COPPA Compliance Statement

Last updated: June 2026 · Effective: June 2026

1. Our Commitment

BrainBattle, a product of KodeGuy (Pty) Ltd, is committed to protecting children’s privacy. The U.S. Children’s Online Privacy Protection Act (COPPA) prohibits the collection of personal information from children under 13 without verifiable parental consent. BrainBattle’s self-registration age requirement is 18 years old — which exceeds COPPA’s minimum threshold. This means no child under 13 can ever self-register on BrainBattle under any circumstance.

2. Self-Registration Age Gate

All self-managed BrainBattle account types (Student, Adult Learner, Teacher) require the registering individual to affirmatively confirm they are 18 years of age or older by checking a mandatory checkbox at registration. Registrations cannot be completed without this confirmation.

This requirement applies regardless of how the registration is initiated — including registrations triggered by a teacher’s class invitation link. An invitation link does not verify the recipient’s age. Any individual under 18 who receives a teacher invitation must use a Parent/Child profile managed by their parent or guardian instead.

3. How Children Under 18 Use BrainBattle

Learners under 18 access BrainBattle only through a Parent/Child profile, which is created and managed by a parent or legal guardian. The parent or guardian holds the BrainBattle account; child profiles exist within that account.

Each time a new child profile is created, the parent or guardian must:

• Check a mandatory checkbox confirming they are 18 years of age or older
• Confirm they are the parent or legal guardian of that specific child

This confirmation is required for each new child profile individually — a single confirmation at account creation does not carry forward to subsequent child profiles.

4. What Information We Collect for Child Profiles

For each child profile, we collect only the information necessary to personalise the learning experience:

• First name (provided by the parent or guardian)
• Age or grade level
• Learning preferences (game type, theme, learning style, language, country, and motivation) — selected by the parent or guardian during profile setup
• Learning progress data (quiz scores, activity history)
• A numerically-generated PIN used to let the child log in on their own device

We do not collect email addresses, social media information, precise geolocation, or any biometric data for child profiles.

5. How We Use Child Profile Data

Information associated with child profiles is used solely to:

• Personalise the quiz, lesson, and game content shown to that child
• Track and display that child’s learning progress to the managing parent
• Operate the PIN-based child login system

Child profile data is not shared with third parties for advertising or marketing purposes. It is not used to build profiles for commercial data analysis beyond operating the platform.

6. Parental Rights

As the account holder responsible for a child profile, the parent or guardian may at any time:

• Review the information held in that child’s profile
• Edit or update the child’s profile information from the Parent Dashboard
• Delete a child profile, which permanently removes that child’s data
• Delete the entire account, which removes all associated data including all child profiles

To exercise these rights, use the Parent Dashboard within the app or contact us at privacy@kodeguy.com.

7. Third-Party Processing of Child Data

BrainBattle uses the following third-party processors that may handle child profile data:

• Supabase: Stores child profile data in a secure, access-controlled database
• Replicate: Processes AI content generation requests using the parent-uploaded study material
• Vercel: Hosts the application and serverless functions

Each processor is permitted to use data only to provide their services to KodeGuy, not for independent commercial purposes.

8. Data Security

Child profile data is stored in a database with Row Level Security (RLS) enabled. Each parent or guardian can access only the child profiles linked to their own account. All data is transmitted over encrypted HTTPS connections.

9. Changes to This Statement

We may update this COPPA Compliance Statement from time to time. The “Last updated” date at the top of this page reflects the most recent revision.

10. Contact

For COPPA-related questions, or to exercise parental rights, contact us at:
Email: privacy@kodeguy.com