Privacy Policy
Your privacy matters. Here's how we protect explorers and families.
Last updated: February 2026 · Version 2026-02-20
Information We Collect
Account Information: Name, email, age range (not exact birthdate), and explorer name.
Learning Data: Progress, scores, and activity within learning modules.
User Content: Drawings, stories, and creations within the platform.
Usage Data: Pages visited, features used, session duration (aggregated).
Parent Data: Email and contact information for parent accounts.
AI Avatar: Optional single photo sent to Google Gemini for one generation and not retained after.
How We Protect Your Data
All data encrypted in transit (HTTPS/TLS) and at rest.
Child data stored separately with additional access controls.
We do not sell, rent, or share personal information.
AI interactions processed through safety-filtered APIs.
Regular security audits and vulnerability assessments.
Photos are stripped of EXIF/GPS metadata before processing.
How We Use Your Information
To provide and improve the educational experience.
To personalize learning paths and content recommendations.
To generate progress reports for parents and guardians.
To communicate important platform updates.
To maintain safety and prevent misuse.
We do NOT show behavioral advertising to children.
Third-Party Service Providers
Stripe, Inc., processes card payments for parent-paid gifts; Stripe receives card info directly, we never see it.
Resend, sends transactional email (parent consent, receipts, reminders).
Google (Gemini API), powers AI avatar generation; photos not retained by us after processing.
MongoDB Atlas, encrypted primary data store.
Your Rights
Access: Request a copy of all data we hold (Parent Dashboard → Export data).
Correction: Update or correct any inaccurate information.
Deletion: Request complete deletion of your account (Parent Dashboard → Delete account).
Portability: Export your data in a standard format.
Revoke: Withdraw parental consent at any time (Parent Dashboard → Revoke consent).
Children's Privacy (COPPA)
We comply with the US Children's Online Privacy Protection Act.
Verifiable parental consent is obtained before any child under 13 continues using the service past the 72-hour grace window.
Parents can review, modify, or delete child information at any time.
We collect only the minimum information necessary to run the service.
No behavioral advertising targeted at children.
No kid-to-kid money, Stars are in-game currency only; only parents can fund real-money gifts.
Data Retention
Account data is retained while the account is active.
After parent-initiated deletion, all personal data is removed within 30 days.
Transaction records (for paid gifts) may be retained up to 7 years for tax/legal compliance.
Contact Us About Privacy
Privacy questions: privacy@isaiahsworld.com
Data requests: datarequests@isaiahsworld.com
COPPA inquiries: parents@isaiahsworld.com
Response time: Within 10 business days.