1. Introduction
My TEK Lab, Inc. ("we," "us," or "our") operates this platform. We are committed to protecting the privacy of all our users, especially children. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Our platform is designed for students, educators, and families. We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA) and other applicable privacy laws.
2. Information We Collect
Account Information
- All accounts: Username, display name, hashed password, account type (child, teen, adult, or teacher), and grade level.
- Teen and adult accounts: Email address (for verification and account recovery).
- Child accounts (under 13): No email address is required. A parent or guardian email may be provided to enable social features.
- Teacher accounts: Email address and associated classroom information.
We do not collect date of birth.
User-Generated Content
- Projects created within our tools (saved data, assets, and configurations).
- Comments, project notes, and remix notes.
- Likes and other social interactions.
Activity Data
- Experience points (XP), badges, streaks, and other gamification data used to track learning progress.
- Login timestamps and session information for authentication purposes.
3. Children's Privacy (COPPA)
We are especially committed to protecting the privacy of children under 13:
- Child accounts do not require an email address to sign up.
- Social features (commenting, sharing, liking) require a verified parent or guardian email.
- We do not engage in behavioral tracking or targeted advertising of any kind.
- We do not sell, rent, or share children's personal information with third parties for marketing or advertising purposes.
- Teachers and parents can manage child accounts, including controlling social feature access and requesting data deletion.
4. How We Use Information
We use the information we collect to:
- Authenticate users and maintain account security.
- Store and retrieve user projects.
- Track learning progress through gamification (XP, badges, streaks).
- Moderate user-generated content for safety.
- Send email verification and account recovery messages (teen/adult accounts only).
- Enable classroom management features for teachers.
- Process payments for subscription plans.
5. Content Moderation
To maintain a safe environment, we use automated content moderation:
- User-generated text (comments, project names, notes) is analyzed using machine-learning-based moderation (OpenAI Moderation API) to detect harmful content.
- Only the text content is sent for analysis — no personally identifiable information, usernames, or account details are included.
- We also use a local profanity filter as an additional safety layer.
- Content that violates our guidelines may be automatically blocked or flagged for review.
6. Third-Party Services
We use the following third-party services in limited, specific ways:
- Stripe — Payment processing for subscriptions. Stripe is PCI-compliant. We do not store credit card numbers or payment details on our servers.
- Google OAuth — Optional sign-in method. We receive only basic profile information (name and email) if a user chooses to sign in with Google.
- OpenAI Moderation API — Automated text moderation. Only anonymous text snippets are sent; no user data is included.
- Amazon Web Services (S3) — Secure file storage for user-uploaded assets.
We do not use any analytics, advertising, or tracking services. We do not display ads on our platform.
7. Cookies & Local Storage
We do not use tracking cookies. Our platform uses:
- localStorage: To store authentication tokens (JWT) for keeping you logged in and to store user interface preferences (such as theme settings).
- We do not use third-party cookies, tracking pixels, or any form of cross-site tracking.
8. Data Security
We implement industry-standard security measures to protect your data:
- All connections use HTTPS encryption.
- Passwords are hashed using bcrypt and are never stored in plain text.
- Authentication uses JWT tokens with expiration times.
- Database access is restricted and credentials are stored securely.
9. Data Retention & Deletion
- Users can delete their own projects at any time.
- Account deletion is available — upon deletion, all associated personal data and projects are removed.
- Teachers can manage and delete student accounts within their classrooms.
- Parents and guardians may request deletion of their child's data by contacting us.
10. Parent & Guardian Rights
Parents and guardians of children under 13 have the right to:
- Review their child's account activity and projects.
- Disable social features (commenting, sharing, liking) for their child's account.
- Request a copy of their child's personal information.
- Request deletion of their child's account and all associated data.
To exercise any of these rights, please contact us using the information below.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. Continued use of the platform after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights regarding personal data, please contact:
My TEK Lab, Inc.
Email: info@myteklab.com