Children’s Privacy & Parental-Consent Notice

Heroco is designed for children aged 7–15, used under an account held by a parent or guardian. This notice explains what we collect from children, how we obtain your consent, and the controls you have. It supplements our Privacy Policy.

1What we collect from children — and why

We practise data minimisation: we collect only what the learning experience needs — the child’s age band, their activity and progress, and the prompts they enter and creations they make with our AI features, plus an optional avatar/display name. We do not ask a child for their real name, home address, phone number, precise location, email, school, or photographs.

2No advertising, no profiling

We do not show children behavioural or targeted advertising, and we do not build advertising or behavioural profiles of children. Children’s inputs are not used to train third-party AI models.

3How we obtain verifiable parental consent

Before a child uses Heroco, a parent/guardian creates the account and confirms consent. Where the parent completes the $10 refundable founding-member deposit or a paid subscription, that card transaction also serves as a strong verifiable parental consent signal under COPPA. We tell you clearly what you are agreeing to before you consent.

4AI & third-party sharing (separate consent)

To generate creations, a child’s prompts and outputs are processed by our AI providers (including Anthropic / Claude), for generation and safety-filtering only. By consenting, you also authorise this specific processing. We do not otherwise disclose a child’s personal data to third parties except our service providers (see the Privacy Policy) or where required by law.

5Your rights as a parent

• Review the personal data we hold about your child;
• Delete it, or export a copy;
• Refuse further collection or withdraw consent — while continuing to use parts of the service where possible, or by closing the account;
• Manage all of the above via your account settings, or by emailing hi@heroco.ai.

6Safety rules built for kids

The AI runs in a walled sandbox — a child never reaches “raw” AI or the open web. Creations are private by default and moderated. In-product guidance reminds children: never type your real name, address, phone, school, or photos.

7Data minimisation & retention

We keep a child’s data only as long as needed to provide the service, and delete or anonymise it when the account is closed or the purpose ends — never indefinitely — subject to limited legal-retention exceptions.

8Ages & jurisdictions

9In plain words — for kids

10Contact