Privacy Policy

Allen Girls Adventures ("we," "us") is a story-based learning platform for kids in grades 3–6. Because our users include children under 13, we designed this policy — and the platform itself — around the Children's Online Privacy Protection Act (COPPA). This page explains what we collect, why, and the controls parents and guardians have.

The short version

• Parents and guardians create and control accounts — not kids.
• We collect the minimum needed to run the learning experience: account info from the parent, and learning progress from the child.
• We do not sell personal information. We do not show ads.
• Our analytics run in measurement-only mode with ad personalization disabled.
• Parents can review or delete their child's information at any time by emailing allengirlsadventures@gmail.com.

Information we collect

From parents and guardians

[REVIEW — confirm exact fields] When you create a family account we collect your email address and password (managed by our authentication provider, Supabase), and your child's first name or nickname and grade level so we can personalize lessons.

From children

[REVIEW — confirm exact fields] As a child uses the platform we store learning activity: lesson and quiz answers, game progress, stars and rewards earned, and reading activity. This is used to track mastery and adapt difficulty — not for marketing.

Automatically

We use Google Analytics 4 in a restricted configuration (Google Signals off, ad personalization off) to understand aggregate site usage. [REVIEW — confirm no other trackers are installed.]

AI features and children's data

[REVIEW — confirm data flow] Some learning features (such as our in-story helper, S.P.A.R.K.) are powered by AI providers (Anthropic and OpenAI). Inputs sent to these providers are limited to what the feature needs (for example, a child's answer to a practice question). We do not permit our AI providers to use this data to train their models. AI interactions are bounded to the learning experience — the platform does not offer open-ended chat with children.

COPPA: parental consent and rights

Accounts are created by a parent or guardian, and creating the account constitutes consent to collect the child information described above. Parents and guardians may, at any time:

• Review the personal information we hold about their child;
• Ask us to correct or delete it;
• Withdraw consent and close the account.

To exercise any of these rights, email allengirlsadventures@gmail.com with "Privacy Request" in the subject line. We will verify you are the account holder before acting, and respond within a reasonable time.

Who we share information with

We share information only with service providers that operate the platform on our behalf: [REVIEW — confirm list] Supabase (accounts and database), Vercel (hosting), Anthropic and OpenAI (bounded AI features), Google (restricted analytics), and Vimeo (video playback). Each processes data only to provide its service. We do not sell personal information, and we do not share children's personal information for advertising.

Payments

[REVIEW — enable when Stripe launches] Subscription payments are processed by Stripe. Card details are entered on and stored by Stripe — they never touch our servers. Purchases can only be made from a parent or guardian account.

Data retention and security

We keep account and learning data while the account is active. When an account is deleted, associated personal information is removed within [REVIEW — set a real number, e.g., 30] days, except where law requires longer retention. Data is stored with industry-standard protections including encryption in transit.

Changes to this policy

If we make material changes — especially any change to how we handle children's information — we will notify parent account holders by email before the change takes effect.

Contact

Questions about this policy: allengirlsadventures@gmail.com, or via our contact page.