Privacy Policy

StarSprout is an online learning service for children ages 4 to 12+, run by [needs: business name]. This policy explains what information we collect, why, and the choices you have. Questions? Email [needs: contact email].

StarSprout is built so that a parent or guardian sets everything up. Children do not create accounts, and we do not ask children for any personal information. A parent adds each child's profile and chooses what to call them. We designed it this way with the U.S. Children's Online Privacy Protection Act (COPPA) in mind.

Kids can't chat, post, upload photos, or type messages anywhere on StarSprout. Lessons and quizzes use tap-to-answer choices, and the math game only takes numbers. There are no ads and no links that take kids to other websites without a grown-up.

• Account details: your email address, your password (stored scrambled so no one can read it), and your name if you give it.
• Subscription details: your plan, trial and renewal dates, and the reference numbers Stripe gives us. Your card number goes straight to Stripe, never to us.
• Messages you send us: if you email us, we keep the message so we can help you.

When a parent adds a child, we store:

• the first name or nickname the parent types in,
• the cartoon avatar picked from our set, and
• the learning level the parent chooses (for example, ages 6-8).

As a child learns, we store their progress: which lessons they finished, their quiz answers and scores, time spent learning, game scores, stars, badges, and the dates they learned.

We never ask for a child's last name, birthday, photo, email, phone number, address, school, or location.

We use only what the site needs to work:

• Sign-in cookies keep the parent signed in on that device.
• Browser storage remembers which kid is learning on that device, that a grown-up passed the grown-up check (for 15 minutes), and your light or dark display setting.

We do not use advertising cookies, tracking pixels, or third-party analytics.

The "Read it to me" button uses the speech feature built into your child's browser or device. Depending on the device, the browser maker may process the lesson text to create the voice. Only lesson text is read aloud, never your child's information.

• to run StarSprout: show each child lessons at their level, save progress, and award stars and badges,
• to show parents their children's progress,
• to manage your subscription and send account emails (welcome, password reset, billing), and
• to keep the service safe, fix problems, and improve our lessons.

We never use children's information for advertising, and we never build marketing profiles of children.

We never sell or rent personal information. We share it only with:

• Service providers that help us run StarSprout: our hosting and email provider, which stores the site's data and sends account emails, and Stripe, which processes payments. They may use the information only to provide their service to us.
• Authorities, if the law requires it or to protect someone's safety.
• A new owner, if StarSprout is ever sold or merged. This policy would still apply to your information, and we would tell you first.

• See it: the Progress page in the grown-up area shows everything we store about each child's learning.
• Change it: edit a child's name, avatar, or level anytime.
• Delete a child's profile: press Remove on their card. Their name, progress, stars, and badges are deleted right away.
• Delete your whole account: email [needs: contact email] from your account email. We will delete your account and all your children's information within 30 days.
• Stop collection: you can remove a child's profile or cancel your subscription at any time.

We keep your account and your children's information while your account is open, so progress is there when they come back. When you delete a child's profile or your account, we delete that information from our live systems. Copies in our backups are overwritten on a rolling basis. Stripe keeps payment records as financial laws require.

The site uses encrypted connections (HTTPS). Passwords and sign-in tokens are stored in scrambled form, and every request is checked so a parent can only ever see their own children. Card payments happen on Stripe's secure pages. No system is perfectly secure, but we work hard to protect your family's information.

If we change this policy in an important way, we will email parents before the change takes effect. The date at the top shows when it was last updated.

Questions or requests about your family's information: [needs: contact email]. [needs: business name].