Kids Love Investing Privacy Policy

1. Who is responsible for your information

Kids Love Investing, Inc. is federally incorporated in Canada and is responsible for the personal information processed through KLI.

Privacy Officer: Oreoluwanimi Olawuyi
Email: support@kidsloveinvesting.com
Mailing address: 700 Quilter Row, Ottawa, Ontario, K0A 2Z0, Canada
Telephone: 888-614-4650

2. Information we collect

Parent and guardian account information

When a family account is created, we collect the parent's or guardian's first and last name, username, email address and password. We also collect account settings, subscription status, communications with support and information needed to administer referrals.

Passwords are stored in hashed form. Parent controls may also be protected by a password or PIN.

Child profiles and learning information

Only a parent or legal guardian may create and manage a child profile. Depending on the features used, we collect and store:

• The child's name, age group and selected avatar.
• A hashed profile PIN, when a PIN is used.
• Quiz answers and scores.
• Lesson and game activity.
• Learning progress.
• Rewards and certificates.
• Investing Lab activity and other saved learning records.
• Technical metadata about the use of AI-enabled features.

Some games and the Investing Lab save progress, preferences or notes in the browser on the device being used. Most of these browser saves do not expire automatically.

Child profile information is private to the family. Other families cannot see a child's profile, name, scores, certificates or learning activity.

Payments

Stripe collects payment-card details directly and processes subscription payments. KLI does not receive or store full payment-card details. We receive payment status, subscription information and transaction references.

Physical-product orders

Printify is used to produce and fulfil physical-product orders. When an order is placed, Printify receives and stores the information needed to complete and deliver it, including the purchaser's name, delivery address, contact information and order details. KLI does not retain separate copies of Printify's fulfilment records. Printify handles this information under its own privacy policy and retention practices.

Referrals

We record referral relationships, referral dates and reward or payment-qualification details. A referrer may see the new parent's first name, joining date and qualification status. Referrers cannot see child profiles or payment details.

Analytics, advertising measurement and technical information

On public and parent-facing pages, optional Google Analytics, PostHog and Meta technologies may collect information after tracking is accepted. This may include page or account activity, time spent, IP address, browser and device information, cookies and advertising identifiers.

When Meta registration measurement is accepted, Meta may receive registration events, hashed parent contact details, account identifiers, IP address, browser details and advertising identifiers. Child profile information is not included in these registration events.

Optional Google Analytics, PostHog and Meta tracking is blocked while a child profile is active. Operational logs, security logs and Sentry error reporting may still process technical information during child use to operate, secure and troubleshoot the service.

3. How we use information

We use personal information to:

• Create, authenticate and manage family accounts and child profiles.
• Deliver age-appropriate lessons, games, videos and educational features.
• Save learning progress, quiz results, rewards and certificates.
• Show parents or guardians their child's learning activity.
• Process subscriptions, product orders, payments and referral rewards.
• Send account, security, billing, support and service communications.
• Send weekly progress emails and parent-facing promotional communications.
• Operate, secure, troubleshoot and improve KLI.
• Measure registrations and understand use of public and parent-facing pages when optional tracking has been accepted.
• Meet legal obligations, enforce our terms and handle disputes.

KLI does not sell or rent personal information. KLI does not use child profile information for targeted advertising. Optional advertising and analytics tracking is blocked in child mode.

Where applicable law requires a legal basis for processing, we rely on the performance of our agreement with the parent or guardian, consent for optional activities, our legitimate interests in operating and securing the service, and compliance with legal obligations. Children's information is processed at the direction of the parent or legal guardian who creates and manages the child profile, subject to applicable legal requirements.

4. Children and parental involvement

KLI is designed for children to use within a family account managed by a parent or legal guardian. The adult verifies their email address and confirms that they are an adult and the child's parent or legal guardian. A parent can create child profiles on the free plan without providing payment details.

The parent provides the child's profile information and requests that KLI process it to provide the selected educational services. Parents control the family account and can review or update profile information, delete an individual child profile or delete the entire family account.

Parents may also contact our Privacy Officer to request access to, correction of or deletion of their child's information, or to withdraw a permission, subject to applicable law and appropriate verification.

Deleting information required for a feature may prevent that feature from working and may remove its saved history.

