Privacy Policy

Kidgeni Inc. ("Kidgeni," "we," "us") runs the Kidgeni platform at kidgeni.com — a creative AI studio where children roughly ages 5–12 make art, stories, and books inside an account their parent, guardian, or teacher manages. This policy explains what we collect, why, and the controls grown-ups hold. It applies globally; sections for European and California residents appear below.

• Biometric or health data.
• A child's email address, phone number, or real name — kid profiles are a username and a PIN, both chosen under the grown-up's account, and usernames are screened so they can't contain personal information.
• Payment card details (payments are handled by Stripe; card numbers never touch our servers).

From the grown-up account

When you create an account we collect your email address and sign-in credentials (managed by Clerk, our authentication provider). If you subscribe or buy Sparks, Stripe processes the payment and gives us a customer reference and transaction details so we can manage your plan.

Creative content

Your family's creations — artwork, stories, books, and coloring pages — are stored so the product works: images live in private cloud storage (Cloudflare R2) and are served only through signed, expiring links, never public URLs. We cannot identify your child from their creations and we do not use them for advertising or to train AI models.

Prompts and AI generation

The prompts your child types (or speaks, on plans with the microphone) are processed by our AI providers to create the requested art or story: fal.ai generates images and transcribes voice recordings, and Anthropic powers story text and our safety moderation. Voice audio is processed transiently for transcription and is not kept. Every prompt and every generated image passes a safety check before a child sees it.

Kid profiles and Spaces

For each kid profile we store the username, a securely hashed PIN, an optional avatar, and their creations and activity — all visible to the owning grown-up. Spaces (family or classroom groups) store their membership, feed posts, reactions, and comments.

Device and usage data

We collect standard technical data (device type, browser, IP address) and anonymous usage information to keep the platform secure and improve it. We do not run third-party advertising trackers.

• Convex — application database and backend
• Clerk — grown-up authentication and account security
• Cloudflare R2 — private image storage
• Anthropic — AI safety moderation and story text
• fal.ai — AI image generation and voice transcription
• Stripe — payment processing
• Resend — transactional email
• Vercel — website hosting

Each provider receives only what it needs to do its job, and each is bound by its own privacy and security obligations.

We do not sell or lease personal information. We share it only with the service providers above as needed to run the platform, when required by law or to protect our users' safety, or as part of a business transaction such as a merger — never for advertising.

Creations are private to the family by default. A grown-up (or a kid, inside a Space that grown-up approved joining) can share a creation to that Space's feed, where its members see it. Comments between kids pass through AI moderation before they appear, kids can flag anything with "ask a grown-up," and Space owners control who joins (open, review, or closed) and can remove members. There is no direct messaging on Kidgeni.

• See your family's creations and Space activity
• Approve or remove Space members, and reset a kid's PIN
• Moderate what is shared to Spaces you own
• Manage your subscription and Sparks
• Request export or deletion of your family's data

• Encrypted data in transit (TLS) and encrypted credential storage
• Kid PINs stored only as secure hashes
• Images served via signed, expiring URLs — never publicly indexed
• Access controls limiting employee access to user data

We keep your data while your account is active. When you request deletion, personal data is permanently deleted within 30 days; limited records (such as billing history) may be retained where the law requires.

Kidgeni is built for children under a grown-up's management, and we comply with the Children's Online Privacy Protection Act:

• A parent, guardian, or teacher creates and controls the account — kids cannot sign up on their own, and a kid-initiated request goes to their grown-up for consent.
• We collect no more information from a child than the product needs (a screened username, a hashed PIN, and their creations).
• Grown-ups can review, export, or delete their child's data at any time.
• Every prompt, image, story, and comment passes age-appropriate safety moderation.
• We never use children's data for advertising or marketing.

Residents of the EEA, UK, and Switzerland additionally have the rights to access, correct, erase, restrict, port, and object to processing of their personal data. Contact privacy@kidgeni.com to exercise them.

California residents may request to know or delete the personal information we hold, and will never face discrimination for exercising those rights. We do not sell personal information, so there is nothing to opt out of.

If we make significant changes we will notify account holders by email and post a notice on the platform.

Privacy inquiries: privacy@kidgeni.com

General support: support@kidgeni.com