Privacy Policy
Last updated: 2025
Kid Startupper is the world's first AI-powered entrepreneurship platform for children aged 10–15, operated by Kid Startupper Technology Limited. We take the privacy and safety of children and families very seriously. This Privacy Policy explains what data we collect, how we use it, and how we protect it — in plain language, so every parent and guardian can understand it clearly.
By using our platform or website, you agree to the practices described in this policy.
1. Who We Are
Kid Startupper Technology Limited operates the educational platform available at kidstartupper.com. We are the data controller responsible for your personal data.
Contact: Contact page · [email protected]
2. The Laws We Follow
We comply with:
- GDPR — the EU General Data Protection Regulation (EU 2016/679), which applies to all users in Europe.
- COPPA — the Children's Online Privacy Protection Act, which applies to users from the United States under the age of 13.
- EU-US Data Privacy Framework — the current legal framework governing personal data transfers between the EU and the US (replacing the former Privacy Shield, which was invalidated in 2020).
3. Children's Privacy (GDPR & COPPA)
Our platform is designed for children aged 10–15. We take the following measures to protect them:
- We do not collect personal data from any child without verifiable parental or guardian consent.
- Children under 13 in the United States are protected under COPPA. We will not collect, use, or share their data without express parental consent.
- Under GDPR, children under 16 require parental consent for data processing. We apply this standard to all users under 18.
- We do not use children's data for advertising or marketing purposes.
- We do not share children's personal data with third parties except as described in this policy.
- Parents and guardians may at any time review, correct, or request deletion of their child's data by contacting us at our contact page.
4. What Data We Collect
Information you provide:
- Name and surname
- Email address
- Age / date of birth
- Gender (optional)
- School or institution (if applicable)
- Profile information created within the platform (entrepreneurial profile, business page)
- Feedback and responses to quizzes or surveys
Information collected automatically:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent on the platform
- Login activity
We use Google Analytics to understand how our platform is used. We do not allow Google to use or share our analytics data for their own purposes.
5. How We Use Your Data
- Create and manage your account on the platform
- Deliver the educational programme and AI-guided lessons
- Track progress and provide personalised feedback
- Send communications related to your programme (by email)
- Send newsletters and updates, only if you have opted in
- Improve our platform and educational content
- Comply with our legal obligations
We will never sell your data. We will never use your data for advertising by third parties.
6. Legal Basis for Processing (GDPR)
- Consent — for registration, newsletters, and optional communications
- Contract — to deliver the service you have subscribed to
- Legitimate interest — to improve our platform and ensure its security
- Legal obligation — to comply with applicable laws
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.
7. Who We Share Your Data With
We do not sell or share your personal data with third parties for commercial or marketing purposes. We may share data only in the following cases:
- Service providers — third-party companies that help us operate our platform (e.g., cloud hosting, email delivery, analytics). These providers are contractually bound to process data only as instructed by us.
- Educational institutions — if your child is enrolled through a school, we may share relevant participation data with that school.
- Legal requirements — if required by law or to protect the rights and safety of our users.
8. International Data Transfers
Where data is transferred outside the European Economic Area (EEA) — including to the United States — we ensure compliance with the EU-US Data Privacy Framework, as recognised by the European Commission.
9. Data Security
- Encrypted data storage and transmission (SSL/TLS)
- Restricted access — only authorised personnel can access personal data
- Regular security reviews and updates
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. How Long We Keep Your Data
We retain your personal data for as long as your account is active. After your involvement with us ends, we retain your data for up to 1 year, after which it will be securely deleted — unless required by law to retain it longer.
11. Your Rights
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to correct inaccurate or incomplete data
- Right to erasure — to request deletion of your data ("right to be forgotten")
- Right to restriction — to limit how we process your data
- Right to portability — to receive your data in a portable format
- Right to object — to object to processing for direct marketing
- Right to withdraw consent — at any time, without affecting prior lawful processing
- Right to lodge a complaint — with your national data protection authority (Greece: www.dpa.gr; US: the FTC enforces COPPA)
For parents and guardians: You have the right to review, correct, or delete your child's personal data at any time. Contact us at our contact page or at [email protected].
12. Cookies
We use cookies to ensure the correct functionality of our platform:
- Essential cookies — required for the platform to function
- Analytics cookies — Google Analytics, to understand how our site is used
You can manage or delete cookies through your browser settings. For more information, visit AboutCookies.org.
13. Freelance Teachers — Certificate Data
- Certificates are encrypted during transfer and storage
- Access is restricted to authorised personnel only
- We do not share certificate data with third parties without your explicit consent
- We retain certificate data only as long as necessary to verify your teacher status
14. Minors
Registration and processing of personal data for individuals under the age of 18 require the participation and consent of a parent or legal guardian. By accepting the terms of use on behalf of your minor child, you consent to this Privacy Policy and the Platform's Terms and Conditions.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date at the top. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.
16. Contact Us
- Contact form
- Email: [email protected]
