Aletheia is built for children, so privacy is part of the product design rather than an add-on.
COPPA Compliance
The Children's Online Privacy Protection Act (COPPA) applies to online services directed at children under 13. Aletheia is designed around COPPA requirements:
- Parent-controlled child profiles - parents create and manage child accounts.
- Parental consent - parent consent is required before child profiles are used.
- No advertising to children - Aletheia does not show ads to child users.
- No selling children's data - children's data is never sold.
- Parental access rights - parents can review, export, archive, or delete child data as available in the app.
- Limited child collection - Aletheia asks for what is needed to provide tutoring and account access.
What Data We Collect
From parents
- Name and email address.
- Authentication method, such as password or Google sign-in.
- Billing status and Stripe customer/subscription references.
- Support requests and account settings.
For children
Parents may provide:
- Display name or nickname.
- Age range and grade level.
- Subject choices and learning preferences.
- Child sign-in settings, such as PIN or child email account.
If a child email account is enabled, Aletheia may store the child account email and connected provider identity. If Apple Hide My Email is used, the stored email may be Apple's private relay address.
Generated during learning
- Conversation transcripts.
- Quiz scores and flashcard review history.
- Placement and mastery data.
- Study guides and subject progress.
- Usage metadata such as session time and feature activity.
How We Use Child Data
Child data is used to:
- Provide the AI tutoring experience.
- Personalize explanations, grade-level recommendations, and subject pacing.
- Track learning progress.
- Let parents review activity and manage the account.
- Generate reports, flashcards, and study guides.
We do not sell child data or use child conversations for advertising.
AI Providers and Privacy Shield
Aletheia may send tutoring messages and necessary context to AI model providers to generate responses. Privacy Shield, available on Family and Family+ plans, routes AI processing through privacy-first model infrastructure designed to reduce provider retention and prevent model training on your child's conversations.
Privacy Shield affects provider-side handling. Aletheia may still store conversation history and learning data so parents can review sessions, children can continue learning, and progress features work.
Child Email, Google, Apple, and Private Relay
Parents can enable child email account sign-in for older learners. Setup must start from a parent-sent setup email.
Children may connect:
- A password for the child account.
- Google sign-in.
- Apple sign-in.
If Apple Hide My Email is used, Apple may share a relay address instead of the child's real email. That relay address is treated as the child's account email for sign-in and notifications where applicable.
Data Retention
- Conversation history and progress: Stored while the account is active so parents can review learning and children can continue from prior work.
- Archived profiles: Hidden from active use but preserved unless deleted.
- Deleted data: Scheduled for deletion according to product and backup retention practices.
- Backups: Encrypted backups may persist briefly for recovery before being purged.
Exporting or Deleting Data
Parents can use privacy and account settings where available to export or delete family data. For requests that are not exposed in the dashboard, contact support with the category "Privacy & COPPA."
Parent Review
Parents can review child learning activity from the dashboard, including conversation history, subject progress, quizzes, and flashcard activity.
Questions or Concerns
For privacy-related questions, contact privacy@aletheiatutor.com or submit a support ticket.