← Back to Parent Portal
DSIDRBeta
Children's Privacy Policy
Effective July 9, 2026 · Updated November 2026 (workshops and teams)
DSIDR ("we," "us," or "our") is committed to protecting the privacy of children who use our AI-powered project management application. This Children's Privacy Policy explains our data collection, disclosure, and parental consent practices with respect to personal information provided by children under the age of 13 ("Child" or "Children"), in compliance with the U.S. Children's Online Privacy Protection Act (COPPA). During our beta, we apply these same practices to all users under 18.
1. Verifiable Parental Consent
Before a Child can use the DSIDR app, we require verifiable consent from a parent or legal guardian. We use the "Email Plus" method during our beta phase. This involves an email verification link sent via Supabase, coupled with an affirmative checkbox disclosure. We log the timestamp, IP address, user agent, and consent version to an append-only audit table to ensure compliance. If a parent does not consent, the Child's profile cannot be created.
2. Information We Collect from Children
We intentionally limit the data we collect from Children to the minimum necessary to provide the DSIDR coaching experience.
- What we collect: First name or nickname, project and quest content, uploaded photos of project work, XP/feature-usage analytics, a persistent device identifier (used to keep usage analytics consistent per device), and AI chat transcripts.
- What we DO NOT collect: We do not ask for a Child's last name, email address, phone number, age, gender, or a profile photo.
- Incidental information: Because DSIDR features open-text AI chat functionality, a Child may incidentally type personal information into the chat. The AI is strictly instructed not to ask for personal information.
Workshops and teams
When a Child joins a DSIDR workshop using a code from their facilitator:
- Their nickname is shown to other Children in the same workshop so they can form project teams of up to four.
- Team members can view and edit their shared project, its photos, and short team notes. Children outside the team cannot see them.
- The workshop facilitator can view every project in that workshop, post notes, and remove any photo or note.
- Workshop photos are kept in private storage and are only viewable through links that expire after a few hours, issued to the team and facilitator.
3. How We Use the Information
The data collected is used exclusively to:
- Provide personalized project management coaching via the AI.
- Conduct safety reviews and moderation.
- Improve the quality of the DSIDR framework.
- Generate aggregate, de-identified performance metrics.
4. Third-Party Disclosures
We do not sell, rent, or trade a Child's personal information, nor do we use it for advertising. We only share data with trusted third-party service providers (processors) who are bound by strict confidentiality agreements to support the internal operations of the app:
- Supabase: For database hosting, authentication, and secure photo storage.
- Railway: For application hosting.
- Anthropic (Claude API): To process chat messages and generate AI coaching (Anthropic does not use API data to train its commercial models).
- Google Fonts / jsDelivr: Content Delivery Networks that may receive a device's IP address upon page load solely to serve functional website assets.
5. Data Retention
We retain a Child's data only as long as necessary to fulfill the service.
- AI chat transcripts: Automatically purged on a rolling 90-day basis.
- Inactive accounts: If a Child's account is inactive for 12 months, all associated data is permanently deleted.
6. Parental Rights
At any time, a parent can:
- Review the personal information collected from their Child.
- Direct us to delete the personal information.
- Refuse to allow further collection or use of the Child's information.
To stop further collection immediately, revoke your child's access code in the Parent Portal. To review or permanently delete collected information, contact us directly — we honor all deletion requests within 30 days.
7. Contact Information
See also our Terms of Service.