Privacy Policy
Hi! 👋 If you're a kid reading this — welcome. If you're a parent — also welcome. We wrote this in plain English on purpose. Lawyers usually write privacy policies that nobody can read. We don't think that's fair, especially when the people whose data we're talking about are kids.
Here's the short version: We collect very little. We don't sell anything to anyone. We don't show ads. You can delete everything at any time, and we'll do it within 7 days — usually instantly.
1. What we collect
From the signup form
- Parent's email address — so we can send the daily digest and (for kids under 13) ask for parental consent
- Kid's first name — just first name, no last name needed
- Kid's age — to deliver age-appropriate content and to know whether COPPA consent is required
- Optional: whether the kid invests already (multiple choice), and how the parent found us
Automatic (from the signup request)
- UTM parameters (utm_source, utm_medium, etc.) — only if you arrived from a link with those in the URL. Used to know which channels work.
- User agent — what browser and device the parent used (mobile/tablet/desktop). Used for layout and analytics.
- Timezone — so the daily digest arrives at 7 AM your 7 AM
- IP address — captured at signup and at consent click (for COPPA audit purposes). We do not use it for ad targeting.
From playing
- Which games the kid plays and whether they got the answer right
- Market Coins, streak, rank, and Perfect Days
- Whether the daily digest was opened (via tracking pixel in the email — standard email open tracking)
- Push notification token — only if the kid adds Market Juice to their home screen AND turns on push notifications
2. How we use it
- Deliver the daily digest to your kid every morning at 7 AM your timezone
- Show your kid their rank, streak, and Perfect Days (the engagement loop)
- Send the parent a weekly summary email (you can opt out anytime)
- Improve the product (e.g., if 80% of kids skip a particular game, we'll redesign it)
- Send push notifications if the kid opted in
3. Things we DON'T do
- We don't sell data. Not to advertisers. Not to data brokers. Not to anyone.
- We don't share data with third parties for advertising or marketing.
- We don't use kids' data to train AI models — ours or anyone else's.
- Market Juice is free and does not currently show ads. If we ever introduce sponsored content, it will be clearly labeled, educational in nature, and age-appropriate. We will never sell or share your kid's data with advertisers or sponsors — period. We'll notify parents by email at least 30 days before any change to this policy.
- We don't track kids across the web. No Facebook pixel, no Google Analytics ID linked to a kid's account, no cross-site cookies.
- We don't collect more than we need. No last name. No location beyond timezone. No phone number.
We do use a few third-party services to deliver the product: an email-sending service (to send the digest), a database hosting service (to store the user data), and a hosting platform (to run the website). These vendors process data on our behalf — they don't have permission to use it for their own purposes. Vendor list available on request.
4. Data retention
What we keep and why
| Data | Purpose | Retention period |
|---|---|---|
| Kid's first name, age | Personalize the daily digest | As long as the account is active |
| Parent email | Send consent requests, password resets, weekly summary | As long as the account is active |
| Username and password | Account login | As long as the account is active |
| Engagement data (games played, quiz answers, Market Coins, streaks) | Track learning progress | As long as the account is active |
| Push notification token | Send daily digest notification | As long as the account is active and notifications are enabled |
| Consent record (timestamp + IP) | Prove COPPA compliance if asked by a regulator | 3 years after the account is deleted |
When we delete
- Parent requests deletion: All personal information is deleted immediately when a parent submits a deletion request. An anonymized audit record is retained for compliance purposes only.
- Account inactivity: Accounts inactive for more than 12 months will have all personal information deleted automatically.
- After consent is refused: If a parent does not complete the consent process within 7 days, any information collected during signup is deleted automatically.
How we delete
When data is deleted, we overwrite personal information in our database — we don't just hide it. Deleted data cannot be recovered. The only thing that survives a deletion request is an anonymized audit row (no name, no age, no engagement data) plus the consent record described above, both retained strictly for compliance.
5. Kids under 13 (COPPA)
The U.S. Children's Online Privacy Protection Act (COPPA) requires us to get verifiable parental consent before collecting personal information from kids under 13. We take this seriously.
What that means in practice
- When a parent signs up a kid aged 10, 11, or 12, we send a consent email to the parent. The kid's account stays inactive — no data is processed beyond signup, no digest is sent — until the parent clicks the consent button.
- The consent email lays out (in plain English) exactly what we collect, how we use it, what we don't do, and the parent's right to delete the data at any time.
- We log the consent timestamp and IP address as proof of consent.
- If the parent doesn't click within 7 days, the link expires and the signup is dropped.
What changes at age 13
For kids aged 13–16, COPPA doesn't apply. We still send the parent a verification email and still ask for the parent's email (not the kid's) at signup. The data collection itself is identical regardless of age.
Multiple children
Parents may register more than one child under the same parent email address (up to five). Each child's data is stored and managed independently — separate login, separate progress, separate records. We obtain separate consent for each child under 13 before collecting their information: when you add another child, we email you a confirmation link, and that child's account stays inactive until you click it. You can review, manage, or delete each child's data individually from our data deletion page.
6. Parents' rights
You have the right to:
- See all the data we hold about your kid — email hello@themarketjuice.com and we'll send you a copy within 7 days.
- Correct any data that's wrong (e.g., misspelled name, wrong age).
- Delete your kid's account and all associated data via the deletion request form. Your child's personal information is immediately removed from our active systems and email service. Database backups maintained by our infrastructure provider are purged according to their standard retention schedule.
- Refuse further collection — tell us to stop collecting more data even if you don't want a full delete. We'll honor it.
- Withdraw consent at any time, which is equivalent to delete.
7. How to delete your data
Visit our data management page and enter the email address you signed up with. To confirm your identity, we'll send a verification link to that address — click it to review your child accounts and delete the ones you choose. The link expires in 1 hour.
Alternatively, reply to any email from us and ask for deletion. We'll do it manually within 7 days.
8. Questions or concerns
Email us at hello@themarketjuice.com. We read everything and reply within 2 business days. If you're an attorney, a regulator, or a parent who needs urgent help, mark the subject line URGENT and we'll respond within 24 hours.