Introduction

Kinder Adventure ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We are especially committed to protecting the privacy of children under 13 years of age in compliance with the Children's Online Privacy Protection Act (COPPA).

Information We Collect

Account Information

• Email address - Required for account creation and communication
• Name - Optional, used for personalization
• Birth date - Required for age verification and COPPA compliance
• Grade level/Age group - Used to generate age-appropriate study materials
• State (optional) - Used to align content with state educational standards
• Parent/Guardian email - Required for users under 13

Uploaded Content

• Documents - Files you upload (PDFs, Word documents, text files, images)
• Scanned documents - Images captured using your device's camera through our document scanner feature
• Processed content - Parsed text and chunks from your documents
• Generated study materials - AI-created study guides, flashcards, practice tests, and stories
• Audio content - AI-generated audio narrations for stories
• Citations - Links between generated content and source documents

Device Permissions

• Camera access - Only when you choose to scan a document; we do not access your camera without your explicit action
• Microphone access - Not required; our service does not access your microphone

Camera access is handled entirely by your browser/device. Images captured are processed locally and uploaded only with your confirmation. We do not store images on your device or access your photo library.

Usage Data

• Authentication data - Login times, session information
• Feature usage - Which features you use and when
• Device information - Browser type, operating system, device type
• IP address - Used for security and analytics
• Cookies - Session cookies for authentication and functionality

Cloud Integration Data (Optional)

• Cloud service tokens - Encrypted OAuth tokens for Google Drive/OneDrive (only if you connect these services)
• Export history - Record of when you exported materials to cloud services

How We Use Your Information

We use the collected information for the following purposes:

• Provide our service - Process documents and generate study materials
• Age-appropriate content - Tailor study materials to your grade level
• Account management - Create and maintain your account
• COPPA compliance - Obtain parental consent for users under 13
• Communication - Send important service updates and respond to inquiries
• Improve our service - Analyze usage patterns to enhance features
• Security - Detect and prevent fraud, abuse, and security incidents
• Legal compliance - Comply with legal obligations and enforce our terms

How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

Service Providers

• Cloud infrastructure - Vercel (hosting), Supabase (database and file storage)
• AI services - Anthropic Claude (for generating study materials and processing documents)
• Audio services - ElevenLabs (for generating audio narrations for stories)
• Email services - Resend (for sending parental consent emails)
• Cloud storage - Supabase Storage (for storing uploaded documents and audio files)

All service providers are contractually obligated to protect your data and use it only for the specified purposes.

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users
• Prevent fraud or abuse

What We Don't Share

Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit - All data transmitted over HTTPS/TLS
• Encryption at rest - Sensitive data encrypted in our database
• Password security - Passwords hashed using bcrypt with salt
• Token encryption - OAuth tokens encrypted with AES-256
• Access controls - Strict access controls and authentication
• Regular updates - Security patches and dependency updates
• Monitoring - Continuous monitoring for security threats

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Children's Privacy (COPPA Compliance)

Parental Consent

• Users under 13 require verifiable parental consent before using our service
• We send a consent email to the parent/guardian email address provided
• The account remains limited until parental consent is obtained
• Parents can review, delete, or refuse further collection of their child's information

Limited Data Collection

For users under 13, we collect only the minimum information necessary:

• Email address (for account access)
• Birth date (for age verification)
• Grade level (for appropriate content)
• Parent/guardian email (for consent)
• Uploaded documents and generated study materials

Parental Rights

Parents of children under 13 have the right to:

• Review the personal information collected from their child
• Request deletion of their child's personal information
• Refuse to allow further collection of their child's information
• Contact us at any time with questions or concerns

Your Rights and Choices

Access and Control

You have the right to:

• Access - Request a copy of your personal information
• Correction - Update or correct your personal information
• Deletion - Request deletion of your account and data
• Export - Download your data in a portable format
• Opt-out - Opt out of non-essential communications

Data Retention

• Account data - Retained while your account is active
• Uploaded documents - Retained until you delete them
• Study materials - Retained until you delete them
• After deletion - Data permanently deleted within 30 days
• Backups - May persist in backups for up to 90 days

Cookies and Tracking

We use cookies and similar technologies for:

• Authentication - Essential cookies to keep you logged in
• Preferences - Remember your settings and preferences
• Analytics - Understand how users interact with our service (anonymized)
• Security - Detect and prevent security threats

Most browsers allow you to control cookies through settings. However, disabling cookies may limit your ability to use certain features of our service.

State-Specific Privacy Rights

California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we don't sell data)
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

Other States

We extend similar rights to residents of other states with comprehensive privacy laws (Virginia, Colorado, Connecticut, Utah, etc.). Contact us to exercise these rights.

International Users

Kinder Adventure is based in the United States. If you access our service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our service, you consent to the transfer of your information to the United States.

For users in the European Economic Area (EEA), UK, or Switzerland, we comply with applicable data protection laws including GDPR. You have rights under GDPR including access, rectification, erasure, restriction, portability, and objection.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Your continued use of our service after changes become effective constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: