🔒 Privacy Policy

About this policy

This policy explains what Oomba Academy (oomba.ai, "we", "us") keeps about the people who use it, what we never collect, and how grown-up accounts, family links, payments and school billing work. The same facts about children's accounts are on the For grown-ups page. Questions: greg@oomba.ai.

What we keep

Own accounts keep a made-up name, a password (stored scrambled) and what your child does here: the games they make, their chats with the Builder and any pictures or files they add, saves, scores, ratings, favorites, friends, chat messages, a profile photo if they upload one, and settings such as language and theme. Guest play keeps a made-up name, saves, scores, ratings and favorites.

A school account is one your child signs in to with a login card from school. It is made and owned by the school, and keeps the same things plus the student's real name as the school typed it for the class list (only the school's staff and our team see it), their classes, lesson progress, written answers and their teacher's feedback. If your child joins a class with their own account and a class code, the school keeps the same things for that class, including their real name if the teacher types one.

What we never collect

We never ask for an email address, age, home address, location or payment details, and there is nothing to buy. Hidden location data is removed from photos and pictures before they are kept. There are no ads, and no advertising or tracking cookies.

What the AI sees

To make a game, the messages, pictures and files your child gives the Builder are sent to Claude, an AI made by the company Anthropic, which writes the game. Your child's name and username are not sent with them. Profile photos are also sent to Claude to be checked before anyone sees them. Claude reviews games before they can be shared with everyone, and our team checks any it is unsure about. Chats between friends and lesson answers are not sent to the AI.

How long we keep it

We keep an account's data for as long as the account exists. None of it is deleted on a timer yet. A game your child deletes is taken off the site for everyone, but a copy stays on our server.

There is no button yet to delete an account or download its data. To ask for either, a grown-up can contact us. For a school account, ask the school; it can ask us.

Privacy

We keep the Google account's id, email address and school domain while it is connected, to recognise it at sign-in. We never store the Google photo, never show a student's Google name on the game site, and never use the account to read anything else from Google.

Grown-up accounts

What we keep

• the name you type when you sign up (it can be a first name or nickname; children never see it: they see only "your grown-up");
• your password, stored scrambled (we can't read it);
• that you ticked "I am a parent or guardian, 18 or older" (we don't check this);
• your sign-in sessions, including your browser's name (user agent), and when you last re-entered your password for a billing step;
• which children you linked, when, and whether a link is pending, linked or ended;
• your plan: Stripe's customer and subscription numbers, plan type, monthly or yearly, status, seats, dates and amounts;
• a record of important actions (for example "plan started", "child linked", "refund"). These records never contain card details or email addresses.

What we don't ask for: your email, phone number, home address or age. (Stripe asks for some of these when you pay: see Payments below.)

A grown-up account can't build, chat, add friends or have a public profile, and doesn't appear in search.

Linking to a child

• The code: your child gets a short code on their Me page. We store it scrambled. It works once, for 1 hour.
• The child says yes: the link only starts when your child confirms it on their own page. They can say No, or Report it to our team. Reports are kept while open and deleted 1 year after we close them.
• What you see about your child: their username and display name, how many of the family's extra Builder messages they used yesterday and so far this month, and whether they are building on the Family plan or the free allowance.
• What you don't see: today's live activity (so you can't tell when they're online), their chats, friends or games, any messages charged to a school, or whether they are in a school at all.
• What your child sees about you: only the words "your grown-up", never the name you typed.
• Counting messages: to count the family's extras, we record for each Builder message which allowance paid for it (free, family or school), how many messages it counted as, and its AI cost.

Payments

Stripe processes payments

Payments are handled by Stripe, Inc. You pay on Stripe's own page, not on ours. Stripe's privacy policy is at stripe.com/privacy.

