Privacy Policy
Last updated: October 2026
v1.0
1. Data we collect
TheSuperKids collects the information necessary to operate the service: parent or guardian full name, email address, and password; child first name, grade, and curriculum; academic performance data (test results, SuperScores, reading log entries). We do not collect children's email addresses. All notifications are sent to parents and guardians only.
2. How we use data
Data is used exclusively to provide the educational service: to display results to authorised parents and tutors, to generate personalised learning recommendations, and to send progress notifications to parents. Children's data is never used for advertising or profiling for commercial purposes.
3. Children's privacy
TheSuperKids is designed with children's privacy as a core principle. We collect only the minimum data needed to provide the service. We do not collect children's email addresses — all account notifications go to linked parents or guardians. Children's data is never sold, shared with advertisers, or used for profiling.
4. Data hosting and service providers
This service is hosted in the United States. The following third-party providers process data on our behalf: Vercel (application hosting and global deployment); Turso on AWS us-east-1 (database storage); Resend (transactional email notifications to parents); Cloudflare (media streaming and content delivery); Upstash (rate limiting and session caching). Each provider is contractually bound to process data only as instructed and to maintain appropriate security standards.
5. Data sharing
We do not sell or rent your data. Data may be shared with tutors you invite, in aggregate and anonymised form for service improvement, and with the service providers listed above.
6. Security
Passwords are stored as bcrypt hashes. All communications are encrypted via HTTPS. Sessions are protected by HTTPOnly cookies.
7. Data retention and deletion
You may delete your account at any time from the parent profile page. Account data is permanently deleted 30 days after the deletion request. You may also request an export of your data from the parent profile page.
8. Your rights
Depending on applicable law, you may have the right to access, correct, export, and delete your personal data. To exercise these rights, contact us at contact@thesuperkids.net.
9. Contact
For privacy-related questions, write to contact@thesuperkids.net.