Children's Online Privacy (COPPA) Notice

1. Who We Are

CozmicLearning is an online education platform for K-12 students operated by CozmicLearning ("we", "us", "our"). We offer three products that may be used by children under 13: Cozmic Universe (K-8 AI tutoring + arcade), Cozmic Academy (K-12 classical Christian curriculum), and Cozmic Labs (escape-room learning games). Our high-school product, Orbit Prep, is intended for students in grades 9-12.

Contact for COPPA inquiries: privacy@cozmiclearning.com

2. Information We Collect From Children Under 13

When a parent creates a student account for a child under 13, we collect:

• Student name (used to personalize lessons and progress reports — first name is sufficient; a last name is optional)
• Date of birth (used to enforce grade-appropriate content and to compute age for COPPA gating)
• Grade level (used to serve grade-appropriate curriculum)
• Login credentials tied to the parent account (the child does not need to provide their own email)
• Learning activity records: lesson progress, quiz answers, time spent, AI tutor conversations, escape-room attempts
• Optional chosen avatar / character

We do not collect: a child's personal email address, phone number, home address, geolocation, photographs, or persistent identifiers beyond what is necessary for the child to log back into the service. We do not require children to disclose more information than is reasonably necessary to participate in the activity.

3. How We Use This Information

• To deliver the educational service the parent has signed the child up for
• To personalize lessons to the child's grade and demonstrated mastery
• To generate progress reports for the parent
• To enable a Cozmo AI tutor to provide age-appropriate guidance (all student input is moderated by our content-safety system before being processed by the AI)
• To debug, secure, and improve the service

We do not use children's personal information for advertising or behavioral profiling, and we do not sell or rent it to third parties.

4. Third-Party Service Providers

We use limited third-party providers strictly to deliver the service:

• OpenAI — to power the Cozmo AI tutor. Student questions and AI responses are sent to OpenAI under their data-processing agreement; OpenAI does not retain or train on this data per their API terms.
• Stripe — to process parent payments. Stripe does not receive any child personal information.
• Render (hosting) and PostgreSQL — to operate the service.
• Email infrastructure — to deliver progress reports and safety alerts to parents.

None of these providers are authorized to use children's personal information for any purpose other than providing services to CozmicLearning.

5. How We Obtain Parental Consent

We obtain verifiable parental consent through one of the following methods before collecting personal information from a child under 13:

• Online consent at parent signup: The parent creates a parent account, ticks an affirmative consent checkbox, and is charged a payment method (or, during our Founding Member program, completes a verified email signup). We record the consent date, timestamp, IP address, and consent method for our audit log.
• The child's account is created only after the parent has consented and is linked to the parent's account by an access code.

6. Parent Rights (Review, Delete, Revoke)

As the parent of a child under 13 using CozmicLearning, you have the right at any time to:

• Review the personal information we have collected from your child — visible from your parent dashboard or by emailing privacy@cozmiclearning.com
• Delete your child's personal information — done from your parent dashboard or by emailing privacy@cozmiclearning.com; we will delete within 30 days of a verified request
• Revoke consent at any time, which will terminate the child's account and delete their data
• Refuse further collection or use of your child's information

Exercising these rights will not affect your other parent-account activity but will end the child's ability to use the service.

7. Data Retention

We retain a child's account information for as long as the parent's account remains active. After parent-account closure or revocation of consent, we delete the child's personal information within 30 days, except where retention is required by law (e.g., financial records for tax purposes — these never include child personal information).

8. Safety Monitoring

Every conversation between a child and our Cozmo AI tutor is automatically screened by OpenAI's Moderation API. Content flagged as self-harm, sexual content involving minors, or graphic violence is blocked from being processed by the AI and triggers an automatic email alert to the parent. Flagged events are logged in our admin moderation system for review.

9. Changes to This Notice

We will notify parents by email of any material changes to this notice and obtain new consent if the change involves the collection, use, or disclosure of children's personal information in a way that is materially inconsistent with the consent originally obtained.