Children's Online Privacy Protection — our commitments to children under 13
Guiden serves K–12 students, which means some users are children under 13. We use the School Consent Model authorized under COPPA Rule §312.5(b)(1). Under this model:
This model is commonly used by educational technology providers and has been recognized by the FTC as compliant with COPPA when schools have genuinely provided parental notice. We do not accept student registrations from children under 13 who arrive independently through our public website.
We apply strict data minimization principles to all users, and particularly to children under 13. The following is a complete inventory of personal information we collect:
| First and Last Name | Displayed within the platform to the student's teachers; not shared externally |
| Email Address | Used for authentication only; may be a parent-provided or school-provided address |
| Password (hashed) | Never stored in plaintext; bcrypt hash only |
| Grade Level (integer) | Used to calibrate AI tutor language and difficulty — no names associated |
| School Name | Used to associate the account with the correct School Partner |
| Chat Messages | Conversations with AI tutors; visible to the student's teacher; processed by OpenAI API |
| Assignment Submissions | Chat history submitted for AI grading; visible to the student's teacher |
| AI Grades and Feedback | Generated by AI grader; visible to student and teacher |
| Login Timestamps | Last login date for security monitoring |
| Usage Counters | Daily message/chat counts for rate limiting — not shared externally |
Information collected from children under 13 is used exclusively for the following educational purposes:
We do not use children's information for:
When a student sends a message or submits an assignment, the content of those messages is transmitted to OpenAI's API to generate tutor responses and grades. We do not transmit the student's name, email address, school name, or any directly identifying information to OpenAI. Only the content of messages and contextual data (grade level as an integer, subject name) is shared.
OpenAI operates under a Data Processing Agreement that prohibits using API inputs to train its models. See OpenAI's API data usage policy.
Children's data is stored on cloud infrastructure with encryption at rest and in transit. These providers act as data processors under our direction and have no independent right to use children's data.
Teachers and administrators of the School Partner that enrolled a student have access to that student's chat history, grades, and learning analytics. This access is limited to educational personnel with a legitimate educational interest and is consistent with FERPA's school official exception.
We do not share children's personal information with any other third parties. We do not sell, rent, or license children's data to anyone.
Parents and legal guardians of children under 13 have the following rights under COPPA:
Parents may request a complete copy of all personal information we have collected about their child. We will provide this information within 10 business days of receiving a verified request.
Parents may request the deletion of all personal information about their child. We will permanently delete all such information within 30 days of a verified request, except where retention is required by law (e.g., for fraud prevention or legal compliance) or where the school has a legitimate educational interest in retaining the data.
Parents may refuse to permit further collection or use of their child's information. Exercising this right will require deactivation of the child's account, as we cannot provide the tutoring service without collecting the information described in Section 2.
To exercise any of these rights, contact us at:
| privacy@colorcodedkids.com | |
| Subject Line | "COPPA Parental Rights Request" |
| Required Info | Child's full name, school name, your name, your relationship to the child, and a description of your request |
| Verification | We may ask for reasonable verification of your identity and relationship to the child |
| Response Time | 10 business days |
Parents may also contact their child's school administrator, who can request deletion or data access on the parent's behalf through the school's administrative account.
Color Coded Kids LLC does not engage in behavioral advertising, interest-based advertising, or targeted marketing directed at children under 13. This prohibition is absolute and applies regardless of any other business considerations. We do not permit advertising networks of any kind to access data from student-facing pages of our platform.
We retain children's personal information only for as long as necessary to provide the educational service:
| Active Student Data | Retained while the student account is active |
| Chat History & Grades | Retained for 3 years after last login, then permanently deleted |
| Upon Parent Request | Deleted within 30 days of a verified parental deletion request |
| School Termination | Deleted within 60 days of School Partner account termination |
We apply heightened security measures to children's data:
For all COPPA-related inquiries, including parental rights requests, questions about our data practices, or to report a concern:
Email: privacy@colorcodedkids.com
Subject: "COPPA Inquiry"
Color Coded Kids LLC · St. Louis, MO