Privacy Policy

R Software & Consulting LLC ("we," "us," or "our") operates Codewright (codewright.app). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We are committed to protecting the privacy of all our users, especially children under the age of 13.

1. Information We Collect

Information You Provide

• Account information: email address, date of birth, and display name when you create an account.
• Parent/guardian information: parent or guardian email address when a child under 13 registers.
• Profile information: optional display name and age-group preferences.

Information Generated Through Use

• Lesson progress: which lessons you have completed, scores, and achievement data.
• Code submissions: code you write within the Codewright editor during lessons.
• AI tutor conversations: messages exchanged with the AI tutor during learning sessions.

Information We Do NOT Collect

• Payment card data: all payment processing is handled by Stripe. We never receive, store, or process credit card numbers, CVVs, or bank account details. See Stripe's Privacy Policy for details on how they handle payment data.
• Precise geolocation: we do not collect GPS or precise location data.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Codewright platform.
• Personalize the learning experience, including adapting content to the learner's age and skill level.
• Power the AI tutor, which uses lesson context and conversation history to provide relevant educational guidance.
• Track learning progress and display achievements.
• Process subscriptions and manage billing through our payment processor (Stripe).
• Send transactional emails (account verification, password resets, billing receipts).
• Improve our curriculum, platform features, and overall user experience.
• Comply with legal obligations, including COPPA requirements.

3. Children's Privacy (COPPA)

Parental Consent

Before collecting any personal information from a child under 13, we obtain verifiable parental consent through Epic Games Kids Web Services (KWS), a COPPA-compliant parental verification platform. A parent or legal guardian must complete the verification process before the child can access the platform.

What We Collect from Children Under 13

With parental consent, we collect only the minimum information necessary to provide the educational service:

• A display name (which does not need to be the child's real name).
• Date of birth (to determine age-appropriate content).
• Parent/guardian email address (for consent and communication).
• Lesson progress and achievement data.
• Code written during lessons.
• AI tutor conversation history (used solely for educational continuity).

What We Do NOT Do with Children's Data

• We do not serve behavioral advertising to children under 13.
• We do not sell or rent children's personal information to third parties.
• We do not require children to provide more information than is reasonably necessary to participate in the educational activities.
• We do not make children's personal information publicly available.

Parental Rights

Parents and legal guardians have the right to:

• Review the personal information we have collected from their child by contacting us at support@codewright.app.
• Request deletion of their child's personal information. Upon a verified request, we will delete the child's account and all associated data.
• Revoke consent at any time, which will result in the child's account being deactivated and their data being deleted.
• Refuse further collection of their child's data, while still having access to information previously collected.

To exercise any of these rights, contact us at support@codewright.app. We will verify your identity as the parent or guardian before processing any request.

4. Data Sharing

We do not sell your personal information. We share data only in the following limited circumstances:

• Service providers: we share data with third-party service providers who assist us in operating the platform, including:
  • Stripe (payment processing)
  • Vercel (hosting and infrastructure)
  • Anthropic (AI tutor functionality)
  • Epic Games KWS (parental consent verification)
  These providers are contractually obligated to use your data only to provide services to us and to protect your information.
• Legal requirements: we may disclose information if required to do so by law, regulation, or legal process (such as a court order or subpoena).
• Safety: we may disclose information when we believe disclosure is necessary to protect the rights, property, or safety of our users or others.

5. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Encryption in transit (TLS/HTTPS) for all data transmitted to and from our servers.
• Encryption at rest for stored data.
• Secure authentication with hashed passwords and JWT-based session management.
• PCI DSS compliance handled entirely by Stripe — we never handle raw payment card data.
• Regular security reviews of our infrastructure and codebase.

While we strive to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Codewright service. Specifically:

• Account data is retained for the duration of your subscription. If you cancel, your data is retained for 30 days to allow for reactivation, then permanently deleted.
• Lesson progress and code submissions are retained as long as your account is active.
• AI tutor conversations are retained for educational continuity and deleted when your account is deleted.
• Billing records may be retained as required by applicable tax and accounting laws.

You may request deletion of your account and associated data at any time by contacting support@codewright.app.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your personal information.
• Data portability: request your data in a structured, machine-readable format.
• Opt-out: opt out of non-essential communications at any time.

To exercise any of these rights, contact us at support@codewright.app. We will respond to verified requests within 30 days.

8. Cookies and Similar Technologies

Codewright uses cookies and similar technologies for the following purposes:

• Essential cookies: required for authentication, session management, and security. These cannot be disabled.
• Analytics cookies: help us understand how users interact with the platform so we can improve the experience. These are anonymized and do not track individual users across other sites.

We do not use advertising or tracking cookies. We do not participate in third-party advertising networks or cross-site tracking.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (using the email address associated with your account) and by posting the updated policy on this page with a new effective date. We encourage you to review this page periodically.

For changes affecting children under 13, we will obtain new parental consent where required by COPPA before applying any material changes to how we handle their data.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: