Privacy Policy

⚠️ DRAFT — REQUIRES LEGAL REVIEW. This is a structured starting point generated to cover common COPPA/GDPR topics for a children’s education service. Every section marked [LAWYER REVIEW] contains placeholders that must be completed and approved by a qualified attorney before you collect payments or personal data. Do not treat this as legal advice.

Last updated: [LAWYER REVIEW — insert date]

1. Who we are

AI Junior Coders (“we”, “us”, “our”) operates aijuniorcoders.com, an online coding-education platform for young learners. [LAWYER REVIEW — insert legal entity name, registered address, and contact email of the data controller.]

2. Our commitment to children’s privacy (COPPA)

Our service is directed to children. We are committed to complying with the Children’s Online Privacy Protection Act (COPPA) and similar laws. We do not knowingly collect personal information directly from children without verifiable parental consent.

Parent-managed accounts: Child accounts are created and managed by a parent or guardian. We do not require or request a child’s email address or other direct contact information.
What we collect about a child: a username and password chosen by the parent, a display name, and learning-progress data (lessons completed, XP, badges, streaks). [LAWYER REVIEW — confirm this list is exhaustive and accurate.]
Verifiable parental consent: [LAWYER REVIEW — describe your exact consent mechanism and confirm it meets COPPA’s “verifiable” standard for your collection practices.]
Parental rights: A parent may review, delete, or stop further collection of their child’s information at any time by contacting us at [LAWYER REVIEW — insert email] or via the Parent Dashboard.

3. Information we collect

[LAWYER REVIEW — confirm and complete.] From parents: name, email, billing information (processed by our payment provider). From learners: username, display name, progress data. Automatically: basic device/usage data for security and service operation.

4. How we use information

To provide the learning service, track progress, send parents account and progress communications, process payments, maintain security, and improve the service. We do not sell personal information, and we do not show third-party advertising to children.

5. Third parties who process data

[LAWYER REVIEW — COPPA (2025 update) requires you to name the categories of third parties that receive children’s data and explain what they do, in plain language.] Examples that will likely apply: a payment processor (e.g. Stripe/PayPal) for parent billing; hosting/infrastructure providers; email-delivery services. List each, its purpose, and a link to its policy.

6. Data retention

[LAWYER REVIEW — specify how long each category of data is kept and your deletion process.]

7. Data security

We use reasonable technical and organizational measures to protect personal information. [LAWYER REVIEW — describe safeguards accurately; do not overstate.]

8. Your rights (GDPR / UK GDPR / CCPA)

[LAWYER REVIEW — include the specific rights and request process applicable to the jurisdictions you serve, e.g. access, rectification, erasure, portability, and how to exercise them.]

9. International users

[LAWYER REVIEW — address cross-border data transfer if you serve users outside your home country.]

10. Changes to this policy

We may update this policy. Material changes affecting children’s data will be notified to parents. [LAWYER REVIEW — confirm notification method.]

11. Contact us

[LAWYER REVIEW — insert privacy contact email and postal address.]