display name + age— entered by the parent at kid setup. Used by the AI coach to personalize responses.
• 4-digit passcode— used for daily access to the kid's account on a shared device. Stored as a one-way scrypt hash; we never see the plaintext.
• Onboarding answers— gender, pronouns, interests, goals, vibe preference. Used to tailor coach responses. Editable by the parent at any time from the account dashboard.
• Conversation history with the AI coach— chat messages, prompts, and the assets the kid generates (images, videos, code, documents). Stored on our servers so the kid can resume sessions across devices.
• Behavioral memory— the AI Observer extracts short notes (“loves dinosaurs”, “is working on a math problem”) so future conversations feel continuous. The full text of every memory item is visible to the parent in the account dashboard.

Automatically

• IP address + device info— for security, rate limiting, and fraud prevention. Not linked to ad targeting.
• Server logs— what API endpoints you hit, how long requests took. Not the contents of private messages.

3. What we do NOT collect

• Photos of children— we never request, accept, or generate identifiable images of real children.
• School records or grades— the tutor uses example questions but never stores actual school assignments unless the kid types them in.
• Location data beyond country— no GPS, no postal code, no address.
• Phone numbers— we don't use SMS for anything.

4. How we use your data

• To run the product (sign-in, save your kid's work).
• To improve the AI coach's responses to your specific kid. Memory and chat data are used in the LLM context window of your account only — never pooled with other accounts to train a shared model.
• To send account emails (sign-up confirmation, password reset, billing receipts). Marketing emails only if you opted in.
• To analyze aggregate usage (e.g. “how many parents complete the tutorial”) to make product decisions. No individual user is identified in these aggregates.

5. Third-party services we use

• Clerk— authentication. Stores your email, password hash, and OAuth tokens.
• Supabase (Postgres)— database for profiles, kids, chat history, and metadata. Hosted in Singapore.
• Vercel— web hosting + asset storage (image and video files).
• Anthropic (Claude)— the AI coach. Conversation context is sent to Anthropic for inference. Anthropic does not train on customer data per their terms.
• Google (Gemini / Imagen)— image generation.
• BytePlus (Seedance)— video generation.
• ElevenLabs— text-to-speech for the tutor.

Each of these vendors has its own privacy policy. We have signed data processing agreements where applicable.

6. Data retention

We keep your account data while your account is active. If you delete your account, we delete or anonymize your data within 30 days, except where law requires us to retain certain records (e.g. tax records of paid transactions).

7. Your rights

You can at any time:

• See your data— from the account dashboard, or by emailing us for an export.
• Edit it— account info from the dashboard; kid info via the kid's edit screen.
• Delete it— from the account dashboard (Danger Zone). Account deletion is irreversible.
• Withdraw consentfor marketing emails — unsubscribe link in every marketing email.

8. Kids' privacy (COPPA, PDPA)

Pixelkids is intended for use by children with parental consent. The account holder must be 18 or older. The parent agrees, by creating an account, to be responsible for the kid's use of the service and to consent on the kid's behalf.

We do not knowingly collect personal information from children without parental consent. If you believe we have collected such information, contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy. Material changes will be announced via email + an in-product notice at least 30 days before they take effect.

10. Contact

Questions, concerns, deletion requests: hello@pixelkids.app.