What we have, why we have it, and how to take it back.
This is the plain-language version of our privacy practices for families. The formal policy is linked at the bottom. If anything here surprises you, we want to know.
Four things, and why each one
Parent email and a hashed password
So you can log in and we can reach you about your account. The password is hashed with bcrypt; we never see it.
Child nickname and age band
The nickname makes missions friendlier and the age band tunes every word and number. We never ask for a full name or birthdate.
Mission results
Which world, which choices, the short typed answer, the debrief, and the parent note. This is what powers the progress view and the weekly question.
Plan and billing status
Which plan you are on and whether it is active. Card numbers stay with Stripe; we store only a customer reference.
Where it lives and when it goes away
Where it lives
Family data is stored in a managed database hosted in the United States, chosen to run alongside our Vercel-hosted application. Backups are encrypted and kept in the same region. Mission text is sent to a model provider only for the seconds it takes to generate a turn, without your email, your child's nickname tied to an identifier, or any account information.
Who can see it
You, through your parent account. A small number of Coinsprout staff, only when you ask for help or when we investigate a flagged mission. No one else. We do not sell data, share it with advertisers, or hand it to data brokers.
Retention
- Account and child profiles: kept while your account exists.
- Mission results: kept while your account exists, so the progress view stays complete. You can delete individual children at any time, which removes their missions too.
- Billing records: kept for seven years after the charge, as US tax law requires. These contain no child data.
- Support emails: kept for two years, then deleted.
- Server logs: 30 days, and they never contain mission text or passwords.
When you delete your family, everything except the billing records above is removed from our live database immediately and from backups within 30 days.
Export and delete, from Settings
Export
Settings, then Your data, then Export. You get one JSON file containing your account, every child profile, and every mission result with its debrief and parent note. It is readable in any text editor and yours to keep or move. Export as often as you like.
Delete
Settings, then Your data, then Delete family. This removes your account, every child profile, and every mission result, permanently. We ask you to confirm once, then it is gone. There is no soft delete and no recovery, so export first if you want a copy.
Prefer to ask by email?
Write to privacy@coinsprout.tech from the email on your parent account and tell us whether you want an export, a correction, or a deletion. We confirm your identity by replying to that address, then complete the request within 30 days, usually within a few business days. You can also write to us at 175 S Third St, Suite 520, Columbus, OH 43215.
The specifics for kids' data
- Parents provide it. Every piece of information about a child comes from the parent: the nickname, the age band, and the decision to let them play. Children cannot create accounts or enter contact information anywhere in the product.
- The AI is forbidden from asking. The model's rules prohibit requesting or confirming a child's full name, address, school, photos, or family finances. If a child types something personal anyway, the model does not repeat it and a server-side check removes anything that slipped through.
- Mission text is not training data. Text sent to a model provider is sent under terms that do not permit training on it, without identifiers. We do not train models on it either.
- Parents see everything. Every typed answer and every debrief a child receives is visible in the parent view. There is nothing a child does in Coinsprout that a parent cannot read.
- Parents can remove it. Deleting a child profile removes that child's missions and typed answers immediately. Deleting the family removes everything.
For the formal version, including our COPPA notice, read the Privacy policy.