What Stripe collects from you (on Stripe's pages):

• your email address (Stripe sends receipts, failed-payment notices and renewal reminders to it);
• your card details, or your Apple Pay or Google Pay wallet;
• your billing address (needed for sales tax and to check that family plans are for US families);
• information Stripe uses to prevent fraud, such as details about your device and connection.

What we send to Stripe for a family plan: a random family number so we can match the payment to your plan. We do not send Stripe your name, your child's name or username, or anything about how your child uses the site. For schools, see School billing below.

What we get back and keep: Stripe's customer and subscription numbers, the plan, status (active, past due, cancelled), dates, amounts, seat count, and whether a payment was paid, failed, refunded or disputed.

What we never see or keep: your full card number or security code. For a family plan, our own database does not store your email or billing address. Stripe's messages to our server can include them, but we don't save them. A school's invoice request is different: see School billing below.

Who on our side can see more: the owner can see your email, billing address, receipts and the last 4 digits of your card in Stripe's dashboard. We use them only to run your plan: to answer your questions, give refunds, and tell you about important changes to your plan, price or our terms. The site has no email system of its own, so these notices are sent from greg@oomba.ai to the email Stripe holds. We never use it for marketing.

Fraud and disputes: if your bank reports a payment as disputed or likely fraud, Stripe tells us. We end the plan and keep a record of what happened.

Sales tax: Stripe calculates sales tax from your billing address where we are required to collect it.

Cookies: our site adds no new cookies for payments. Stripe's pages are run by Stripe and follow Stripe's policy.

School billing

• Who sees it: only the school's admins and our team. Teachers and students never see billing.
• What we keep when a school asks for an invoice: the number of seats, purchase order number, the billing contact's name and email, the school's billing address, whether the school says it is tax-exempt, and any note.
• What goes to Stripe: when we create the school's invoices, the school's name, the billing contact's email, the billing address and the purchase order number are saved with Stripe, which sends the invoices. The contact's name, the note and the tax-exempt answer stay only with us. Nothing is sent until we create the invoices. A school that pays by card types its name and billing address on Stripe's page instead.
• How long: the contact's name and email, the address, the note and the purchase order number in our database are deleted 2 years after the request is closed. Stripe keeps the school's address and purchase order number with its invoices (see below).
• Seats are counted from the number of active students. Billing does not use students' names or work.
• Families never see class activity: a grown-up linked to a student sees only that student's family extra messages.

Children's data

Children never see prices, plans or a "buy" button, and are never asked to pay or to ask a grown-up to pay.

Paying is not how we ask a parent for permission. Buying a plan doesn't change what we collect about a child, what we use it for, or what a parent has agreed to.

Your rights as a parent (own accounts): you can ask us to show you what we keep about your child, to delete it, or to stop collecting more. Email greg@oomba.ai. There is no delete or download button yet, so we handle these requests by hand, and we will need to check that you are the parent before we act. Unlinking or cancelling a plan does not delete your child's account.

School accounts: a school account is made and owned by the school. For those accounts we act on the school's behalf and under its direction: we use student information only to provide Oomba Academy to the school, never for advertising, and we don't sell it. Parents of school accounts should ask the school to see or delete records; the school can ask us. A data agreement the school has signed with us comes first.

No selling, no ads: we don't sell anyone's personal information, show ads, or use advertising or tracking cookies.

How long we keep billing information

• Link codes: deleted 30 days after they are used or expire.
• Pending links: deleted when they expire (24 hours) or the child says No.
• Ended links: deleted 90 days after they end (a record with account numbers only stays in our action log).
• Link reports: kept while open, then 1 year after they are closed.
• Plan and payment records (Stripe numbers, amounts, dates) and Stripe's invoices: 7 years, for tax law, even after an account is deleted.
• School invoice requests' contact details, address, note and purchase order number: 2 years after the request is closed.
• Grown-up account, family and links: until you ask us to delete the account. We cancel any plan first.

Where this applies

Family plans are for US families for now.

Questions

Oomba Academy · greg@oomba.ai