From parents and guardians: Email address, display name, and a PIN you choose to protect the parent dashboard. This information is required to create and manage your account.
From children (with parental consent): First name, age range (3–4, 5–7, or 8–12), conversation transcripts (text only), and lesson progress. We do not collect full names, addresses, phone numbers, or location data from children.
Voice and audio: Voice audio is processed in real time for speech recognition and is NOT stored. Only text transcripts of conversations are saved.
Usage data: Session length, features used, and streak data — used to improve the product. Not sold or shared with advertisers.
We do not use your data for behavioral advertising. We do not sell your data to any third party.
PocketPals is built for children under 13 and is fully compliant with the Children's Online Privacy Protection Act (COPPA). We do not collect personal information from children without verifiable parental consent. The parent creates the account and consents on behalf of the child during onboarding.
For full details on how we comply with COPPA, see our COPPA Compliance Notice.
To exercise any of these rights, email privacy@pocketpals.app or use Parent Settings within the app. We respond within 30 days.
We use the following third-party services to operate PocketPals. Each is contractually obligated to protect data and may not use it for their own purposes.
| Processor | Purpose |
|---|---|
| Anthropic (Claude AI) | AI conversation processing |
| OpenAI (Whisper STT) | Speech-to-text transcription |
| ElevenLabs (TTS) | Text-to-speech voice synthesis |
| Supabase | Secure database hosting (PostgreSQL) |
| Vercel | Serverless API and web hosting |
| Stripe | Payment processing (card data never reaches our servers) |
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Parent PINs are hashed using bcrypt. Our database uses row-level security — your child's data is only accessible to your account. We conduct periodic security reviews.
California residents have the right to know what personal information we collect, request deletion, and opt out of any sale of personal information. We do not sell personal information. Contact us at privacy@pocketpals.app to exercise your rights.
Parents in the EU and UK have rights to access, rectification, erasure, portability, restriction, and objection. We respond within 30 days. Contact: privacy@pocketpals.app.
Questions about this privacy policy or your data?
NuStack Digital Ventures LLC · We respond within 30 days.