Privacy Policy

Last updated: March 18, 2026

ThinkQuest AI ("we," "us," or "our") operates the ThinkQuest AI platform at www.thinkquestai.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Parent/Guardian Account Information

  • Email address (for account creation and communication)
  • Full name
  • Password (securely hashed, never stored in plain text)
  • Payment information (processed by Stripe; we do not store card numbers)

1.2 Child Profile Information

  • First name or nickname (chosen by parent)
  • Age or age range
  • Avatar selection
  • Game progress, scores, and achievements
  • Skill assessment results
  • Workbook exercise responses

1.3 Automatically Collected Information

  • Device type and browser information
  • IP address (for security and fraud prevention)
  • Pages visited and features used
  • Session duration and interaction patterns

2. How We Use Your Information

  • To provide and maintain the Service
  • To personalize educational content based on age and skill level
  • To track learning progress and generate parent dashboard reports
  • To power our AI Socratic coaching (ThinkBot) with age-appropriate responses
  • To process payments and manage subscriptions
  • To send account-related communications (not marketing to children)
  • To improve our games, workbooks, and educational content
  • To detect and prevent fraud or abuse

3. Data Storage and Security

Your data is stored securely using Supabase, a SOC 2 compliant cloud database provider built on PostgreSQL. We implement row-level security (RLS) policies to ensure users can only access their own data. All data is encrypted in transit (TLS) and at rest.

4. Third-Party Services

We use the following third-party services:

  • Supabase — Authentication and database hosting
  • Stripe — Payment processing (Stripe Privacy Policy)
  • Vercel — Application hosting
  • Anthropic (Claude API) — AI coaching responses (no child data is stored by Anthropic)
  • PostHog — Privacy-friendly analytics (no personal data shared)

5. We Do Not

  • Sell personal information to third parties
  • Share child data with advertisers
  • Display behavioral advertising to children
  • Allow children to make their data publicly available
  • Collect more data than necessary to provide the Service

6. COPPA Compliance

ThinkQuest AI is designed for children ages 6–14 and complies with the Children's Online Privacy Protection Act (COPPA). For complete details on our COPPA practices, please see our dedicated COPPA Compliance page.

Key points:

  • Child accounts are created and managed by parents/guardians
  • We obtain verifiable parental consent before collecting child data
  • Parents can review, modify, or delete their child's data at any time
  • We collect only the minimum data necessary to provide educational services

7. Parental Rights

As a parent or guardian, you have the right to:

  • Review all personal information collected from your child
  • Request correction of inaccurate information
  • Request deletion of your child's personal information
  • Refuse further collection or use of your child's information
  • Download a copy of your child's data

To exercise any of these rights, contact us at privacy@thinkquestai.com. We will respond within 30 days.

8. Data Retention

We retain account data for as long as the account is active. When an account is deleted, we remove all associated personal data within 30 days. Anonymized, aggregated data (such as overall usage statistics) may be retained indefinitely to improve our educational content.

9. Cookies

We use essential cookies required for the Service to function (session management, authentication). We do not use third-party tracking cookies or advertising cookies. Our analytics provider (PostHog) can be configured to operate without cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our Service. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, contact us at: