Privacy Policy

Effective Date: April 21, 2026  |  Advanced Learning Academy LLC

Advanced Learning Academy LLC ("we," "us," or "our") operates the Smart Kids brain-training subscription service at advancedlearning.academy/smartkids. This Privacy Policy explains how we collect, use, protect, and disclose information about parents and children who use our service. Please read it carefully before creating an account.

1. Who We Are

2. Children's Privacy — COPPA Compliance

Our service is designed for children. We comply with the Children's Online Privacy Protection Act (COPPA). Children under 13 may not create accounts on their own. A parent or legal guardian must create the account, provide verifiable parental consent, and manage all account settings on behalf of the child.

By creating a child profile, the parent or guardian represents that they are the child's parent or legal guardian and consent to our collection and use of the child's information as described in this policy.

Parents may review, correct, or delete their child's personal information at any time by contacting us at team@advancedlearning.academy or by logging into their account and using the Account settings page.

3. Information We Collect

We collect only the information necessary to operate the service:

• Parent account: Email address, password (hashed), and billing information processed securely through Stripe.
• Child profiles: Child's first name and age (provided by the parent when adding a child to the account).
• Usage data: Lesson completion records, quiz responses, scores by thinking skill (Critical Thinking, Creative Problem-Solving, Gap Recognition, Decision Making, Logical Reasoning, Ingenuity/Innovation), session timestamps, and streaks.
• Thinking-skill scores: Aggregate performance scores per thinking-skill category, used to personalize lesson difficulty and generate progress reports for parents.
• Technical data: IP address, browser type, and device type (collected automatically for security and service reliability).

We do not collect a child's last name, photo, address, or school.

4. How We Use Information

• To operate, personalize, and improve the brain-training service.
• To generate progress dashboards visible only to the parent.
• To process subscription payments through Stripe.
• To send transactional emails to the parent's address (receipts, password resets, service updates).
• To detect and prevent fraud, abuse, and unauthorized access.
• To comply with applicable law, including COPPA.

We do not use children's data for advertising, marketing profiling, or behavioral tracking.

5. Payment Processing — Stripe

All payment processing is handled by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. We do not store full credit card numbers or payment card data on our servers. Stripe's privacy policy governs the handling of your payment information. You can review it at stripe.com/privacy.

6. Sharing of Information

We do not sell, rent, or trade personal information — including children's information — to third parties for any purpose, including advertising.

We may share information only in the following limited circumstances:

• Service providers: Stripe (payments), Cloudflare (infrastructure and security). These providers access data only as necessary to perform services on our behalf and are contractually prohibited from using it for other purposes.
• Legal compliance: When required by law, court order, or to protect the rights and safety of users or the public.
• Business transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will provide notice before any such transfer.

7. Data Retention

We retain parent account data for as long as the account is active and for up to 30 days after account deletion to allow for accidental deletion recovery. Child profile data — including lesson scores and thinking-skill data — is deleted within 30 days of account deletion or upon written request.

Payment records are retained as required by tax and accounting law (typically 7 years), but are maintained by Stripe and do not include full card data.

8. Parental Rights

As the parent or guardian of a child using Smart Kids, you have the right to:

• Review all personal information we have collected about your child.
• Request correction of inaccurate information.
• Request deletion of your child's account and all associated data.
• Refuse further collection or use of your child's information by canceling your subscription and requesting deletion.

To exercise these rights, email us at team@advancedlearning.academy or call (317) 660-5658. We will respond within 10 business days.

9. Security

We use industry-standard security measures including HTTPS/TLS encryption for all data in transit, hashed passwords (never stored in plain text), and access controls that limit employee access to user data on a need-to-know basis. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but are committed to protecting your information.

10. Cookies

We use a single session cookie to keep parents and children logged in. This cookie contains an encrypted session token and does not track you across other websites. It is deleted when you log out or after 30 days of inactivity. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

11. California Privacy Rights (CCPA / CPRA)

If you reside in California, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, gives you specific rights regarding personal information.

Categories of personal information we have collected in the last 12 months:

• Identifiers: parent email address (used for login and billing notifications)
• Commercial information: subscription plan, payment history (processed by Stripe, not stored by us)
• Internet activity: lesson completion, thinking-skill scores, badges, certificates
• Inferences: aggregated thinking-skill profile per child (visible only to that parent)

We do not sell or share your personal information. We have not sold or shared personal information in the preceding 12 months, and we have no plans to do so.

Third-party processors we use:

• Stripe, Inc. — payment processing (full card data never reaches our servers)
• Mailgun Technologies, Inc. — transactional and account email delivery
• Cloudflare, Inc. — hosting, edge caching, and DDoS protection

Your California rights:

• Right to know what personal information we have collected about you or your child.
• Right to delete personal information we hold (subject to limited exceptions for legal compliance).
• Right to correct inaccurate personal information.
• Right to opt out of "sale" or "sharing" of personal information — though we do neither.
• Right to limit use of sensitive personal information — we do not collect any.
• Right to non-discrimination for exercising any of the rights above.

To exercise any California right, email us at team@advancedlearning.academy with the subject line "California Privacy Request" or use our contact form. We will respond within 45 days. We may verify your identity by confirming you control the parent account's registered email address.

If you are a California resident and authorize an agent to make a request on your behalf, the agent must submit written, signed authorization, and we may contact you to confirm.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page with an updated effective date and, for material changes, notify parents by email. Your continued use of the service after the effective date constitutes acceptance of the updated policy.

13. Contact Us

Questions, concerns, or requests about your privacy or your child's data: