Privacy Policy

1. Introduction

Welcome to TurboCreate in partnership with Robot Academy. We take the privacy of children seriously and are committed to complying with the Children's Online Privacy Protection Act (COPPA) and other applicable privacy laws.

This Privacy Policy explains:

• What information we collect
• How we use and protect that information
• Your rights as a parent or guardian
• How to contact us with questions

Please read this Privacy Policy carefully. By using TurboCreate, you agree to the terms described here.

3. Information We Collect

3.1 Information from Parents

When you create an account, we collect:

• Email address (required)
• Full name (required)
• Phone number (optional)
• Password (for account security)
• Payment information (processed securely by Stripe; we do not store credit card numbers)

3.2 Information About Children

With your consent, we collect the following information about your child:

• First name (required)
• Age (required)
• Grade (required)
• Gender (optional)
• Coding experience level (optional)
• Special notes or accommodations (optional, provided by parent)

3.3 Information Generated During Use

When your child uses TurboCreate, we automatically collect:

• AI interaction logs: Prompts your child enters and responses from our AI coding assistant
• Code and projects: Games and code your child creates during the course
• Usage data: Login times, session duration, and feature usage
• Technical information: IP address, browser type, device type (for security and troubleshooting)

4. How We Use Information

4.1 Parent Information

We use parent information to:

• Create and manage your account
• Process payments for course enrollment
• Communicate with you about your child's enrollment and progress
• Send course updates, schedules, and important notices
• Send marketing emails about new courses (you can unsubscribe anytime)
• Respond to your questions and support requests

4.2 Children's Information

We use your child's information to:

• Provide access to the TurboCreate course and learning materials
• Enable AI-assisted coding features and tools
• Track learning progress and course completion
• Monitor AI interactions for safety and appropriateness
• Provide you with visibility into your child's activities
• Improve our curriculum and teaching methods

4.3 We Do NOT:

• Sell or rent children's personal information to anyone
• Share children's information with third parties for their marketing purposes
• Use children's information for behavioral advertising
• Require children to provide more information than necessary to participate in our program

5. Information Sharing

We share information with third-party service providers only as necessary to operate our service:

• AI Services: Anthropic Claude, Venice.ai, Together.ai, and other language models (receive code/prompts only, no personal identifiers)
• Payment Processing: Stripe (processes payments, we do not store credit card numbers)
• Cloud Hosting: Vercel, Supabase, Railway (store encrypted data)
• Email Services: Resend (delivers transactional and marketing emails)

We do not have specific contractual agreements with all providers regarding children's data protection, though we choose reputable providers. These providers have their own privacy policies governing their use of data.

6. Data Security

We implement reasonable security measures to protect your information:

• Encryption: Data is encrypted in transit (HTTPS) and at rest
• Access controls: Limited employee access to personal information
• Password protection: Accounts require secure passwords
• Regular security updates: We maintain our systems with current security patches
• Third-party security: We only work with reputable service providers who maintain strong security practices

However, no system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Breach Notification: In the unlikely event of a data breach affecting children's personal information, we will notify affected parents within 72 hours of discovering the breach.

7. Data Retention

7.1 Active Accounts

We retain your information for as long as your account is active or as needed to provide services.

7.2 AI Interaction Logs

• AI chat logs and interactions are retained for 2 years after each session for safety monitoring, legal compliance, and service improvement
• After 2 years, detailed logs are automatically deleted
• Aggregated, anonymized usage statistics (with no personal identifiers) may be retained indefinitely for research and improvement purposes

7.3 Account Deletion

When you delete your account:

• Most personal information is deleted within 30 days
• Some information may be retained longer for legal or business purposes (e.g., payment records for tax compliance, consent records per COPPA)
• Backup copies are purged within 30 days through our rolling backup retention policy

9. Parental Consent

9.1 Verifiable Parental Consent

We obtain verifiable parental consent before collecting personal information from children. Our consent process includes:

• Parents must create accounts and provide consent before children can participate
• Consent is obtained through a checkbox during the registration process
• Payment via Stripe provides additional verification of parental identity (credit card holder presumed to be adult)
• We maintain records of parental consent for 7 years as required by COPPA

9.2 Consent Through Continued Use

By continuing to use our services after we make changes to this Privacy Policy, you consent to those changes. We will notify you of material changes via email at least 14 days in advance.

10. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

• Enable essential functionality (such as keeping users logged in)
• Remember user preferences and settings
• Analyze usage patterns to improve our service
• Ensure security and prevent fraud

Note: The specific cookies we use may change as our platform evolves. We reserve the right to implement additional cookies for analytics, functionality, security, or other legitimate business purposes.

11. Marketing Communications

We may send marketing emails to parents about new courses and offerings. You can unsubscribe at any time using the link in any marketing email. We do not send marketing emails to children.

12. California Privacy Rights & International Users

California residents have additional rights under the CCPA/CPRA. International users should be aware that data may be transferred to and processed in the United States. By using our services, you consent to this transfer.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email at least 14 days before the effective date. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

15. FTC Disclosure

TurboCreate in partnership with Robot Academy complies with the Children's Online Privacy Protection Act (COPPA). For more information about COPPA, please visit the Federal Trade Commission's website at: ftc.gov/children's-privacy