← Back to Parent Portal

Children's Privacy Policy

DSIDR ("we," "us," or "our") is committed to protecting the privacy of children who use our AI-powered project management application. This Children's Privacy Policy explains our data collection, disclosure, and parental consent practices with respect to personal information provided by children under the age of 13 ("Child" or "Children"), in compliance with the U.S. Children's Online Privacy Protection Act (COPPA). During our beta, we apply these same practices to all users under 18.

1. Verifiable Parental Consent

Before a Child can use the DSIDR app, we require verifiable consent from a parent or legal guardian. We use the "Email Plus" method during our beta phase. This involves an email verification link sent via Supabase, coupled with an affirmative checkbox disclosure. We log the timestamp, IP address, user agent, and consent version to an append-only audit table to ensure compliance. If a parent does not consent, the Child's profile cannot be created.

2. Information We Collect from Children

We intentionally limit the data we collect from Children to the minimum necessary to provide the DSIDR coaching experience.

• What we collect: First name or nickname, project and quest content, uploaded photos of project work, XP/feature-usage analytics, a persistent device identifier (used to keep usage analytics consistent per device), and AI chat transcripts.
• What we DO NOT collect: We do not ask for a Child's last name, email address, phone number, age, gender, or a profile photo.
• Incidental information: Because DSIDR features open-text AI chat functionality, a Child may incidentally type personal information into the chat. The AI is strictly instructed not to ask for personal information.

3. How We Use the Information

The data collected is used exclusively to:

• Provide personalized project management coaching via the AI.
• Conduct safety reviews and moderation.
• Improve the quality of the DSIDR framework.
• Generate aggregate, de-identified performance metrics.

4. Third-Party Disclosures

We do not sell, rent, or trade a Child's personal information, nor do we use it for advertising. We only share data with trusted third-party service providers (processors) who are bound by strict confidentiality agreements to support the internal operations of the app:

• Supabase: For database hosting, authentication, and secure photo storage.
• Railway: For application hosting.
• Anthropic (Claude API): To process chat messages and generate AI coaching (Anthropic does not use API data to train its commercial models).
• Google Fonts / jsDelivr: Content Delivery Networks that may receive a device's IP address upon page load solely to serve functional website assets.

5. Data Retention

We retain a Child's data only as long as necessary to fulfill the service.

• AI chat transcripts: Automatically purged on a rolling 90-day basis.
• Inactive accounts: If a Child's account is inactive for 12 months, all associated data is permanently deleted.

6. Parental Rights

At any time, a parent can:

• Review the personal information collected from their Child.
• Direct us to delete the personal information.
• Refuse to allow further collection or use of the Child's information.

To stop further collection immediately, revoke your child's access code in the Parent Portal. To review or permanently delete collected information, contact us directly — we honor all deletion requests within 30 days.

7. Contact Information

See also our Terms of Service.