Privacy Policy

Last updated: July 16, 2026

This Privacy Policy explains how KidFounder.ca ("Kid Founder", "we") collects, uses, and protects personal information when you use app.kidfounder.ca (the "Service"). We follow Canada's PIPEDA, and for children under 13 we follow the U.S. COPPA. Please also read our Terms of Service.

1. Information we collect

Account: your name, email, timezone, and password — your password is stored only as a secure one-way bcrypt hash, never as plain text. If you sign in with Google, we receive your Google email and basic profile.
Learner profiles: a display name, avatar, and timezone for each learner; for kid logins, a username and a PIN.
Learning activity: your lesson progress, XP, streaks, badges, quiz attempts, and the text you enter in boss-level submissions.
AI Mentor: the messages you send to and receive from the Mentor, stored so you have a history and so we can keep the feature safe and improve it.
Payments: processed by Stripe. We receive confirmation and limited details (amount, status, and a Stripe customer/charge identifier) but never your full card number.
Notifications: if you turn on push notifications, our provider stores a device subscription identifier.
Technical: IP address, browser type, and server logs, kept for security and reliability. We use an essential session cookie to keep you logged in and a security (CSRF) token. We do not use third-party advertising or tracking cookies.

2. How we use your information

We use it to: provide and run the course; calculate streaks in your timezone; power the AI Mentor; process your payments and manage access; send account emails (verification, password reset, receipts, and the weekly digest) and, if enabled, push notifications; keep the Service secure and reliable; and improve our product. We do not sell your personal information.

3. Consent and children's privacy

Kid Founder is meant for learners including those under 18, but only an adult (18+) parent or guardian creates and controls the account. That adult provides consent, adds and manages children's learner profiles, and can review, correct, or delete a child's information at any time through account controls or by contacting us. We do not knowingly allow children to create their own accounts or knowingly collect personal information from a child under 13 without verifiable parental consent, consistent with COPPA. If you believe a child gave us information without a parent's consent, contact support@kidfounder.ca and we'll delete it.

4. Who we share it with

We don't sell personal information. We share it only with service providers who process it on our behalf to run the Service:

Stripe — payment processing.
Anthropic — powers the AI Mentor; the messages you send to the Mentor are transmitted to Anthropic to generate a reply.
OneSignal — delivers push notifications (if you enable them).
Google — optional sign-in.
Our email/SMTP provider and our hosting provider (KnownHost).

We may also disclose information if required by law, or to protect the rights, property, or safety of our users or others.

5. International transfers

Some of our providers (for example Stripe, Anthropic, and OneSignal) process data in the United States and other countries. By using the Service you consent to your information being processed in those locations, with appropriate safeguards in place.

6. How long we keep it

We keep your information while your account is active and as needed to provide the Service and meet legal or operational requirements. When it's no longer needed, or on a valid deletion request, we delete or anonymize it.

7. How we protect it

We hash passwords with bcrypt, serve the site over encrypted HTTPS, use prepared database statements, keep secrets out of our code, and limit who can access data. No online service is perfectly secure, but we work to protect your information.

8. Your rights

Under PIPEDA you can ask to access, correct, or delete your personal information, and you can withdraw consent. Contact us at support@kidfounder.ca and we'll respond. You also have the right to complain to the Office of the Privacy Commissioner of Canada.

9. Cookies

We use only essential cookies: a login session cookie and a security (CSRF) token. No advertising or cross-site tracking cookies are used.

10. Changes to this policy

We may update this policy. We'll post the new version here with an updated date and, for material changes, notify you by email.

11. Contact us

KidFounder.ca · support@kidfounder.ca