Privacy Policy

Last Updated: January 6, 2026

1. Information We Collect

1.1 Parent/Guardian Information

When you create an account, we collect:

• Email address
• Name
• Payment information (processed securely through our payment provider)
• Account preferences

1.2 Child Information

We only collect child information with verified parental consent.

• First name only (no full names or last names)
• Age range (to provide age-appropriate content)
• Voice recordings (for AI conversation features, stored temporarily)
• Learning progress data (stories completed, concepts learned)
• Virtual portfolio data (stock selections, trade history - no real money)

1.3 Automatically Collected Information

• Device information (type, operating system)
• Usage data (features used, time spent)
• Technical data (IP address, browser type)

2. How We Use Information

2.1 To Provide Our Service

• Personalize learning experiences with Casey the AI companion
• Track educational progress and achievements
• Enable voice conversations (processed and deleted after response)
• Simulate stock market trading with virtual money
• Generate parent dashboard insights

2.2 To Improve CashKiddo

• Analyze usage patterns to improve features
• Fix bugs and technical issues
• Develop new educational content

2.3 To Communicate

• Send service updates and notifications
• Respond to support requests
• Share educational tips for parents (optional)

3. Voice Data and AI Processing

3.1 How Voice Works

When your child speaks to Casey:

1. Voice is recorded and sent to our AI provider (OpenAI/Anthropic) for processing
2. AI converts speech to text and generates an educational response
3. Response is converted back to voice
4. Voice recordings are deleted within 24 hours
5. Only text transcripts are saved for learning progress tracking

3.2 Voice Data Retention

• Voice recordings: Deleted within 24 hours
• Text transcripts: Stored to track learning progress (parents can request deletion anytime)
• AI memory: Conversation summaries (not full transcripts) to personalize learning

4. Data Security

We protect your family's information with:

• Encryption: All data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Secure servers: Hosted on enterprise-grade cloud infrastructure
• Access controls: Strict employee access policies (need-to-know basis)
• Regular audits: Security reviews and penetration testing
• Payment security: PCI-DSS compliant payment processing (we never store credit card details)

5. Parental Rights (COPPA Compliance)

Parents have the right to:

• Review all information collected about their child
• Delete their child's account and all associated data
• Refuse further collection of their child's information
• Export their child's learning data

6. Third-Party Services

We use the following trusted services:

• OpenAI/Anthropic: AI conversation processing (COPPA compliant)
• ElevenLabs: Voice synthesis
• Payment processor: Stripe/Razorpay (PCI-DSS compliant)
• Cloud hosting: AWS/Google Cloud (SOC 2 certified)
• Analytics: Privacy-focused analytics (no personal data shared)

Important: These services have their own privacy policies. We only work with COPPA-compliant providers.

7. International Data Transfers

CashKiddo is based in India. If you're accessing from outside India:

• Your data may be transferred to and processed in India
• We ensure adequate safeguards per GDPR and local regulations
• We use standard contractual clauses for EU data transfers

8. Data Retention

• Active accounts: Data retained while account is active
• Deleted accounts: All data permanently deleted within 30 days
• Voice recordings: Deleted within 24 hours
• Payment records: Retained for 7 years (legal requirement)

9. Cookies and Tracking

We use minimal cookies:

• Essential cookies: Required for login and basic functionality
• Analytics cookies: Anonymous usage statistics (can be disabled)
• No advertising cookies: We don't track users for ads

10. Children's Privacy Protection

11. Your Rights (GDPR & DPDPA)

You have the right to:

• Access: Get a copy of all your data
• Rectification: Correct inaccurate information
• Erasure: Delete your account and all data
• Portability: Export your data in machine-readable format
• Object: Stop processing of your data
• Withdraw consent: At any time

12. Updates to This Policy

We may update this Privacy Policy from time to time. When we do:

• We'll update the "Last Updated" date at the top
• We'll notify you via email for material changes
• Continued use of CashKiddo means acceptance of changes

13. Contact Us

14. Compliance

CashKiddo complies with:

• COPPA (Children's Online Privacy Protection Act) - USA
• DPDPA (Digital Personal Data Protection Act) 2023 - India
• GDPR (General Data Protection Regulation) - EU
• CCPA (California Consumer Privacy Act) - California, USA

Thank you for trusting CashKiddo with your family's financial education journey. We're committed to keeping your children safe while they learn.