COPPA and Children’s Privacy

CR Kids is designed so that no personal information about a child is collected until a parent has created an account, verified their email, and given verifiable consent. A child never signs up, never enters personal information, and is never tracked for advertising.

The free assessment can be taken by anyone without an account and collects no personal information from anyone, so it does not involve children’s personal data at all.

We collect information about a child only when a parent chooses to create a profile for that child (for example, to save assessment results or to use our learning apps). At that point, the parent provides limited information such as the child’s first name and age. The parent provides this; the child does not.

We do not condition a child’s participation on disclosing more information than is reasonably necessary.

Before any child profile can be created, we use a verifiable parental consent process:

1. A parent creates an account with their own email and password.
2. The parent verifies their email by clicking a link we send, which confirms the email is real and under their control.
3. The parent is shown a clear consent screen explaining what data we collect about children, how long we keep it, that we will not sell it or use it for advertising, and the parent’s rights to review, delete, and withdraw consent. The parent must affirmatively agree.
4. We apply a 24-hour holding period and then send a follow-up email requiring the parent to re-confirm. This two-step, time-delayed email confirmation (“Email Plus”) is an FTC-recognized method of verifiable parental consent for services that do not collect payment up front.
5. Only after the parent re-confirms can child profiles be created.

When a parent purchases a subscription, the payment-card verification performed during checkout independently satisfies verifiable parental consent under the FTC’s rules.

We keep a record of each consent event (including the time and the policy version) as a compliance record.

We use a child’s information only to provide the service to that child’s parent, for example to display the child’s learning profile and results. We never use it for advertising, and we never run third-party trackers or ad networks on any page a child could see.

Each family’s data is isolated at the database level so that one account cannot access another’s. Access by our own systems is limited to what is strictly necessary.

As a parent or guardian, you have the right to:

• Review the personal information we have collected about your child;
• Delete your child’s personal information;
• Refuse to permit further collection or use of your child’s information; and
• Withdraw your consent at any time.

You can exercise these rights from your dashboard, or by contacting us at privacy@calibratedkids.com. Withdrawing consent will stop further collection and lead to deletion of your child’s profile information.

Where a school or educator wishes to use CR Kids with students, we work with the school under the applicable requirements. This is not yet part of the current product; educators interested in future access can join the educator waitlist.

The operator of CR Kids is Calibrated Resilience Holdings. For any question about children’s privacy, or to exercise a parental right, contact privacy@calibratedkids.com.