Privacy

Privacy Policy

Effective date: June 8, 2026

1. Our approach

Doodelybeep is designed for parent-managed children's learning. We aim to collect only the information needed to provide safe activities, manage subscriptions, secure accounts, support parent review, and comply with applicable United States privacy and children's data requirements.

2. Information we collect from parents

We may collect parent name, email address, password hash, consent records, subscription status, billing identifiers from Stripe, support messages, security logs, IP address, and hashed user-agent information. Consent records may include the consent version, policy versions, acceptance time, parent attestations, seat or subscription identifiers, and a private compliance evidence record.

3. Information we collect for child profiles

We may collect child display name, child username, birth year or age band, parent-selected topics, time limits, quiet hours, child profile settings, activity progress, badge progress, and text-only learning history when enabled by the parent.

4. AI interactions

Child messages may be processed by AI and safety providers to generate age-appropriate responses and apply moderation. Parents should instruct children not to share full names, addresses, phone numbers, school names, passwords, or other sensitive personal information in chat.

5. How we use information

We use information to operate parent accounts, create child profiles, provide learning activities, personalize age modes, enforce safety controls, process subscriptions, prevent abuse, maintain security, respond to requests, and improve the service.

6. Parent rights and COPPA-minded controls

Parents may request to review child information, correct it, delete it, disable text history, revoke consent, or close an account. If consent is revoked, child profiles may be disabled or deleted unless retention is required for legal, security, or billing reasons.

7. Sharing and processors

We do not sell children's personal information. We may share information with service providers that help operate the product, including hosting, security, AI safety, support, and subscription billing. Providers are expected to process information only for authorized purposes.

8. Advertising

Doodelybeep is designed to be ad-free for children. We do not use child profile data for behavioral advertising.

9. Retention

We keep parent account records while the account is active, keep consent and billing records as needed for compliance, and keep child profile or transcript data only as needed to provide the service or until a parent deletes it, subject to legal and security retention requirements. When a parent deletes an account, child profiles, saved child transcripts, and child AI notes are deleted from the service, while limited consent, billing, security, and compliance evidence may be retained where needed to document authorization and legal obligations.

10. Security

We use security controls such as hashed passwords, secure sessions, request validation, rate limiting, browser security headers, and restricted access to sensitive configuration. No system can be guaranteed completely secure.

11. State privacy rights

Depending on your location, you may have rights to access, correct, delete, or receive information about data practices under state privacy laws. Parents can submit requests through the support or dashboard channels provided by Doodelybeep.

12. Changes to this policy

We may update this Privacy Policy as the service changes. Material changes to child data practices will be presented to parents and, when required, will require updated consent.

13. Contact

For privacy, child safety, access, deletion, or consent requests, contact Doodelybeep support using the contact method published on the website or parent dashboard.