Privacy Policy
Last updated: May 25, 2026
1. Overview
SparkVision Kids is committed to protecting the privacy of all users, especially children. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. We comply with the Children's Online Privacy Protection Act (COPPA), the California Consumer Privacy Act (CCPA), and applicable US privacy law.
2. Information We Collect
Account Information
- Email address
- Username and display name (chosen by you)
- Password (stored as a secure hash — we never see your password)
- Date of birth (used only to determine COPPA applicability)
- Parent or guardian email (for users under 13 only)
- Account role (child or parent)
Activity Data
- Mission completion history and scores
- XP, coins, and badge progress
- Virtual portfolio holdings and simulated transactions
- Leaderboard ranking data
Technical Data
- IP address and browser type (via our hosting provider)
- Session cookies required for authentication
3. How We Use Your Information
- To create and manage your account
- To deliver the educational content and features of the Platform
- To send transactional emails (email confirmation, parental consent requests)
- To maintain leaderboards and track learning progress
- To comply with legal obligations including COPPA
We do not use your data for advertising, sell it to third parties, or use it for any purpose unrelated to providing and improving SparkVision Kids.
4. Children Under 13 — COPPA Notice
SparkVision Kids is designed to be used by children, and we take our obligations under COPPA very seriously. For users under 13:
- We collect date of birth during signup to identify users under 13
- We require verifiable parental consent before activating any account for a child under 13
- We notify the parent or guardian by email with a consent link before any data is retained
- If consent is denied or not received, we delete all information within 7 days
- We never share a child's personal information with any third party beyond our service providers listed below
- Children under 13 cannot make their profiles public or participate in external sharing features
Parent and Guardian Rights
Parents and legal guardians of children under 13 have the right to:
- Review all personal information collected from their child
- Correct inaccurate information
- Request deletion of all data (account will be permanently removed)
- Withdraw consent at any time, resulting in immediate account deletion
- Refuse to allow further collection of information
To exercise these rights, email hello@sparkvision.app. We will respond within 30 days and verify your identity as the parent or guardian before taking any action.
5. Data Sharing and Service Providers
We share data only with the following trusted service providers, solely to operate SparkVision Kids:
- Supabase — database and authentication (servers in the United States)
- Render — web hosting and deployment
- Resend — transactional email delivery (consent notifications and email confirmations only)
All service providers are bound by data processing agreements that restrict them from using your data for any purpose other than providing their service to us.
6. Data Retention
- Active accounts: data retained for as long as the account exists
- Deleted accounts: all personal data deleted within 30 days
- Consent tokens: deleted immediately upon parent action (approve or deny)
- Unapproved minor accounts: deleted after 7 days if no parental response
7. Security
We use industry-standard security practices including encrypted connections (TLS), hashed passwords, and row-level security on our database. While no system is 100% secure, we take commercially reasonable measures to protect your information from unauthorized access, disclosure, or loss.
8. Cookies
We use session cookies that are strictly necessary to keep you logged in. We do not use advertising cookies, tracking pixels, or any third-party analytics scripts.
9. Your Rights (All Users)
Regardless of age, all users have the right to:
- Access the personal data we hold about them
- Correct inaccurate data
- Request deletion of their account and all associated data
- Receive their data in a portable format
Email us at hello@sparkvision.app to exercise any of these rights.
10. Changes to This Policy
We will notify users and parents of material changes to this Privacy Policy via email at least 30 days before they take effect. Continued use after the effective date constitutes acceptance. For changes involving children's data, we will seek fresh parental consent where required by COPPA.
11. Contact Us
SparkVision Kids Privacy Team
hello@sparkvision.app
For COPPA-related inquiries, the FTC provides additional resources at ftc.gov/coppa.