Privacy Policy

SafeSpark is built for kids ages 10-13 to make things with AI. This page explains what we collect, why, and what you can do about it. Plain English. No tricks.

Who's the account holder

The parent is the account holder. Kids do not have their own SafeSpark accounts. Parents sign up with email through our auth provider (Clerk) and get a 6-character family code. Kids log in on their device by entering that code and picking their profile — no email, no password.

What we collect

• Parent account: email, display name (from Clerk). That's it.
• Kid profiles(created by the parent): display name, age, sex, interests, optional avatar color, optional 4-digit PIN. We do not collect a kid's real name unless the parent enters one.
• Projectsthe kid creates: title, the project's HTML, the chat transcript that built it, and version snapshots. Stored under the parent's account.
• Prompts: what the kid asked Spark to do. Logged for safety review and product improvement.
• Uploaded images: photos a kid attaches to a project. Stored in Convex storage tied to the parent account.
• Usage: chat-turn counts, image-restyle counts, and estimated AI cost per month — for the parent dashboard and our internal observability.

What we do NOT collect

• No biometric data, no facial recognition, no location tracking.
• No ad-tracking pixels, no third-party advertising cookies.
• No social-media login data.
• No browsing history outside SafeSpark.
• No microphone audio is stored. Voice input is processed locally by the browser's Speech API.

Who we share data with

The minimum number of vendors to run the product:

• OpenAI: prompts and project context are sent to OpenAI to generate the response. We send the minimum needed. Image transforms go through OpenAI's image API and pass through their moderation layer.
• Convex: our database. Projects, prompts, usage, and uploaded images are stored here.
• Clerk: handles parent account sign-up and login.
• Vercel: serves the website.

We do not sell data. We do not share data with advertisers. We do not let any vendor train models on your kid's prompts (per our agreements with those vendors).

Children's privacy (COPPA)

SafeSpark is designed for the parent to be the account holder for children under 13. Kids interact under their parent's family account. The parent provides verifiable consent at sign-up by creating the account and adding kid profiles themselves. If you are a parent and want us to delete any data we have for your kid, see Deleting data below.

Deleting data

Parents can delete any project from /parent or /make. Deleted projects sit in a 30-day recycle bin, then are permanently removed.

To delete your entire account and all kid profiles, email jeremiah@getsafefamily.com. We'll process within 7 days.

Changes to this policy

If we materially change what we collect or how we share data, we'll update this page and notify parents by email.

Contact

Email jeremiah@getsafefamily.com with any privacy question. We're a small team and will respond.