Privacy Policy
KiddieGPT is designed to collect as little information as reasonably necessary and keep information on the user's device when practical. This Policy explains what KiddieGPT collects and processes through the web app, browser extension, website, and related services (the "Service"), how that information is used, and the choices available to parents and users.
1. A quick summary
- Many settings and learning-history features are stored locally on your device.
- When a learning tool is used, the prompt and any page text, file, screenshot, or image deliberately submitted with it must be sent to our systems and an AI provider to generate a response.
- We do not show targeted ads, sell personal information, or build advertising profiles of children.
- We do not use a child's prompts or AI responses to train our own AI models.
- A parent or legal guardian must create and manage the account for a child.
2. Information stored on your device
Depending on the device and feature, the following may be stored in browser or extension storage rather than in a KiddieGPT account:
- learning history, saved vocabulary, and recent activity;
- parent-control settings, usage limits, content preferences, and custom blocked terms;
- a child profile nickname and grade level;
- usage totals and time spent; and
- the parent PIN in protected or hashed form rather than as readable PIN digits.
On-device information remains until it is cleared through the Service, removed through browser or device settings, or deleted when the extension is uninstalled, depending on the browser. Deleting an account does not necessarily clear local data on every device, and uninstalling does not automatically cancel a subscription or delete server-side account records.
3. Information processed through our systems
3.1 AI requests and learning content
When a learning tool is used, KiddieGPT processes the prompt and any source material deliberately provided with it, such as active-page text, selected text, a pasted question, local file, screenshot, worksheet image, or phone scan. The content is routed through KiddieGPT's systems as needed and forwarded to an AI provider to generate a response. We may also process safety signals, tool type, grade setting, and technical metadata needed to apply safeguards, prevent abuse, and return the result. KiddieGPT does not keep request content as a permanent prompt archive unless a feature clearly says it will be saved.
3.2 Account, subscription & usage data
When a parent creates an account, we may collect the parent's email address, authentication and security records, account preferences, subscription or plan status, license information, and limited usage totals needed to provide plan features, enforce limits, and prevent abuse. A child profile may include a parent-chosen nickname and grade level. Parents should not use a child's full legal name.
3.3 Device, website & log data
When you use the Service, we and our hosting providers may automatically receive IP address, browser and device type, operating system, timestamps, requested pages, referring pages, and error information. We use this data for authentication, security, debugging, reliability, and basic service measurement—not for behavioral advertising.
3.4 Payment data
Subscriptions are processed by Stripe. KiddieGPT does not receive or store your full card number. Stripe handles payment data under its own privacy policy.
4. Information we do not seek
- We do not ask a child to provide a full legal name, home address, phone number, precise location, government identifier, or personal profile photo.
- We do not use third-party advertising trackers, retargeting pixels, or behavioral-advertising profiles.
- We do not sell, rent, or trade personal information.
- We do not use a child's prompts or responses to train our own AI models.
Because learning content is supplied by users, a prompt, file, screenshot, or scan could still contain personal information. Parents should teach children not to submit personal, confidential, or identifying information.
5. Children's privacy & the parent's role
KiddieGPT is a family learning product designed primarily for children ages 8–14, but the account must be created and managed by a parent or legal guardian. A parent chooses the grade setting, establishes parent controls, and permits the child's use of the Service.
For a child under 13, the parent or guardian must complete parent setup and provide any consent required before allowing the child to use the Service. Do not allow a child to create an account independently or submit personal information through a prompt, file, screenshot, or scan.
- Child profiles are created and managed by a parent and should use a nickname.
- Parent settings are protected through the parent account and available PIN controls.
- Children cannot publicly post or broadcast personal information through the Service.
- Parents may review or delete available child-profile and account information and withdraw permission for future use.
- We do not condition participation on providing more child information than is reasonably necessary for a feature.
A parent may request access to, correction of, or deletion of a child's personal information, or refuse further collection or use, through our contact form. We may verify the requester's identity and relationship to the child. If you believe a child has used the Service without appropriate parent permission, contact us and we will investigate and take appropriate action.
6. How we use information
- provide learning tools, generate responses, and apply grade and safety settings;
- create and secure parent accounts, verify subscriptions, and enforce plan limits;
- process payments and maintain transaction records;
- send authentication messages, receipts, security notices, service updates, and material policy notices; and
- prevent abuse, diagnose problems, and keep the Service secure and reliable.
7. Service providers
We use providers that process information for us to operate the Service:
- AI providers, which may include OpenAI and Anthropic — to process submitted learning content and generate responses. We configure provider services not to use request content for model training where that control is available under our service arrangement.
- Stripe — payment processing and billing services.
- Cloudflare and other infrastructure providers — to host, deliver, secure, and monitor the Service.
- Authentication and email providers — to manage sign-in and send essential account communications.
These providers may process information only to perform services for KiddieGPT or as otherwise permitted by their agreements and applicable law. We do not disclose a child's personal information for targeted advertising.
8. Cookies & local storage
The website and app may use cookies or similar storage necessary for sign-in, security, saved preferences, subscription status, and core functionality. The extension uses browser storage for settings and learning features. We do not use cross-site advertising cookies. Blocking essential storage may prevent parts of the Service from working.
9. Data retention
- On-device data is kept until you clear it or remove it through the browser, device, or extension.
- AI request content is processed to return the result and is not kept by KiddieGPT as a permanent prompt archive unless a saving feature clearly says otherwise. Infrastructure and AI providers may retain limited copies for security or legal purposes under their applicable service terms.
- Account data is kept while the account is active and for a limited period afterward to complete deletion, prevent fraud, resolve disputes, or meet legal obligations.
- Subscription and transaction records are kept as needed for billing, tax, accounting, fraud prevention, and legal compliance.
- Security and server logs are generally kept for a short operational period unless an event requires longer retention for investigation or legal compliance.
We keep personal information only as long as reasonably necessary for the specific purpose for which it was collected, then delete or de-identify it using reasonable measures.
10. Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the information we process. Measures may include encryption in transit, protected authentication records, access controls, narrowly scoped extension permissions, service monitoring, and data minimization. No online service is completely secure, so we cannot guarantee absolute security. We provide notices of qualifying data incidents as required by law.
11. Your rights & choices
11.1 Access, correction & deletion
You can manage available account and child-profile information in the Service and clear local data through the extension or browser. You may also request access, correction, or deletion through our contact form. We may verify your identity and authority before completing a request. Some records may be retained where permitted or required by law.
11.2 EEA / UK residents
Where applicable, we process information to perform our contract with the parent account holder, comply with law, protect our legitimate interests in securing and improving the Service, and based on consent where required. You may have rights to access, correct, delete, port, restrict, or object to processing and to withdraw consent. You may also complain to your local data-protection authority.
11.3 U.S. state privacy rights
Depending on where you live, you may have rights to know, access, correct, delete, or obtain a copy of personal information and to appeal a denied request. KiddieGPT does not sell personal information or share it for cross-context behavioral advertising. Use our contact form to make a request.
12. International transfers
KiddieGPT is operated from the United States. If you use the Service elsewhere, information may be processed in the United States and other countries where our providers operate. Where required, we rely on appropriate transfer mechanisms and contractual safeguards.
13. Changes to this Policy
We may update this Policy as the Service or law changes. For material changes, we will provide reasonable advance notice through email, the app, or another appropriate method. If a change requires new parental consent, we will request it before applying the changed practice to a child's personal information.
14. Contact us
Operator — KiddieGPT, United States
Privacy questions & data requests — contact us
General support — contact support
See also our Terms of Service.