Privacy Policy

Last updated: May 2026

1. Introduction

TINKRR ("we," "our," or "us") provides a parent-supervised learning coach for children ages 4–18. This policy explains how we collect, use, disclose, and protect information. Our practices follow the Children's Online Privacy Protection Act (COPPA) and other applicable laws.

2. Who this policy covers (COPPA Step 1)

TINKRR is directed to families with children under 18 and is used by children with parent oversight. COPPA applies to children under 13. We treat all learner accounts as requiring parental consent and verifiable parental consent (VPC) before we collect personal information from a child.

3. Information we collect

From parents: Email, password (hashed), verification that you are an adult (21+), identity verification via Kids Web Services or manual review, notification preferences, and plan settings.
From children (only after VPC and your consent): Kid username, optional nickname, optional email, age or birthday, chat messages, session and voice-usage data, and optional file uploads when you enable them.
Technical data: Device/browser information, IP address, and logs needed to operate and secure the service.

We do not sell children's personal information. We do not use child data for advertising.

4. Direct notice & verifiable parental consent (COPPA Steps 3–4)

Before collecting a child's personal information we: (a) show you a direct notice describing what we collect and why; (b) require you to confirm consent when adding a child; and (c) require verifiable parental consent through Kids Web Services (email link — no credit card) or manual ID review. Children cannot sign in until VPC is complete.

Before we send child messages to AI providers, we ask you to consent separately to sharing chat content with third-party processors as described below.

5. How we use information

We use information to provide the learning coach, enforce your limits, let you review activity, send notifications you opt into, protect safety, and comply with law. We collect only what is reasonably necessary for your child to use TINKRR.

6. Parental rights (COPPA Step 5)

Parents may at any time:

Review personal information we collected from their child (dashboard chat history and settings).
Delete stored chat and session data for a child (Settings → Children → Delete child data), which disables sign-in.
Refuse further collection by suspending or removing a child account.
Revoke consent by contacting us — we will stop collection and delete data as required.

Contact legal@tinkrr.ai for requests we cannot fulfill in the app. We respond within COPPA timeframes.

7. Third-party service providers (disclosure)

We use contracted providers that process data only for our instructions:

Supabase — authentication, database, and file storage.
Anthropic — chat coaching, safety analysis, and parent summaries (child message content may be sent after your AI consent).
ElevenLabs — text-to-speech for the voice coach (coach reply text only, after your AI consent).
Kids Web Services (Epic) — parent identity verification.
Resend — transactional email to parents.
Stripe — parent subscription billing only (not child data).
Google reCAPTCHA — bot protection on parent signup (Google Privacy Policy).

8. Security & retention (COPPA Step 6)

We use encryption, access controls, and secure hosting. We retain child personal information only as long as needed to provide the service or as required by law. When you delete child data or close an account, we delete or anonymize stored messages and session records within our normal processing cycle. Parent chat viewing may be limited by plan retention windows; deletion requests remove underlying records.

9. Child safety & mandated reporting

If a child discloses potential abuse or danger, we may share information with law enforcement or child protective services as required by law. We comply with applicable mandated reporting obligations.

10. Changes

We may update this policy. Material changes affecting children's information will be communicated to parents (email or in-app notice). Where COPPA requires renewed consent for new uses, we will obtain it before applying changes.

11. Contact

Privacy and COPPA inquiries: legal@tinkrr.ai · General support: contact@tinkrr.ai