COPPA Notice for Parents and Guardians

1. Information collected from children

For a learner under 13, ClevaAI may collect the following information after the registration form is completed.

• The learner’s name or username, account email, securely hashed PIN, birth month and year, and age band.
• A parent or guardian email address used for account notices and consent-related communication.
• Profile selections such as persona, companion, and avatar.
• Prompts, selected answers, AI-generated learning outputs, progress, scores, feedback, and challenge history.
• Technical information needed for login, security, fraud prevention, cookies, and reliable operation.

2. How the information is used and disclosed

We use children’s information to provide age-appropriate learning activities, maintain the account, calculate progress, generate feedback, keep the service safe, and respond to parent requests.

• We do not sell children’s personal information or use it for targeted advertising.
• Service providers may process limited information for hosting, authentication, AI-assisted learning responses, email delivery, security, and error monitoring.
• Children are not provided with a public profile or a feature intended to publicly post their personal information.

3. Parental acknowledgement and consent

The signup page asks the registrant to acknowledge this notice and provide a parent or guardian email for learners under 13. During this early stage, parent requests and consent questions are handled manually through the contact address below.

A parent or guardian may refuse further collection, revoke a prior decision, or request account deletion at any time. Access to features may be limited when information is necessary to provide the learning activity.

4. Retention periods

Children’s information is retained only for the purposes described in this notice under the following early-stage schedule.

• Uncompleted parent contact or consent requests: up to 30 days.
• Child account and profile information: while active, then scheduled for deletion within 30 days of a verified parent request or account closure.
• Prompts, outputs, progress, scores, and learning history: up to 12 months after the child’s last activity, unless deleted sooner on a verified request.
• Security and authentication logs: up to 90 days, except when needed for an investigation or legal obligation.
• Backups: removed within the normal backup cycle, up to 90 days after deletion from active systems.
• Consent and parent-request records: up to 3 years after revocation or account closure to document the request and response.

5. Parental rights

After we verify identity and the relationship to the child, a parent or guardian may exercise the following rights.

• Review the personal information collected from the child.
• Request a portable copy of the child’s information.
• Correct inaccurate information.
• Direct us to delete the child’s personal information.
• Refuse or revoke permission for further collection, use, or disclosure.
• Ask how information is used or which service-provider categories receive it.

6. How to make a parent request

Email the address below with the child’s account email or username and the type of request. Do not send a PIN, password, government ID, or other sensitive proof by email. We will reply with the steps needed to verify the request.