Privacy Policy

K12 Crafter (we, us, our) operates the website k12crafter.com, the worksheet store, and the learning app for families with children in Kindergarten through Grade 5. Our contact for privacy matters is privacy@k12crafter.com.

Because children use our service, several privacy frameworks shape how we build it. We aim to follow the principles of the Children's Online Privacy Protection Act (COPPA) in the United States, and, for users in the EU, EEA, and United Kingdom, the General Data Protection Regulation and UK GDPR. We also work to meet applicable United States state privacy laws. Where rules differ, we aim for the stricter standard.

• From the parent account holder: your first name, last name, and email; a password stored as a one way hash, never in plain text; and the limited billing details our payment provider returns to us, such as the last four digits of the card and the billing postal code.
• From child profiles: a first name or nickname you choose, a grade level, and an avatar from a fixed set. We do not collect a child's email, date of birth, phone number, photo, voice, or location.
• Practice and progress: questions answered, whether they were right, time taken, skill attempted, and rewards earned, so the dashboard, adaptive difficulty, and rewards work.
• Messages you send us through support or the contact form.
• Limited technical data, such as IP address, device and browser type, pages visited, and timestamps, used to keep the service working and secure.

Payment card details are entered with our payment provider and are never stored on our servers.

• To run the service: deliver worksheets and the app, grade answers, track progress, and award coins.
• To operate your account: manage sign in, billing, purchases, and access.
• To improve the service: aggregated, anonymized usage helps us see which skills and features need work.
• To communicate with you: send receipts, account notices, and, with your consent, optional updates.
• To keep things safe and to meet our legal obligations.

We do not use children's information to target advertising or to build commercial profiles.

We do not sell your personal information for money. We share data only as needed to run the service, with providers that process it on our instructions, including:

• Supabase for our database and account sign in.
• Cloudflare for hosting and for storing worksheet and image files.
• Stripe for payments.
• Anthropic to power AI features such as generated practice and explanations.
• An email provider for receipts and account messages.

We may also share information when the law requires it, or as part of a business transfer such as a merger or sale, in which case this policy continues to apply.

On our public marketing pages we may use analytics and advertising or measurement tools from third parties to understand how the site is used and how our ads perform. When these are on, they may set their own cookies and receive limited usage data, governed by that provider's own policy. See our cookie policy for more.

We do not show advertising to children, and we do not use children's practice data to target ads. On the learning app, we apply privacy protections such as masking text in any session analytics. You can limit analytics and advertising tools through your browser and device settings.

Children use K12 Crafter only through profiles that a parent or guardian creates, after that adult gives consent. We collect the minimum the app needs: a first name or nickname, a grade, and practice progress. We do not ask children for an email, a phone number, a photo, or a location.

We do not show advertising to children and we do not sell personal information. A parent can review, export, or delete a child's information at any time from the dashboard or by emailing us. See the Children's Privacy Notice below for the details COPPA asks us to share.

We keep information only as long as we need it. Account and purchase records are kept while your account is active and afterward as long as the law requires, for example for tax records. Child profile and practice data is deleted within 30 days of the profile being removed or the account being deleted. You can delete a child profile or your whole account at any time, or ask us to do it for you.

• Edit your profile and your child profiles anytime from the dashboard.
• Delete a child profile or your whole account.
• Request a copy of your data, or ask us to correct or delete it.
• For EU and UK users: ask us to limit or object to certain processing, or to receive your data in a portable format.
• Withdraw any consent you have given, at any time.

To make a request, email privacy@k12crafter.com. We may ask you to verify your identity, and we aim to respond within 30 days.

We use measures such as encryption in transit, hashed passwords, and limited internal access to help protect your information. Read more on our security page. If a breach affects your personal information, we will notify you as the law requires.

K12 Crafter is based in the United States. If you use the service from elsewhere, your information may be transferred to and processed in the United States. For EU and UK users, we rely on recognized transfer safeguards where they apply.

We may update this policy from time to time. If a change is significant, we will tell you by email or with a notice in the app, and for changes that materially affect how we handle children's data we will ask for fresh parental consent.

This notice is for parents and guardians of children under 13.

• What we collect from children: a first name or nickname, a grade level, and an avatar. Nothing more, no email, birthday, phone, photo, or location.
• Why we collect it: only to create the child's profile inside your account, set the right grade level, and track progress so the rewards work.
• Parental consent: at sign up, the adult must confirm they are a parent or guardian who consents to the collection of the child's limited information. We record when consent is given and the policy version at the time.
• Your rights: review what we have collected, refuse further collection by deleting the child profile or emailing us, and ask us to delete the child's information, which we do within 30 days.
• No advertising use: we do not share or sell child data for advertising or marketing, and our providers that handle it may use it only to run the service.

Questions about a child's privacy? Email privacy@k12crafter.com.

Questions about your privacy or your data? Email privacy@k12crafter.com or use our contact page.