COPPA & Parental Consent

The Children's Online Privacy Protection Act, known as COPPA, applies to online services that collect personal information from children under 13. Generation STEM is built to support COPPA obligations through clear privacy notices, parent-controlled accounts, verifiable parental consent, parent review rights, security safeguards, and limited data collection.

This policy supplements our Privacy Policy.

Children do not create parent accounts. A parent or legal guardian creates the household account, selects the plan, provides payment information if a paid subscription is started, verifies the parent email address, and creates student profiles.

For students under 13, the parent account creation, payment/subscription flow, and email verification serve as our parental consent posture before the child uses the student learning experience.

We collect the minimum student information we need to provide learning, personalization, progress tracking, AI mentoring, and parent visibility.

• Provide courses, activities, workspaces, feedback, and Nova AI guidance.
• Save progress, code, achievements, streaks, and certificates.
• Show parents what the student is learning and completing.
• Protect platform security and prevent misuse.
• Improve curriculum and product quality using aggregated or de-identified patterns where practical.

We do not sell student personal information. We do not use student learning records for behavioral advertising. Public marketing analytics and X/Twitter ad tracking are intended for public marketing pages, not private student dashboards or course-player routes.

We may share limited information with providers that help us operate the platform, such as hosting, database, payment, transactional email, AI mentoring, text-to-speech/audio storage, analytics for public marketing pages, security, and support tools. These providers are used to operate Generation STEM and are not permitted by us to use student information for their own advertising.

• Review the personal information associated with a student profile.
• Correct student profile information.
• Delete a student profile and associated learning records, subject to legal or operational retention needs.
• Refuse further collection or use of a child's personal information, which may require closing the student profile.
• Ask questions about providers, data handling, or account controls.

To exercise these rights, email privacy@generationstem.orgwith the subject line "COPPA Request." We aim to respond to privacy requests within 5 business days.

We protect student information through access controls, HTTPS/TLS, scoped parent/student/admin roles, password hashing, protected sessions, audit logs for sensitive admin actions, and operational monitoring. We retain child information only as long as needed for the service, legal obligations, security, billing, dispute resolution, or backups.

If we materially change how we collect, use, or disclose children's personal information, we will provide direct notice to parents and obtain updated parental consent where required by law.