1. Overview
Tekku ("we", "our", "us") is an AI education platform for kids ages 8–16. We are committed to protecting the privacy of our users, especially children. This policy explains what data we collect, how we use it, and how we protect it. We comply with the Children's Online Privacy Protection Act (COPPA) and applicable data protection laws.
By using Tekku, you agree to the practices described in this Privacy Policy and our Terms of Service.
2. Information We Collect
Parent accounts:Email address, password (hashed), subscription status, and payment information (processed by Stripe — we never store card numbers).
Child profiles: First name or display name, builder trait scores, mission completion history, and daily interaction counts. We collect the minimum data necessary to provide the educational service.
AI interactions:Prompts submitted by children and AI responses are temporarily stored for the purpose of coach feedback and progress tracking. Prompt history is automatically deleted after 90 days.
Automatic collection: We collect basic device information (browser type, operating system), usage data (pages visited, feature usage, session duration), and IP addresses for security and fraud prevention. We do not use this data to build advertising profiles.
3. COPPA Compliance
We do not knowingly collect personal information from children under 13 without verifiable parental consent. All child accounts are created by parents. Parents must acknowledge our data practices and provide consent during the onboarding process. For full details on our COPPA practices, see our COPPA Policy.
Parental consent: Before a child can use Tekku, a parent or legal guardian must create the account, review our data practices, and provide verifiable consent. We use a consent flow that meets FTC guidelines.
Parental rights:
- Review your child's personal information via the parent dashboard
- Request deletion of your child's data at any time
- Revoke consent and deactivate your child's account
- Control your child's daily interaction limits
- Receive notification before any material changes to data collection practices
4. How We Use Data
We use collected data for the following purposes:
- To provide the educational service (missions, AI coaching, progress tracking)
- To generate builder profile insights for parents
- To send weekly parent digest emails (paid plan only)
- To improve the platform, fix bugs, and maintain security
- To comply with legal obligations
We never:
- Sell user data to third parties
- Use children's data for advertising or behavioral targeting
- Share data with other companies for marketing purposes
- Track children across other websites or apps
- Use children's data to train AI models
5. AI and Data Processing
Tekku uses AI models to deliver personalized educational experiences. When a child submits a prompt, it is sent to our AI provider (OpenRouter) for processing and a response is returned in real time.
No training on child data: Prompts and responses are used solely to provide the service and generate progress insights. We do not use children's data to train, fine-tune, or improve any AI models. Our agreements with AI providers explicitly prohibit the use of user data for model training.
Content moderation:All AI interactions pass through automated content filtering before being shown to the child. Prompts and responses are scanned for harmful, violent, sexual, or age-inappropriate content. See Section 7 for details.
6. Data Storage and Security
Data is stored in Supabase (hosted on AWS) with row-level security policies enforced at the database level. We employ the following security measures:
- All data encrypted in transit using TLS 1.3
- All data encrypted at rest using AES-256
- Row-level security policies ensure users can only access their own data
- Payment processing handled entirely by Stripe — we never see or store credit card numbers
- Regular security audits and dependency updates
7. Content Moderation
All AI interactions are moderated for child safety. We use automated content filtering to block harmful, violent, sexual, or age-inappropriate content before it reaches the child.
Our moderation system operates on a fail-closed principle: if the moderation system is unavailable or returns an error, content is blocked by default rather than allowed through. This ensures that children are never exposed to unmoderated AI output.
8. Data Retention
AI prompt history and agent responses are automatically deleted after 90 days. Builder profile data (trait scores, mission completions) is retained as long as the account is active.
When an account is deleted, all associated data is permanently removed within 30 days. This includes child profiles, AI interaction history, builder scores, and any other personal data. Aggregated, anonymized data that cannot be linked to any individual may be retained for analytics purposes.
9. Third-Party Services
We use the following third-party services to operate Tekku:
- Supabase: Database, authentication, and real-time data synchronization
- Stripe:Payment processing. Stripe's own privacy policy governs their handling of payment data
- OpenRouter: AI model routing. Prompts are processed but not stored or used for training by OpenRouter
- Vercel: Hosting and edge delivery
Each third-party service has its own privacy policy. We encourage you to review them. Our agreements with these providers include data protection terms consistent with this policy and applicable law.
10. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you or your child
- Correct: Request correction of inaccurate or incomplete data
- Delete:Request deletion of your data or your child's data at any time
- Object: Object to certain types of data processing
- Portability: Request your data in a structured, machine-readable format
To exercise any of these rights, contact us at privacy@tekku.app. We will respond to all requests within 30 days. See our Terms of Service for additional details.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify parents via email and post a notice on the platform at least 30 days before the changes take effect. For changes that affect children's data collection, we will obtain renewed parental consent where required by law.
Continued use of Tekku after the effective date constitutes acceptance of the updated policy.
12. Contact Us
For privacy questions, data deletion requests, or COPPA inquiries: