ProgramsPricingBlog
Start TrialLog In

PrepCraft

COPPA Policy

How PrepCraft handles children's personal information and parental controls.

COPPA Policy (Children’s Privacy Notice)

Last Updated: September 18, 2025

PrepCraft School, Inc. (“PrepCraft,” “we,” “us,” “our”) is committed to protecting children’s privacy. This Children’s Privacy Notice explains how we handle personal information from children under 13 in compliance with the Children’s Online Privacy Protection Act (COPPA).

This notice applies to child‑directed parts of PrepCraft—including our AI tutor (“Preppal”), IOWA/CogAT practice, reading & math practice, educational games (e.g., QuestMath/PuzzleMath), and related features available through our websites and apps (collectively, the “Services”). It supplements our general Privacy Notice for teens 13+ and adults (Privacy Notice).

1) Who We Are (Operator Contact)

  • Operator: PrepCraft LLC.
  • Email: support@prepcraft.ai
  • Mailing Address: 30 N Gould St Ste N Sheridan, WY 82801 USA

If other companies collect personal information directly through our child‑directed Services (not merely as our processors), we will list them here or in an updated version of this notice.

2) Parental Role & Consent

  • Parents create the child’s account/profile. We do not knowingly allow a child to create an account.
  • Verifiable Parental Consent (VPC) is required before we collect, use, or disclose a child’s personal information beyond what COPPA allows for one‑time contact or support. We may verify consent using methods such as a small credit/debit card charge, signed consent form, government‑ID check, or verified school authorization (see next bullet).
  • School‑Provided Accounts (if offered): If a school or district creates a child account and represents it has parental authority or is acting as the parent’s agent for educational use, we rely on that consent strictly for educational purposes.

3) What We Collect From or About Children

We collect only what’s reasonably necessary for a child to use the Services.

A. Parent‑Provided Info (at sign‑up):

  • Child’s first name (or parent‑approved nickname), age/grade, date of birth (to apply COPPA), parent name, parent email, and billing info (if applicable).

B. Child Learning Data (created through use):

  • Account & profile: nickname/avatar, grade band, class/group assignment.
  • AI tutor interactions: questions typed or spoken to Preppal, transcripts, hints, system feedback.
  • Practice & progress: answers, scores, time‑on‑task, difficulty level, unit mastery, IOWA/CogAT practice timing.
  • Games & leaderboards: gameplay statistics and rankings (shown using parent‑approved nickname only).
  • Audio/voice (optional): microphone audio and transcripts if your child uses voice features or live sessions.
  • Class/session recordings (if applicable): for quality, safety, and support.

C. Automatically Collected (persistent identifiers):

  • IP address, device identifiers, app/browser type and settings, operating system, timestamps, crash logs, and limited cookies or similar technologies used for authentication, security, session management, and analytics within the Services.
  • We do not permit third‑party advertising networks or social media plugins to track children across non‑PrepCraft sites/apps.

4) How We Use Children’s Information

  • Provide and secure the Services (log‑in, authentication, fraud prevention).
  • Deliver AI‑guided explanations, hints, audio playback, and voice features.
  • Run practice exams, adjust difficulty, personalize learning paths, and track progress.
  • Operate games and leaderboards (nickname only).
  • Support safety (content moderation, abuse prevention), troubleshoot issues, and provide customer support.
  • Improve our curriculum, features, and teaching quality.

Model training & research: We do not use children’s personal information to train models that are made available to others. We may use de‑identified and aggregated data to improve PrepCraft’s own features and quality. We will seek additional consent if we ever wish to use identifiable child data for any new purpose not covered here.

5) No Ads, No Sale

  • We do not sell children’s personal information.
  • We do not show behavioral or interest‑based advertising in child‑directed experiences.
  • Service providers act under contract as our processors and may use data only to deliver services to PrepCraft.

6) When We Share Children’s Information

We share children’s information only:

  • With service providers/contractors (e.g., cloud hosting, analytics limited to our purposes, content moderation, voice/telephony, customer support, payment processing for parents). They must protect the data and may not use it for their own purposes.
  • With parents/guardians via the parent dashboard or support.
  • For safety, security, or legal reasons, including responding to valid legal requests or preventing harm.
  • In a corporate transaction, if we merge, sell, or transfer assets; the successor will honor this notice or provide parents with new choices.

We may share aggregated or de‑identified insights that do not identify your child.

7) Social & Interactive Features (Chat, Live Sessions, Leaderboards)

  • Chat/Collaboration: Child‑to‑child or child‑to‑tutor communications may be visible to intended participants and to authorized moderators for safety. Children should avoid sharing personal information in chats.
  • Leaderboards: Display nicknames only (no last names, emails, or contact info).
  • Moderation & Safety: We log interactions and may review or flag content to enforce rules (e.g., anti‑bullying, harassment). Parents can request chat/voice features be disabled for their child where feasible.

8) Data Minimization, Retention & Deletion

  • We collect the minimum information needed to run the Services.
  • We keep identifiable child data only as long as needed for the purposes described or as required by law. Typical retention: while the account is active and for up to 12 months after inactivity to allow reactivation and support.
  • Upon verified parental request or account closure, we delete or de‑identify the child’s personal information within 45 days, unless we must retain some data for legal, safety, or transactional reasons (e.g., fraud prevention, payment records).

9) Parent Choices & Rights

Parents can, at any time:

  • Review the child’s personal information.
  • Request corrections to inaccurate information.
  • Delete the child’s personal information.
  • Withdraw consent and/or disable specific features (e.g., voice, chat, leaderboards) where technically feasible.
  • Export a copy of key learning records (scores, progress, transcripts).

To exercise these rights, contact support@prepcraft.ai from your account email. We may take steps to verify your identity and your relationship to the child. We aim to respond within 45 days.

We do not condition a child’s participation in activities on providing more information than is reasonably necessary.

10) Security

We use administrative, technical, and physical safeguards appropriate for children’s data, including encryption in transit and at rest, access controls, and safety monitoring. No method of transmission or storage is 100% secure; we continuously improve our protections.

11) International Users

Our Services are operated from the United States. If you access them from outside the U.S., your information may be transferred to and processed in the U.S. by us and our service providers.

12) Changes to This Notice

We will post updates here and note the “Last Updated” date. If we make material changes that affect previously collected child information, we will notify parents and, where required, seek new consent.

13) How to Contact Us

Questions or requests about this Children’s Privacy Notice or your child’s information:

Summary of Key Commitments

  • Parents create child accounts and give consent first.
  • We collect only what’s needed (progress, answers, transcripts, device info).
  • No ads, no sale of children’s data.
  • Leaderboards use nicknames; chats are moderated.
  • You can view, export, correct, delete, or limit features anytime.
  • We secure data and delete it when no longer needed.