Privacy Policy

1. Who we are

Pluma Kids ("we", "us", "our") operates plumakids.com, an AI-assisted creative writing platform for children. We are committed to protecting the privacy of children and families in compliance with the Children's Online Privacy Protection Act (COPPA) and applicable privacy laws.

2. Information we collect

We collect the minimum information necessary to provide our service:

• Parent account: email address and name (via Clerk authentication).
• Child profile: first name and age range — collected only after verified parental consent.
• Story content: stories and scenes written by children, stored securely and never shared publicly without parental approval.
• Usage data: progress, XP, achievements — used only to power the in-app experience.

We do not collect precise location, phone numbers, photos of children, or any sensitive personal information beyond what is listed above.

3. Children under 13 (COPPA)

Pluma Kids accounts are created by parents or legal guardians on behalf of their children. We do not allow children under 13 to create accounts independently. Before collecting any information about a child, we obtain verifiable parental consent. Parents may review, correct, or request deletion of their child's data at any time by contacting us at privacy@plumakids.com.

4. How we use your information

• To provide and improve the Pluma Kids service.
• To send parents optional weekly progress digests (opt-out available at any time).
• To moderate story content for safety before any public sharing.
• We never sell personal data. We never use children's data for advertising.

5. Data sharing

We share data only with the service providers necessary to operate Pluma Kids: Clerk (authentication), Supabase (database and storage), and Google/Anthropic (AI writing assistance). All providers are contractually bound to handle data securely and not use it for their own purposes.

6. Data retention and deletion

You may delete your account and all associated data (parent profile, every child profile, every story and scene, XP, achievements, and your Pluma Kids sign-in) at any time from your account settings. Deletion is permanent, irreversible, and cascades through every related record in our database and identity provider. If you prefer email-based erasure, contact privacy@plumakids.com.

7. Security

We use industry-standard security practices: encrypted connections (HTTPS), hashed credentials, and access controls. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

8. Contact us

Questions about this policy or requests to access, correct, or delete your data: privacy@plumakids.com