Privacy Policy
Hi! 👋 If you're a kid reading this — welcome. If you're a parent — also welcome. We wrote this in plain English on purpose. Lawyers usually write privacy policies that nobody can read. We don't think that's fair, especially when the people whose data we're talking about are kids.
Here's the short version: We collect very little. We don't sell anything to anyone. We don't show ads. You can delete everything at any time, and we'll do it within 7 days — usually instantly.
1. What we collect
From the signup form
- Parent's email address — so we can send the daily digest and (for kids under 13) ask for parental consent
- Kid's first name — just first name, no last name needed
- Kid's age — to deliver age-appropriate content and to know whether COPPA consent is required
- Optional: whether the kid invests already (multiple choice), and how the parent found us
Automatic (from the signup request)
- UTM parameters (utm_source, utm_medium, etc.) — only if you arrived from a link with those in the URL. Used to know which channels work.
- User agent — what browser and device the parent used (mobile/tablet/desktop). Used for layout and analytics.
- Timezone — so the daily digest arrives at 7 AM your 7 AM
- IP address — captured at signup and at consent click (for COPPA audit purposes). We do not use it for ad targeting.
From playing
- Which games the kid plays and whether they got the answer right
- XP, streak, rank, and Perfect Days
- Whether the daily digest was opened (via tracking pixel in the email — standard email open tracking)
- Push notification token — only if the kid adds Market Juice to their home screen AND turns on push notifications
2. How we use it
- Deliver the daily digest to your kid every morning at 7 AM your timezone
- Show your kid their rank, streak, and Perfect Days (the engagement loop)
- Send the parent a weekly summary email (you can opt out anytime)
- Improve the product (e.g., if 80% of kids skip a particular game, we'll redesign it)
- Send push notifications if the kid opted in
3. Things we DON'T do
- We don't sell data. Not to advertisers. Not to data brokers. Not to anyone.
- We don't share data with third parties for advertising or marketing.
- We don't use kids' data to train AI models — ours or anyone else's.
- Market Juice is free and does not currently show ads. If we ever introduce sponsored content, it will be clearly labeled, educational in nature, and age-appropriate. We will never sell or share your kid's data with advertisers or sponsors — period. We'll notify parents by email at least 30 days before any change to this policy.
- We don't track kids across the web. No Facebook pixel, no Google Analytics ID linked to a kid's account, no cross-site cookies.
- We don't collect more than we need. No last name. No location beyond timezone. No phone number.
We do use a few third-party services to deliver the product: an email-sending service (to send the digest), a database hosting service (to store the user data), and a hosting platform (to run the website). These vendors process data on our behalf — they don't have permission to use it for their own purposes. Vendor list available on request.
4. Kids under 13 (COPPA)
The U.S. Children's Online Privacy Protection Act (COPPA) requires us to get verifiable parental consent before collecting personal information from kids under 13. We take this seriously.
What that means in practice
- When a parent signs up a kid aged 10, 11, or 12, we send a consent email to the parent. The kid's account stays inactive — no data is processed beyond signup, no digest is sent — until the parent clicks the consent button.
- The consent email lays out (in plain English) exactly what we collect, how we use it, what we don't do, and the parent's right to delete the data at any time.
- We log the consent timestamp and IP address as proof of consent.
- If the parent doesn't click within 7 days, the link expires and the signup is dropped.
What changes at age 13
For kids aged 13–16, COPPA doesn't apply. We still send the parent a verification email and still ask for the parent's email (not the kid's) at signup. The data collection itself is identical regardless of age.
5. Parents' rights
You have the right to:
- See all the data we hold about your kid — email hello@example.com and we'll send you a copy within 7 days.
- Correct any data that's wrong (e.g., misspelled name, wrong age).
- Delete your kid's account and all associated data instantly via the deletion form: /parent/delete-data. We delete from our database AND our email service AND all backups within 7 days.
- Refuse further collection — tell us to stop collecting more data even if you don't want a full delete. We'll honor it.
- Withdraw consent at any time, which is equivalent to delete.
6. How to delete your data
Visit /parent/delete-data and enter the email address you signed up with. We'll process the request automatically.
Alternatively, reply to any email from us and ask for deletion. We'll do it manually within 7 days.
7. How long we keep things
- Active account data: as long as the account is active.
- After deletion request: we remove data from the active database within 24 hours, and from backups within 7 days.
- Consent records: we keep proof of consent (timestamp, IP) for 3 years after the account is deleted, so we can demonstrate compliance if asked. This is the only thing that survives a deletion request, and it doesn't contain the kid's name, age, or any engagement data — just "consent was given at this timestamp from this IP."
8. Questions or concerns
Email us at hello@example.com. We read everything and reply within 2 business days. If you're an attorney, a regulator, or a parent who needs urgent help, mark the subject line URGENT and we'll respond within 24 hours.