Written for parents

Privacy Policy

What we collect, why, and how you stay in control. Plain language.

Last updated: May 25, 2026

1. Introduction

This policy explains what AI Kids Academy (“we”) collects when your family uses kids.academl.com, why we need it, and how you can see, change or delete it.

The service is for children aged 6–15 and their parents. We collect as little as the app needs to work, we show no ads, and we sell no data.

2. How accounts are created and how consent works

Every sign-up starts with one question: how old are you? We keep only the age range (6–8, 9–11 or 12–15) and whether the person is under 13. We never ask for a date of birth.

  • Under 13. A child cannot register alone. A parent or legal guardian creates their own parent account (name, email, password), ticks a consent box that links to this policy, and then creates the child's profile: a first name or nickname, an age range, a username and a password the parent chooses. We do not ask for the child's email.
  • 13 to 17. A learner can create their own account with a name, email and password after confirming they are 13 or older. A parent can link that account from the parent dashboard.
  • 18 and older. An adult creates a parent account and adds children from the parent dashboard.
  • Accounts made before this process. Some children registered on their own before we added the age question. When a parent links such an account and confirms consent on the parent dashboard, we record it. Until then we send that account no emails.

For each child we store when consent was given, how it was given (the parent created the account, or the parent invited and confirmed an existing one) and the email of the parent who gave it. That record is our evidence of parental consent.

Questions about children's privacy, or a request as a parent: kids@academl.com.

3. What we collect

Account information

  • Parent account: name, email address, password (stored only as a one-way hash) and language.
  • Child profile made by a parent: first name or nickname, username, password (hash), age range, the under-13 flag and language. No email address.
  • Learner aged 13 or older: name, email address, password (hash) and age range.

Learning data

  • Lessons started and finished, quiz answers and scores
  • XP, levels, streaks and achievements
  • The pet: its name, type, level and items
  • Daily goals and vacation dates a parent sets

AI conversations

  • Chats with the pet and the lesson helper: we save the child's message and the reply so a linked parent can read them on the parent dashboard. Each saved message is deleted automatically after 90 days, and a parent can delete any of them sooner.
  • Prompt Lab: the prompts a child writes, the replies, and the runs they choose to keep. A prompt published to the public Gallery, and any report other users file about it, is kept to run the Gallery.
  • Stories and other creative work the child makes in the app.
  • When AI replies are switched on, the text of a message goes to our AI provider to produce the reply; the account's email is not sent with it. When AI replies are off, the app answers with prepared replies and the text stays on our servers.

What we do not collect

  • A date of birth or exact age
  • A child's email address, home address or phone number
  • Card numbers: Stripe handles payments and we never see them
  • Location, photos, videos or contacts

4. How we use it

  • To run the lessons and pick ones that fit the child's age
  • To count progress, award XP and unlock achievements
  • To show a linked parent their child's progress and saved AI chats
  • To send parents a weekly progress email (every email has an unsubscribe link)
  • To check prompts automatically before they appear in the public Gallery, and to handle reports
  • To keep the service working and meet legal obligations

Children's emails: a child under 13 gets no email from us unless a parent has given consent, and a profile created by a parent has no email address at all.

We do not sell, rent or trade personal data. We show no advertising. We do not build profiles of children for marketing.

5. Who else handles the data

Only the services we need to run the platform:

  • Hosting providers run our web servers and the database where accounts and progress are stored.
  • Google Gemini produces AI replies when AI replies are switched on. It receives the text of the message, never the account's email.
  • Stripe handles subscriptions. It receives the paying parent's email and an account number and collects the card details itself. It receives no child data.
  • Resend delivers account and progress emails to the addresses described above, when email is switched on.
  • Google sign-in is optional for existing accounts. If you use it, we receive your name, email and profile picture from Google.

Nobody else receives the data. No advertising networks and no data brokers.

6. Security

  • All traffic uses HTTPS.
  • Passwords are stored only as bcrypt hashes; nobody can read them, including us.
  • Access to the production database is limited to the people who run the service.
  • A parent's tools (progress, saved chats, consent, deleting a child profile) work only for children linked to that parent's account.

No system is perfectly secure. If you think an account was used by someone else, write to us right away: kids@academl.com.

7. How long we keep data

We keep account data while the account exists. Deleting an account removes its progress, pet, achievements, notifications and saved AI chats at once.

Deleting a parent account also deletes the child profiles that parent created, because those profiles exist on that parent's consent.

Saved AI chats are deleted 90 days after they were written, even if the account stays open.

8. Your rights as a parent

Parents and guardians of children under 13, and every user where the law gives these rights, can:

  • See the data: progress and saved AI chats are on the parent dashboard; for a full copy of everything we hold, email us.
  • Correct it: change the nickname and age range in the child's settings, or ask us.
  • Delete it: delete a child profile you created from the parent dashboard, delete saved AI chats one by one or all at once, delete any account from its own settings page, or email us.
  • Stop emails: every progress email has an unsubscribe link.
  • Withdraw consent: delete the child's profile on the parent dashboard or email us. A child's account cannot stay open without consent, so withdrawing it means the account is deleted.

To use any of these rights, write to kids@academl.com from the email address of the parent account. We reply within 30 days. For an account you did not create, we first check that you are the child's parent or guardian.

9. Cookies and browser storage

We use only what the service needs to work, so the site shows no cookie banner:

  • Session cookie keeps you signed in.
  • Language cookie remembers the language you picked.
  • Browser storage (localStorage) remembers the theme, sound settings, and the pet a child picked before a grown-up finished sign-up. It stays on your device.

We use no analytics or advertising cookies.

10. Changes to this policy

When this policy changes, we update the date at the top of this page. If a change affects how we use children's data, we tell parents before it takes effect.

11. Contact

For privacy questions, requests or concerns:

AI Kids Academy, privacy requests

Email: kids@academl.com