5. Cookies, browser storage and privacy choices

KLI uses login and security cookies needed to authenticate users, maintain sessions and protect accounts. We also use a tracking-preference cookie that lasts for one year.

The website uses browser storage for carts, game saves, progress, notes and preferences. Most browser saves remain on the device until they are cleared by the website, browser or user.

Optional Google Analytics, PostHog and Meta tracking loads only after tracking is accepted. Selecting Keep them off prevents these optional tools from loading on future page loads. Parents can reopen the Privacy choices control to change their selection.

If optional scripts have already loaded on the current page, changing the selection may not stop them immediately. Refresh the page after changing the privacy choice so the updated selection applies to the new page load.

Optional Google Analytics, PostHog and Meta tracking is blocked in child mode. Essential cookies, local learning saves, operational logs and error reporting may still operate because they support account security and core service functions.

6. Email communications

Resend delivers KLI emails. Email-open and link-click tracking is disabled.

Promotional and weekly progress emails are sent only to parents or guardians. These messages include an unsubscribe link. Unsubscribing disables weekly progress emails. Necessary account, security, support, transaction and billing messages may still be sent.

7. Service providers and external resources

We use the following providers and resources to operate KLI:

We may also disclose information when required by law or when reasonably necessary to protect users, investigate fraud or security incidents, enforce our rights or complete a business transaction subject to applicable legal safeguards.

8. International processing

KLI is based in Canada and serves families internationally. Production AWS infrastructure is configured in Canada Central. PostHog and Sentry use US endpoints. Other providers, including Resend, Stripe, Meta, Google and Printify, may process information in Canada, the United States or other countries where they or their subprocessors operate.

Information processed outside a family's country may be subject to the laws of the country where it is processed, including lawful access by courts, law-enforcement or national-security authorities.

Where required, we use contractual or other safeguards intended to protect personal information transferred between countries.

9. Retention and deletion

We retain personal information for as long as needed to provide the service, maintain security, administer transactions and referrals, meet legal or accounting requirements, and resolve disputes.

Current retention practices include:

Deleting a child profile removes its related learning records from the live family account. Deleting the family account removes the family account and child profiles from the live application. Separately maintained support, email, payment, referral and audit records may remain for the purposes described above.

Information may remain temporarily in automated database backups for up to 14 days. Records held by service providers are subject to their deletion and retention processes. Information saved in the browser is not automatically erased when an online account is deleted and may need to be cleared from that browser or device.

Cancelling a subscription does not automatically delete the family account.

10. Security and access

KLI uses HTTPS, encrypted database storage and encrypted uploads. Passwords and PINs are hashed.

Parents can access their own family records. Authorised KLI staff and infrastructure administrators may access information when necessary to operate, support, secure or troubleshoot the service.

No online service can guarantee absolute security. If a security incident triggers a legal notification obligation, KLI will provide the required notices.

11. Privacy rights and requests

Depending on where a family lives, parents and children may have rights to access, correct or delete personal information, withdraw consent, object to or restrict certain processing, or receive a portable copy. Legal exceptions may apply.

Parents can use the account controls to delete a child profile or family account. For other requests or assistance, contact:

Oreoluwanimi Olawuyi, Privacy Officer
support@kidsloveinvesting.com
700 Quilter Row, Ottawa, Ontario, K0A 2Z0, Canada
888-614-4650

We may request proportionate information to verify the requester's identity and authority. We will respond within the period required by applicable law.

A person may also complain to the privacy or data-protection regulator that applies in their location, including the Office of the Privacy Commissioner of Canada or an applicable provincial authority, the US Federal Trade Commission, the UK Information Commissioner's Office, an EEA supervisory authority, or the Nigeria Data Protection Commission.

12. Changes to this policy

We may update this Privacy Policy as KLI changes or legal requirements develop. We will update the effective date and provide additional notice where required. If a new practice requires consent, including parental consent, we will seek it before beginning that practice.

A short explanation for children

Your parent or guardian creates and manages your KLI profile. We save your profile details and learning activity so you can continue where you stopped and your parent can see how you are doing. Your profile is not shown to other families.

Ask your parent or guardian if you want to see, change or delete your information. Do not put your address, phone number, password or other private details into games, notes or support messages.