Children's Privacy Policy

Effective May 29, 2026 · Version 1.0

BrightGenius (a product of Genius Learning, Inc.) is designed for young children and built to comply with the U.S. Children's Online Privacy Protection Act (COPPA). This policy explains, in plain language, what we collect about your child, why, and the control you have. It supplements our general Privacy Policy.

What we collect about your child

• A first name or nickname (your choice)
• Their age in years (not a date of birth)
• An avatar selection from a curated set (no uploaded photos)
• Their lesson progress and mastery scores
• For specific voice activities only: a short audio clip is sent directly to OpenAI's speech-to-text service for transcription. We do not retain the audio — it is processed transiently and discarded. We do keep the resulting text result of the attempt (e.g. the word the child said) tied to the lesson, so we can show you progress; this is deleted when you delete your account.

What we DON'T collect

• We don't require their real name, address, photo, or any contact info.
• We don't use behavioral advertising — ever.
• We don't enable chat, messaging, or social features.
• We don't share child data with third parties for marketing.

Verifiable parental consent

Before any child data is collected, we require you to provide verifiable parental consent at account setup. Your IP, user agent, and the timestamp of your consent are recorded for compliance.

Your rights

You can review, modify, or delete all data we hold about your child at any time, directly from your parent dashboard. When you delete your account, we permanently remove your child's profile and all associated learning records — including stored voice-activity text results — from our active systems promptly, and from backups on a rolling cycle. You can also email us at privacy@brightgenius.ai to make any request, including refusing to permit further collection of your child's information.

As the parent, you may withdraw consent at any time. If you do, we will stop collecting your child's information and delete what we hold, which will end your child's ability to use the service.

Third-party processors

• Clerk — parent authentication
• Stripe — payments (no child data passes through Stripe)
• Turso — encrypted database storage
• OpenAI — Whisper API for voice transcription (audio not retained)
• ElevenLabs — text-to-speech narration (synthesis only, no child data sent)
• Vercel — hosting + edge storage

Contact

Questions or requests: privacy@brightgenius.ai.