Synthetic local testing only
Draft Children’s Privacy Notice
Draft—counsel review required. Do not use this version for production or real child data. Operator identity/contact, launch jurisdictions, final vendor disclosures, and the legally required parental-verification method remain open.
Document version: privacy-draft-2026-08-16
Information in V1
- Parent or legal guardian email and passwordless Supabase Auth session.
- Parent Setup document versions, status, action times, timezone, and factual action method.
- Child screen name—not a real name—optional age 2–5, up to five favourite-topic slugs, and one learning-style preference.
- Structured topics, visit counts, progression, summaries, and emerging interests inferred from Chimpal use.
Chimpal does not ask for a child’s email, password, precise location, photo, contacts, or real name. The bounded active conversation transcript remains in browser memory during a session and is not retained as a transcript.
Why it is used
The information authenticates the adult, personalises age-appropriate learning, remembers reviewed interests, provides Parent Zone insights, applies safety/spend controls, and supports export, correction, and deletion.
Service providers and disclosure
Current architecture uses Supabase for adult authentication/database storage, Vercel for hosting/serverless delivery, and—only after a separate production privacy decision—Anthropic for server-side AI generation. Production contracts, child-data terms, subprocessors, locations, and disclosures require final review. Chimpal is not designed to sell child data or use it for targeted advertising.
Retention and security
Detailed learning records and summaries are generally retained for 90 days; operational request, telemetry, budget, and abandoned-session metadata are generally retained for 30 days. Current caregiver-approved aggregates remain until correction or profile deletion. RLS binds child data to the adult’s Supabase UUID. Hosted backup retention and security statements require production approval.
Parent rights
A parent or legal guardian may review, export, correct, stop future collection, delete a profile and its learning graph, or delete the account. Refusing Parent Setup prevents a child profile from being created. An incomplete, graph-free Auth account can be deleted from Parent Setup while recent authentication is valid.
Operator and contact
Required before launch: [legal operator name], [postal address], [privacy email/phone], and jurisdiction-specific parent-rights instructions.