Privacy Policy

Who this covers

AIcoddy provides online coding, AI and robotics learning for children aged about 6–17. Guardians create the family account; each child gets a restricted learning login managed by the guardian.

What we collect

• Guardians: name, email, password (stored only as a secure hash), country of residence, and optional phone number.
• Children: first name, an approved display name, date of birth (to apply age-appropriate safeguards), optional grade, interests, experience level and learning preferences.
• Learning records: lesson progress, quiz attempts, project submissions, attendance, certificates and badges.
• Purchases: what was bought, for which child, the market, currency and amount, and payment evidence you upload. We never store card numbers.
• Safety and security records: moderation decisions, reports, consent history and audit logs.

How we use it

To run the service: delivering classes and courses, showing progress to guardians, reviewing payments, issuing certificates, keeping the community safe and securing accounts. We do not sell children's data and do not use private student information for unrelated advertising.

Who can see what

• Guardians see their own linked children only.
• Children see only their own learning records — never a sibling's or their guardian's billing or consent details.
• Instructors see only students in classes they are assigned to, and never payment information.
• Authorised administrators see what their role requires; sensitive actions are recorded in an audit log.
• The public sees only gallery projects approved with guardian consent, showing a first name or approved display name — never surname, date of birth, school, location or contact details.

Files and payment evidence

Uploads are kept in private storage and are only available through short-lived links to people authorised to see them.

Consent

Some activities need separate guardian consent: public gallery sharing, community participation and student media. Consent can be withdrawn at any time from the family dashboard; withdrawing gallery consent unpublishes the child's public projects.

Your choices and rights

Guardians can request an export of their child's data, or deletion of a child account, from the family dashboard. When a deletion request is received we deactivate the child account and hide public content immediately while the request is reviewed. Some records may need to be kept for legal, payment, security or safeguarding reasons; we keep no more than necessary. Retention periods by record type will be published here after legal review.

Contact

Questions about privacy? Contact us.