Overview
AI Inspector Academy ("we," "us," or "our") is committed to protecting the privacy of children who use our platform. This Privacy Policy explains how we collect, use, and safeguard information when parents create accounts and manage child profiles on our service.
Our service is designed so that only parents create accounts. Children do not have independent accounts — they operate as profiles within their parent's account. This design ensures parents maintain full control over their children's data at all times.
Children's Privacy (COPPA Compliance)
We comply with the Children's Online Privacy Protection Act (COPPA). Because only parents create accounts and manage child profiles, parental consent is inherent in the account structure:
- No independent child accounts. Children access the platform only through profiles created and managed by their parent.
- Parental consent at signup.By creating an account and adding a child profile, you consent to the collection and processing of your child's interactions as described in this policy.
- Minimal data collection.We collect only what is necessary: child's first name, grade level, and optionally birth date and avatar preference.
- No conditioning. We do not require children to provide more information than necessary to use the service.
Information We Collect
Parent Account Information
- Name and email address
- Password (encrypted, never stored in plain text)
- Payment information (processed by Stripe; we do not store card details)
Child Profile Information
- First name
- Grade level
- Birth date (optional)
- Avatar emoji preference
AI Sandbox Interaction Data
- Chat messages exchanged during sandbox sessions
- Judgments and responses made during exercises
- Session scores and evaluation results
- Session duration and token usage (for service operation)
How We Use This Information
- To provide the service: Generate age-appropriate learning content and facilitate AI sandbox sessions.
- To track progress:Show parents their child's learning progress and skill development.
- To improve content: Understand which exercises work well for different age groups (aggregated, not individual).
- To ensure safety: Filter inappropriate content in chat interactions.
⚠️ Third-Party AI Processing
When your child uses the AI Sandbox, their chat messages are sent to Amazon Web Services (AWS) Bedrock for processing by an AI model. This is necessary to generate educational responses during sandbox sessions.
- Messages are processed in real-time and are not retained by AWS beyond the processing request.
- We use AWS's enterprise-grade security and data processing agreements.
- No child data is used to train AI models.
- All data is transmitted over encrypted connections (TLS).
Data Retention
We retain children's sandbox interaction data (chat messages, judgments) for a limited period:
- Default retention: 30 days. Chat messages and session data are automatically deleted after 30 days.
- Configurable. Parents can adjust the retention period (7–90 days) in their account settings.
- Immediate deletion available. Parents can delete all chat history for any child at any time with one click.
- Server-enforced. Deletion is performed server-side and is irreversible — data cannot be recovered after deletion.
Progress summaries (scores, badges) are retained separately from chat content and are not subject to the automatic deletion policy, as they do not contain personal information.
Your Rights as a Parent
As the account holder, you have full control over your children's data:
- View: Access all data collected about your children through your dashboard.
- Delete:Delete your child's chat history at any time (Settings → Privacy & Data).
- Revoke consent: Delete a child profile entirely, which removes all associated data including missions, progress, and sandbox history.
- Export: Contact us to request a copy of all data associated with your account.
- Account deletion: Contact us to delete your entire account and all associated data.
Data Security
- All data is encrypted in transit (TLS) and at rest.
- Database access is restricted via Row Level Security — parents can only access their own family's data.
- Backend services use internal API keys and do not expose data publicly.
- We do not sell, share, or rent personal information to third parties.
Contact Us
If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about your child's privacy, please contact us at:
privacy@aiinspectoracademy.com
Changes to This Policy
We will notify parents via email of any material changes to this Privacy Policy. Continued use of the service after notification constitutes acceptance of the updated policy.