Privacy Policy

Global Genius Academy ("GGA", "we", "our") is a multilingual educational platform for children Pre-K through Grade 2. We are building a COPPA-aware, privacy-first product designed to serve children and their families.

This Privacy Policy explains what data we collect, how we use it, and your rights as a parent or guardian. If you have questions, contact us at cs@cjhadisa.com.

When a parent or guardian creates an account, we collect:

• Name (first name or display name)
• Email address
• Password (stored as a secure hash — we never store plaintext passwords)
• Selected role (parent, homeschool family, teacher, etc.)
• Optional: message or notes provided at signup

We use this data to authenticate your account, send product updates (with your consent), and provide parent dashboard functionality. We do not share this data with third-party advertisers.

Child profiles are created and managed by parents or guardians. For child profiles, we collect only:

• Display name or nickname (not required to be a real name)
• Avatar selection (emoji or illustration — no uploaded photos in MVP)
• Age range or grade level (used to personalize content)
• Preferred interface language and learning language

As a child uses GGA, we store:

• Lessons started and completed
• Stars earned and XP accumulated
• Badges and achievements unlocked
• Streak history
• World and unit progress
• Time spent per session (aggregate, not keystroke-level tracking)

This data is used to power the progress dashboard visible to parents, personalize lesson recommendations, and let the child pick up where they left off. It is never used for targeted advertising.

If you join our beta waitlist, we store your name, email address, role, selected interests, child age range (optional), and any message you include. This data is used solely to contact you about GGA's launch and is never sold or shared with third parties.

• Real names of children (display names / nicknames only)
• Photos or images of children
• Voice recordings or audio (microphone features are opt-in and parent-approved — not active in MVP)
• Precise location data (country-level locale for language defaults only)
• Biometric data of any kind
• Device contacts or address books
• Social graph data or friend connections
• Browsing history outside of GGA

GGA is funded by family subscriptions, not advertising revenue. This is a deliberate product decision and a core commitment of our company.

We use essential cookies to maintain your login session. We may use privacy-respecting analytics (such as aggregate page views) to understand how the product is used and improve it. We do not use cross-site tracking cookies.

The Children's Online Privacy Protection Act (COPPA) restricts the collection of personal information from children under 13 without verified parental consent. GGA is designed to comply with COPPA:

• All child accounts are created by a parent or guardian
• Children cannot create their own accounts or provide their own email address
• We do not collect more information from children than is necessary for the educational service
• Parents can review, update, or delete their child's data at any time by contacting us
• We do not share children's data with third parties for commercial purposes

GGA currently operates in a direct-to-family model. When school mode launches in a future phase, GGA will operate in a FERPA-compliant mode that:

• Treats student data as owned by the school district
• Prohibits use of student data for advertising or commercial profiling
• Provides school administrators with data export and deletion controls
• Includes a separate school data agreement (DPA) for districts

We retain account and progress data for as long as your account is active. If you close your account, we delete personal data within 30 days, except where retention is required by law.

To request deletion of your data or your child's data, contact us at cs@cjhadisa.com with the subject line "Data Deletion Request". We will process your request within 30 days and confirm via email.

GGA uses a small number of third-party services to operate. These are limited to:

• Supabase — database and authentication (data stored in US data centers)
• Vercel — hosting and edge delivery
• Payment processor — Stripe or equivalent (when subscriptions launch; payment data is not stored by GGA)

We do not use third-party advertising networks, social login widgets that track across sites, or analytics tools that sell your data.

If you have questions about this policy or want to exercise your data rights, contact us:

• Email: cs@cjhadisa.com
• Contact form: globalgeniusacademy.vercel.app/contact
• Subject line for data requests: "Privacy Request — [your name]"