1. Information We Collect from Children

1.1 Information Provided by Adults

• Children do not create accounts themselves.
• Verified adults (teachers or guardians) may provide a child’s first name, school name, and optionally upload a photo to personalize their story.

1.2 Information Collected Automatically

• IP address (used to infer general location such as region or state)
• Browser and device type
• Pages visited, time spent, and general usage metrics (for platform performance and classroom analytics only)

1.3 Information Entered by Children

• If enabled by an adult, children may enter short text responses or choose their story characters and settings.
• No camera, microphone, or device library access is permitted.
• Children cannot upload files, record media, or message others.

2. How We Use Children’s Information

• To generate personalized digital storybooks as part of a class or home project
• To allow teachers or parents to track progress and print physical books
• To ensure platform performance and compliance with applicable laws
• To provide classroom reports and analytics to teachers and administrators

We do not use children’s personal information for:

• Advertising
• Behavioral profiling
• Selling or commercializing data

3. Who Can See My Child’s Information?

• Only verified adults (e.g., the classroom teacher or project organizer) can view and manage a child’s information.
• Parents may view their child’s story only if invited by the teacher or if a flyer is sent home with a QR code.
• Storybooks are not searchable or visible to the public.
• No student-created content is ever published online or made publicly accessible unless explicit written consent is obtained from a parent or legal guardian.

4. Sharing Limitations

• Child data is never shared with other users, children, or third parties for marketing purposes.
• There is no ability for children to communicate with or view other children’s work.
• Children cannot access or interact with any part of the system that would expose them to others’ content.

5. When and Why We Share Data

• We only share child data with:
  • The verified adult(s) who created the account
  • Our subprocessors who support hosting, analytics, or printing (see full list in our adult-facing Privacy Policy)
  • Legal authorities when required to comply with the law or ensure safety
• If Build My Story is ever acquired or merged, we will notify all verified adults and allow them to delete their child’s data prior to any data transfer. Any new entity must uphold the same or stronger data protection commitments.

6. How We Protect Children’s Information

• All data is encrypted at rest and in transit
• Role-based access control restricts access to authorized staff only
• Story data is stored securely and only for as long as needed to fulfill educational purposes
• If no adult remains connected to a child’s data (e.g. the teacher deletes their account), we anonymize or delete the child’s data within 30 days

7. Family and Educator Rights

Parents and educators have the right to:

• Access and review their child’s data
• Request correction or deletion of data
• Withdraw consent at any time by contacting us or closing the child’s project

All data deletion requests can be sent to [email protected]. We will verify your identity and respond promptly.

8. Legal Basis for Data Collection

We collect and process children’s data only:

• With verified adult consent
• As necessary to provide the educational service requested
• In compliance with COPPA, FERPA, and other applicable child-privacy laws

9. Updates to This Policy

If we make material changes to this policy, we will notify educators and verified parents via email or dashboard message before the changes take effect.

10. Contact Us

For any questions, access requests, or concerns, please contact: [email protected]

We are committed to protecting your child’s privacy and helping educators and families use Build My Story responsibly.