Privacy Policy

1. Information We Collect

To run the service we keep:

• Account basics: an email address, a name, and a role (parent, teacher, school admin or student).
• Each child’s profile: a name, a grade, a reading level, a time zone, and the rules their adults set (the age rating, the blocked topics, the characters).
• Conversations: every message, saved so the child’s adults can read it and the child can continue it.
• The characters’ notes: the short notes each character keeps about a child, readable and erasable in Parent Controls. A switch keeps the child’s name out of the AI’s view.
• A daily count of how much each child chatted.
• Safety records: a flagged message, the check’s scores and the reason, shown in Safety Review.
• A settings log: who changed which safety setting, and when.
• Acknowledgements: your acceptance of these documents, with the time, IP address and browser it came from.
• Technical data for fixing bugs. Google Analytics for Firebase counts visits and errors in the browser; we send it no events of our own and do not use it for advertising.

2. Children's Privacy (COPPA Compliance)

Protecting kids online is core to our mission. We follow COPPA (the Children's Online Privacy Protection Act):

• Parental Permission: A child account must be authorized by a parent or legal guardian, and that consent is recorded for each child. A student enrolled by a school is covered by the school’s authority, as the Terms describe.
• No Ads: There are no ads in the App. We do not build advertising profiles of anyone, children included.
• Transparency: The adults responsible for a child can read all of that child’s conversations and manage their settings at any time: their parents, and at a school their teachers and school admins.

3. How We Use Your Information

Your data is used to:

• Operate and maintain the AI characters.
• Personalize the characters based on the settings a parent or teacher chooses.
• Screen every child message automatically for prohibited content, and show what was flagged to the child’s adults.
• Provide customer support and technical troubleshooting.

4. Data Storage, Security & Providers

We use industry-standard encryption and security protocols to protect your data from unauthorized access. These providers process it on our behalf:

• Google Firebase and Google Cloud: storage, sign-in and hosting.
• OpenAI: the characters’ replies and the safety check on every child message. OpenAI does not use API data to train its public models.
• ElevenLabs and OpenAI: turning a character’s reply into speech when a child taps play. A child’s own words are never sent to a voice provider.
• Stripe: payments for schools, when billing starts.

We do not train any model on conversations.

5. How Long We Keep It

Nothing is deleted on a timer. Everything above stays until you delete it, except the acknowledgement records, which stay afterwards as proof of consent.

6. Data Deletion & Access

We believe you should own your data. Deleting a child removes their login, profile, conversations, notes, daily counts and safety records, and the settings log about them. Deleting your account removes every child on it the same way; a child who also has another parent stays with that parent instead. A child account is deleted by their parent of record, not from inside the child’s own login. We keep the record that you accepted these documents, with the time, IP address and browser, as proof of consent. It is the one thing that stays.

Deleting your account is in Settings > Profile > Danger Zone; deleting one child is at the bottom of that child's page in Parent Controls. Both take effect right away. To request a copy of your data, or your child’s, write to us at the address below.

7. Contact Us

If you have any questions regarding your privacy, please reach out to us at:
contact@launch1labs.com