Legal & Policies

Information We Collect

The Legacy Circle collects the minimum information necessary to provide our educational services: account email (provided at registration), date of birth (entered at registration or during a one-time age gate and used only for the under-13 age check — we keep only the under-13 determination and the birth year, not the exact date of birth), learner profile data (display name, age range, learning progress), and activity data (completed lessons, quiz scores, story progress). We do not collect precise location data, financial information, or sensitive personal information beyond what is necessary for the educational experience.

Children's Privacy (COPPA)

The Legacy Circle is designed for children ages 2–14. Our children's-privacy practices are built around the requirements of the Children's Online Privacy Protection Act (COPPA). At registration (and on first sign-in for existing accounts) we ask for a date of birth. Users under 13 must provide a parent or guardian email; the account stays locked until the parent approves it by signing in to their own Legacy Circle account — the account whose email matches the parent email on record — and entering a one-time approval code that we email to that address. The code is never shown on the child's screen. We do not collect personal information from children under 13 without this verifiable parental consent. We retain only the under-13 determination and the birth year — never the exact date of birth. Push notification permission is never requested automatically — only when a parent or user explicitly enables it. Parents and guardians may review, update, or request deletion of their child's data at any time by contacting us at privacy@legacycircle.app. We do not serve targeted advertisements to users under 13.

How We Use Information

Data is used solely to: (1) provide and improve the educational experience; (2) track learning progress; (3) send optional parent/guardian progress notifications; (4) maintain platform security. We do not sell, rent, or share personal data with third parties for commercial purposes.

Data Retention & Deletion

User data is retained while an account is active. Upon account deletion request, all personal data is permanently removed within 30 days. Parents may request deletion of their child's account and all associated data at any time.

Data Security

We use industry-standard encryption (TLS/SSL) for data in transit and at rest. Access to user data is restricted to authorized personnel on a need-to-know basis. We conduct regular security reviews.

Contact

For privacy inquiries: privacy@legacycircle.app | The Legacy Circle, Indianapolis, IN, USA