Privacy Policy

Last updated: May 2026

Klazoo ("we", "us", or "our") is an online math practice platform for K–6 students. We take the privacy of children and families seriously, comply with the Children's Online Privacy Protection Act (COPPA), and collect the minimum information needed to deliver the service. This policy explains what we collect, how we use it, and your rights.

1. Who Can Use Klazoo

Klazoo is intended for use by parents or legal guardians on behalf of children. Children may not register accounts directly. All accounts are created and controlled by an adult, and every child profile requires explicit consent from the parent or guardian at the moment of creation.

2. What We Collect

• Adult account information: a display name (any nickname you choose — your real name is not required), email address, and password (stored hashed, never in plain text).
• Child profile: a nickname (any name you choose) and grade level. We do not collect children's last names, birthdates, photos, addresses, phone numbers, geolocation, or any government-issued identifiers.
• Practice data: questions answered, scores, time spent, skill progress — used to personalize practice for that child.
• Payment information: billing is handled entirely by Stripe (PCI-DSS certified). We never see or store credit card numbers. We retain only your Stripe customer ID and subscription status.
• Technical logs: standard server logs (IP address, browser type, request timestamps) retained for security and debugging for up to 30 days.

3. How We Use It

• To deliver and personalize the practice experience for each child.
• To process subscription payments through Stripe.
• To send account-related emails (receipts, password resets, quiz results to the parent). We do not send marketing emails without explicit opt-in consent.
• To improve the platform — we may analyze anonymized, aggregated usage patterns (e.g. "most-practiced skills"). This analysis never identifies individual children.

We do not sell, rent, or share personal data with third-party advertisers, brokers, or data resellers.

4. Children's Privacy (COPPA)

Klazoo is fully aware that some of our users are children under 13, and we comply with COPPA:

• Verifiable parental consent: a parent or legal guardian must affirmatively consent (via a required checkbox) before any child profile is created. No child data is collected without this consent step.
• Minimal data collection: a child profile contains only a nickname (parent-chosen) and a grade level. No email address, last name, birthdate, photo, or contact information is collected from or about the child.
• No behavioral advertising on child-facing pages: we do not place advertising or behavioral-tracking pixels on practice pages, the skill map, quizzes, or any other page a child interacts with. Any analytics or marketing tracking is restricted to public marketing pages viewed by adults.
• No third-party data sharing: we do not share child data with advertisers or marketers. The only third parties that process child practice data are described in Section 7 and are bound by contract to use it solely to provide our service.
• Parental review and deletion: the parent who created the account can view, edit, or delete any child profile (and all associated practice data) at any time from the dashboard, or by emailing us. Deletion requests are honored within 30 days.

5. Data Retention

We retain account and practice data for as long as the account is active and as reasonably necessary to provide the service. You can request deletion of your account and all associated child data at any time by emailing us or using the in-app delete option. Deletion is completed within 30 days. We may retain limited records (e.g. payment receipts) only where required by law.

6. Security

Passwords are hashed using industry-standard algorithms. Payment data is handled by Stripe (PCI-DSS Level 1). All data in transit is encrypted via HTTPS. Data at rest is stored on hosted infrastructure with industry-standard physical and network safeguards. If we discover a security breach that affects your personal information, we will notify you by email within 72 hours of discovery.

7. Third-Party Services

• Stripe — payment processing. Stripe's privacy practices are governed by its own policy: stripe.com/privacy.
• Google (Gemini API) — used to generate practice questions on demand and to independently verify their correctness. Question prompts include the skill name and difficulty level (and, for validation, the question text and answer choices), but do not include the child's nickname, grade, or any other identifying information about you or your child. Per Google's paid API terms, request and response data is not used to train Google's models. See Google's privacy policy at policies.google.com/privacy.
• Render — hosting infrastructure. Standard server-log retention applies.

8. Your Rights

You may at any time request:

• Access to the personal data we hold about your account or your child's profile;
• Correction of inaccurate data;
• Deletion of your account and all associated child data;
• A copy of your data in a portable format.

To exercise any of these rights, email us at hello@klazoo.com. We will respond within 30 days.

9. California Residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we have collected about you, the right to delete that information, the right to correct inaccurate information, and the right to opt out of any sale or sharing of your personal information. Klazoo does not sell or share personal information. To exercise any California-specific right, email hello@klazoo.com. We will not discriminate against you for exercising these rights.

10. Changes to This Policy

If we make material changes to this policy, we will email the parent account holder before the changes take effect, and re-request parental consent for any new categories of data collection from children.

11. Contact & Operator Information

Per COPPA, here is our full operator contact information:

• Operator: Klazoo
• Email: hello@klazoo.com
• Mailing address: PO Box 72, Tracy, CA 95376

You may also contact us with any privacy concerns or questions about this policy at the email above.