Privacy Policy

Last updated: February 2026

1. Introduction

At StarKids, we are deeply committed to protecting the privacy of our users, especially children. This Privacy Policy explains how we collect, use, share, and protect information when you use our children's educational platform.

We believe that children deserve the highest level of privacy protection. Our platform is designed from the ground up with privacy and safety as core principles.

2. Information We Collect

We collect only the information necessary to provide our educational services:

Account Information (Parent/Guardian)

• Email address
• Name
• Password (encrypted, never stored in plain text)

Child Profiles

• First name only (we do not collect children's surnames)
• Age or date of birth

Educational Progress Data

• Achievement records and star counts
• Learning progress across subjects
• Daily Quest completion records

Achievement Photos

• Photos uploaded by parents to celebrate achievements
• Photos are stored securely in AWS S3 and only accessible to the account owner

3. How We Use Information

We use the information we collect for the following purposes:

• Provide educational services: Deliver personalised learning experiences, Daily Quests, and age-appropriate content
• Track progress: Record achievements, stars, and learning milestones to show parents their child's development
• Generate AI content: Create age-appropriate explanations, stories, and educational materials using AI providers (no personal data is shared beyond what is needed for content generation)
• Send notifications: Communicate important account updates, billing information, and service changes
• Improve our service: Understand usage patterns to make StarKids better (we use aggregated, anonymised data only)

4. Children's Privacy (COPPA)

• Parental consent required: Only parents or legal guardians can create accounts and add child profiles. We obtain verifiable parental consent before collecting any child data.
• Minimal data collection: We collect only the minimum data necessary to provide our educational services (first name and age).
• No advertising to children: We do not display advertisements to children or use their data for advertising purposes.
• Parental control: Parents can review, modify, or delete their children's data at any time through their account settings. Parents may also request complete deletion by contacting us directly.

5. Data Sharing

We share data only with the following service providers, solely to operate our platform:

• Amazon Web Services (AWS): Cloud hosting, database, file storage, and authentication infrastructure
• Stripe: Secure payment processing for subscriptions (we never store your full credit card details)
• AI Providers (Anthropic, OpenAI, Google): Used solely for generating educational content such as explanations, stories, and learning materials. Only the minimum context needed for content generation is shared; no personal identifying information is sent.

6. Data Security

We take the security of your data seriously and employ industry-standard measures to protect it:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS/SSL
• Encryption at rest: All stored data is encrypted using AES-256 encryption on AWS infrastructure
• AWS infrastructure: We use Amazon Web Services, which provides enterprise-grade security, compliance, and data protection
• Regular security reviews: We conduct regular security assessments and keep our systems up to date with the latest security patches
• Access controls: Strict per-user data isolation ensures you can only access your own family's data

7. Data Retention

• Active accounts: Your data is retained for as long as your account remains active, so you can access your children's achievement history and progress at any time.
• Deleted accounts: When you delete your account, all associated data is retained for 30 days (to allow for account recovery) and then permanently and irreversibly removed from our systems.
• Backups: Data may persist in encrypted backups for up to 90 days after deletion, after which it is permanently removed.

8. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you and your children
• Correct: Update or correct any inaccurate information in your account
• Delete: Request deletion of your account and all associated data
• Export: Request a portable copy of your data in a standard format

To exercise any of these rights, please contact us at support@starkids.app. We will respond to your request within 30 days.

9. Cookies

StarKids uses minimal cookies, strictly for functional purposes:

• Authentication cookies: To keep you signed in and maintain your session securely
• Preference cookies: To remember your settings such as theme preferences

10. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will:

• Provide at least 30 days' notice before the changes take effect
• Send an email notification to the address associated with your account
• Display a prominent notice on our website

Your continued use of StarKids after the changes take effect constitutes acceptance of the revised policy.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection team: