Privacy Policy

The short version

• Children can play without an account. Then nothing about them leaves the device they play on, except two anonymous counts: the first visit to our site from that device, and the first game finished on it (no name, no id, no cookie).
• Children never make accounts and never give us an email, photo, birth date or location. A parent creates their profile.
• No ads, no tracking, no third-party analytics, pixels or scripts on the pages children use. Our own counts are anonymous. We never sell or rent personal data.
• Parents can see, download or delete their child's data at any time from their family page.

Who we are

Créature is run by Creature School LLC, a Colorado limited liability company, for families across the United States. Address: 10753 Foxwood Ct, Parker, CO 80138, USA. Phone: (720) 984-2538. Email: hello@creature.school.

Playing without an account

Games and lessons played without signing in keep stars, progress and settings only in the browser on that device (its local storage). We don't receive them. Clearing the browser's data removes them. Drawings made in drawing lessons stay on the device too; with an account, they are saved to the child's Journal only after a parent agrees to our notice that covers drawings.

To know which of our ads and links work, the site counts visits anonymously: the first time a device opens our home page or plans page, or arrives from one of our ads or links, and the first time a game or lesson is finished on it, it sends us just that step and the name of the ad campaign (or "direct"). We add one to a count for that day. The message carries no name, no account, no device id and no cookie, each step is sent at most once per device, and the device remembers in its local storage that it was sent. If the visitor came from an ad or a link of ours, the device also keeps the ad's tags (such as utm_campaign) for 30 days, in case a parent signs up.

What we collect from parents

• Your email address, to sign you in with a one-time link and to answer you. If you sign in with Google, Google tells us your email and name.
• Your family's name and the devices you set up for your children (a device gets a random code; we don't collect anything that identifies the device itself).
• Which ad or link brought you, if one did: when you create your family account, we keep with it the tags of the ad or link you first arrived from (its source, medium, campaign, ad and keyword, a free-days code, the page you landed on and the day), and later whether your family started a trial and paid. This is about you, never about your child, and no advertiser receives it.
• If you start the family plan or its free trial, Stripe handles the payment. We never see or store your card number; we keep the plan, its status, when a trial or period ends, any free-days code you used, and Stripe's customer and subscription ids.
• Messages you send us through the contact form or by email. The form sends its message to our inbox and also keeps it on our servers (your email, the name you give, the topic and the message), so we can follow up.
• Feedback you write on your dashboard ("Tell us what you think"), kept with your account. Please leave your child’s details out of it.

What we collect about children, with a parent’s consent

Before a child profile exists, the parent reads our notice for parents and agrees to it (this is the direct notice the US Children's Online Privacy Protection Act, COPPA, asks for). We keep which version they agreed to and when.

We check that it is really a parent agreeing in one of two ways the US Federal Trade Commission accepts. Email: we send a link to the address the parent signed in with, they open it and agree, and the next day we email them again to confirm, with a reminder that they can withdraw. Or card: the parent pays for the family plan by card. We keep a reference to the email link or the payment as proof, never the card details.

We only use children’s data inside Créature and never disclose it to third parties, which is what allows the email method. You can agree to us collecting and using your child’s data without agreeing to any disclosure, and we never ask a child for more information than a game needs.

• When you add a child, we store their first name and, if you choose, the initial of their last name, a picture they pick from our set, and their progress in games and courses: which levels and lessons they finished, their stars, how many answers were right the first time, time spent and tries.
• Drawings your child makes in drawing lessons are saved to their Journal on our servers, so they can see them on any of your family's devices and you can see them too. Drawings are kept as lines, not photos, privately: only your family can open them.
• If a lesson lets a child record their voice or take a photo, it stays on that device and is never sent to us.
• We never collect a child's email, photo, birth date, location or anything they type, and children never make accounts.

The emails we send

• Sign-in links, when you ask for one.
• The consent link when you ask for it, and the confirmation the day after you agree.
• If you start a free trial: a reminder a few days before it turns into a paid plan, with the date and the price.
• Notices about your account: a child’s profile being deleted, consent withdrawn, the account being closed.
• The weekly email about your kids’ week, only if you turn it on, with a one-click unsubscribe link.
• We never send marketing emails without asking, and we never email children.

How we use it

• To save a child's progress across the family's devices and show it to their parents.
• To sign parents in, run the family plan, and answer questions.
• To learn which games children enjoy: when a child taps a face after a level on a device a parent set up, we add one to a count for that level and day. The count does not say which child, device or family it came from. Without an account, the face stays on the device.
• To learn which of our ads and links bring families: we count, per campaign and day, visits, first games, sign-ups, trials and payments. The admin sees those totals and which family accounts (by a number, not by email) came from each campaign.
• To keep Créature working and secure: our servers log requests for 30 days, without children's names or parents' emails in them.
• We never use children’s data for advertising, profiling or training AI models, and we don’t share it for anyone’s marketing.

AI voices and pictures

The voices in Créature’s games and courses are made with AI text-to-speech (OpenAI and open-source speech models), not recorded by actors, and most pictures are drawn with AI image tools (OpenAI) and checked by us. All of it is made in advance and shipped as ordinary sound and picture files: nothing a child says, types or does is ever sent to these tools.

Who processes data for us

These companies run parts of Créature under contracts that limit them to doing that work for us:

• Amazon Web Services (United States): hosting, file storage (including children’s drawings), sign-in sessions, server logs, and sending our emails (Amazon SES).
• Neon (United States): our database, which holds parent accounts, child profiles and progress.
• Stripe (United States): payments for the family plan. Stripe receives a parent’s payment details, never anything about children.
• Google: only if you choose “Continue with Google” to sign in.

How long we keep it

• A child's profile, progress and drawings: until the parent deletes it or withdraws consent. Deleting starts a 7-day window to undo it; after that it is permanently erased.
• A parent account: until you close it. The owner of a family account can close it from the family page: every child profile in it is deleted with it, the plan stops renewing, and after a 7-day window to change your mind the account and everything in it are permanently erased. You can also write to us and we do it for you. Feedback you wrote is deleted with it.
• Contact-form messages: until you ask us to delete them. Write to us from the same address and we delete them.
• Which ad or link brought your family: with your family account, deleted with it. The anonymous daily counts are kept, since they are not about anyone.
• Billing records: as long as tax and accounting law requires.
• Server logs: 30 days. Database backups roll off on their own schedule after a deletion.

Your choices and rights

• See, download or delete your child's data at any time from your family page, or ask us to.
• Withdraw your consent at any time from your family page: we then delete your child's profile, progress and drawings, with the same 7-day window to undo it.
• Ask us what we hold about you or correct it, and close your account from your family page whenever you like.
• If you are in the EU, the UK or another place with similar laws, you have these rights under those laws too, and you can complain to your data-protection authority.

Security

Data is encrypted on the way and at rest. Every request is checked against the family it belongs to, so one family can't reach another's data, and only the few people who run Créature can reach the systems that hold it.

Changes

If we change how we use children's data, we tell parents first and ask for their consent again. We date every version of this policy.

Contact

Questions or requests: hello@creature.school, or the contact page.