Last updated: July 2026
COPPA Notice
KeenClimb is designed for children under 13 to use only under parent or guardian supervision. This notice explains how we structure the service for the Children's Online Privacy Protection Act (COPPA) and related child-privacy expectations.
Parent-first account design
- Only adults may create KeenClimb accounts and child profiles.
- Children under 13 cannot create independent accounts, publish profiles, message other users, or provide contact information through child-facing flows.
- A parent or guardian gives consent before a child profile is used and can review, update, or delete that profile.
- Parent consent records include the account email, time, IP address, and policy version so we can demonstrate how consent was obtained.
Child information we collect
- First name or nickname, date of birth or age band, locale/country, and learning experience settings chosen by the parent.
- Learning progress data such as lesson answers, attempts, timing, completion, skill state, and mastery estimates.
- Optional support preferences selected by the parent, such as pacing, reading support, or interface adjustments.
- Offline lesson state needed to resume and sync learning activity.
Child information we do not collect
- No child email address, phone number, mailing address, or precise geolocation.
- No public child profile, followers, open chat, direct messaging, or user-generated public posting by children.
- No photos, videos, voice recordings, biometrics, government identifiers, or contact lists.
- No medical diagnoses, disability labels, or clinical records.
- No child data for targeted advertising, retargeting, or third-party ad measurement.
Parent rights under COPPA
- Review the personal information collected from or about your child.
- Request correction or deletion of your child's information.
- Refuse further collection or use of your child's information by deleting the child profile or contacting us.
- Withdraw consent, subject to limited retention for legal, security, billing, or audit purposes.
- To exercise any COPPA right, contact [email protected] from the email address associated with your account.
Sharing and advertising
- We do not sell children's personal information.
- We do not disclose children's personal information for targeted advertising.
- Service providers may process child information only to operate, secure, host, support, or improve KeenClimb under restricted contracts.
- If a future feature required separate parental consent for a disclosure, we would request that consent before enabling the feature.
Retention and security for child data
- Child data is kept only while needed to provide the service, maintain security, comply with law, resolve disputes, or honor audit obligations.
- When a parent deletes a child profile, production data is scheduled for deletion within 30 days unless limited retention is legally required.
- We use access controls, row-level authorization patterns, encrypted transport, hashed credentials, short-lived access tokens, and refresh-token rotation to protect family accounts.
- We review child-privacy practices as the product changes and update this notice when the collection, use, or disclosure of child information materially changes.