Children's Privacy (COPPA)

A child never signs up directly. A parent or legal guardian creates a supervised child profile from within their own account. The child uses the Service under the parent’s account — there is no separate child login, email, or password. This minimizes the data tied to a child.

Before a child profile is created, the parent must confirm they are the child’s parent or guardian and provide consent. We record the consent and its timestamp. A parent can withdraw consent at any time by deleting the child’s profile, which deletes the child’s data.

Note for operators: for higher-risk data uses, COPPA may require a more robust “verifiable” consent method (e.g., a small card transaction, signed form, or government-ID check). Confirm the appropriate method with counsel before public launch.

• The child’s display name (a first name or nickname — no requirement to use a real or full name).
• An optional grade level and the learning track the parent selects.
• Learning activity: the exercises the child completes, their answers (including any prompt text they write), scores, and timestamps.

We do not require a child’s email, address, phone, or photo. We do not knowingly collect more than is reasonably necessary for the child to participate.

• No behavioral advertising or ad targeting to children — ever.
• No selling or renting of children’s personal information.
• No sending prompts to external AI models — the analyzer runs in the browser.
• No public sharing of a child’s activity; only the managing parent can see it.

Children practice writing clear prompts, answer multiple-choice and drag-and-drop exercises, and draw. Prompts typed into the interactive Playground are analyzed locally in the browser and are not stored. Drawings stay on the device. Practice exercises completed under a supervised profile are saved to the parent’s view so the parent can follow the child’s learning.

As the parent/guardian, you can at any time:

• Review everything your child has done — a full, timestamped activity history in your Family dashboard.
• Delete your child’s profile and all associated activity, which removes it from our systems.
• Withdraw consent (deleting the profile withdraws consent and stops further collection).
• Request access to or deletion of your child’s data by emailing us.

If a school or district uses MayPrompt with students, the school may provide consent on parents’ behalf for educational purposes, consistent with COPPA’s school-consent guidance and FERPA. In that case we act as a service provider/“school official” and use student data only to provide the educational service. Schools are responsible for the required notices and consents under their policies.

We keep a child’s data only while the supervised profile exists; deleting the profile deletes the data. Children’s data is protected by the same safeguards as all accounts — encryption in transit, database row-level security so only the managing parent can access it, and access controls.

To exercise parental rights, ask questions, or report a concern about a child’s data, contact privacy@mayprompt.com. We will respond promptly and may verify that you are the child’s parent or guardian before acting.