Children's Privacy

AIQ is designed so that every child's account exists inside a parent's account, not on its own. This notice explains what that means in practice and supplements our main Privacy Policy. It is written to satisfy the US Children's Online Privacy Protection Act (COPPA), India's Digital Personal Data Protection Act (DPDPA) requirements for users under 18, the Australian Privacy Act, and Canada's PIPEDA.

1. A child cannot create their own account

Only a verified adult (parent or guardian) can create a parent account, with an email and password. A child profile is added by that adult, inside the parent account, with a first name, an age band (7–9, 10–12, 13–14), and a PIN chosen by the adult. A child never provides an email address, and we never collect one from them.

2. How we get verifiable parental consent

Consent is verified at the point a parent account is created (email + password, i.e. a persistent account credential subject to our standard security), and again whenever a specific feature needs an explicit decision:

• Each course a child requests either follows a per-category rule the parent already set, or waits in the parent's approval queue with the finished course attached — visible before it is visible to the child.
• The optional weekly leaderboard is off by default and requires the parent to opt in per child; turning it off deletes that child's leaderboard data immediately.
• Any change to account or safety settings requires the parent's own authentication, not the child's PIN.

3. What a child's account actually contains

First name, age band, PIN (hashed), learning activity (lessons, quiz results, points and streaks), a small set of inferred "memory facts" used to personalise difficulty and tutor tone, and tutor conversation history scoped to the lessons the child has seen. A child's profile never includes a freeform "about me" field — that field exists only for adult self-learners and is structurally excluded for any account under 18.

4. What we do not do with a child's data

• We do not use it to serve targeted advertising, at any age.
• We do not sell it.
• We do not send more than a first name and coarse age band to the AI model that generates lessons or powers the tutor — never anything from the "memory facts" that could identify the child.
• We do not let a child see another child's data. There is no cross-child leaderboard query — the weekly leaderboard is alias-only and shows no name, age, or identifying detail to anyone.

5. Content and conversation safety

Every generated lesson and every tutor message is checked against the child's age band before it is shown. Unsafe input from a child is redirected rather than answered by the AI. Lessons and tutor messages can be reported in one tap, which hides the content immediately and queues it for review.

6. Parental access and control

A parent can, at any time and without contacting us:

• See every fact AIQ has inferred about their child and delete any of it, in Memory Graph;
• Set per-category topic rules (pre-approve, ask me first, or never) per child;
• Approve or reject any course before the child sees it;
• View the child's progress, mastery and saved notes read-only;
• Delete a child's profile and all associated data entirely.

To exercise any of these, or to ask us to review or delete information we hold about your child, contact [email protected] — we will respond within the time required by applicable law.

7. India DPDPA — under-18 consent

DPDPA treats anyone under 18 as a child requiring verifiable parental consent, not just under-13 as COPPA does. AIQ's parent-account structure applies this stricter standard to every age band we support (7–14), and to every market, not only India.

8. Questions or a request to remove your child's data

Email [email protected] or use the delete option in the app. See also Delete your account.