Privacy Policy
Effective Date: July 20, 2026 | Last Modified: July 20, 2026
Your privacy is very important to us. This Privacy Policy describes how Grammaropolis LLC (“Grammaropolis,” “we,” “us,” or “our”) collects, uses, stores, and discloses personal information when you use our websites, applications, and services (collectively, the “Service”). This Policy applies to all users, including parents, guardians, teachers, school administrators, and students.
Grammaropolis provides AI-powered educational grammar experiences for children. Because our Service is designed for children under 13, we take special care to comply with the Children’s Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), and applicable state privacy laws.
1. Types of Information We Collect
1.1 Parent/Guardian Account Information
When a parent or guardian creates a Grammaropolis account, we collect:
- Parent/guardian name and email address
- Payment information (processed by Stripe; we do not store credit card numbers)
- Child profile information provided by the parent: a nickname the parent chooses to represent their child in reports and activities. The parent is not required to give the child’s real name, and we do not ask the parent for the child’s birthdate.
1.2 School/District Account Information
When a school or district creates a Grammaropolis account, we collect the school/district name, address, and phone number, the account administrator’s name and email address, and the names and email addresses of teachers listed on the account.
1.3 Student Information (School Accounts)
Through the course of providing performance data and tracking a student’s progress through Grammaropolis, we collect the student’s first and last name as provided by the teacher or school, or through a Single Sign-On provider (Google Classroom, Clever, or similar). The types of information we associate with a student include: quiz scores, videos watched, books read, progression through Grammaropolis activities, and sections started or completed.
1.4 AI Interaction Data (Adventures)
When a child uses Grammaropolis Adventures, our AI-powered grammar experiences, we collect:
- Conversation content: text that the child enters during interactive grammar experiences (e.g., responses to character prompts, essay submissions, word choices in games)
- Session metadata: duration of play sessions, which experiences were accessed, and which grammar concepts were practiced
- Learning progress: scores, quest completions, and character interaction history used to personalize difficulty and track educational progress
Important: conversation content is processed in real time by our AI system (Anthropic’s Claude) to generate educational responses. Before conversation text is saved, it passes through an automated filter that removes common personal details such as email addresses, phone numbers, street addresses, and self-introduced names. We do not use children’s conversation data to train AI models; that is a commitment we make and expect to hold through our agreements with our AI provider. We store conversation content to provide the educational service, and it is automatically deleted 30 days after the session. See Section 5 for how retention and deletion work today, including how to request earlier deletion.
1.5 Automatically Collected Information
We automatically collect certain technical information when you use the Service, including IP address, browser type and version, device type, and operating system. We use this information for security, fraud prevention, and to maintain the Service. We do not use this information for advertising or behavioral profiling of children.
Anonymous device identifier: so that a child’s own work stays with them (for example, remembering their place in a lesson or a character conversation) and can be linked to the family’s account when a parent signs in, we store a random anonymous identifier in a cookie and in the browser’s local storage. It is a first-party functional identifier only: it is not used for advertising, and it is not used to track children across other companies’ websites. The identifier is kept for up to one year in the browser; the activity it keys to on our servers follows the retention described in Section 5 (for example, AI conversation content is deleted 30 days after the session).
2. Parental Consent
2.1 Direct-to-Parent Accounts (Adventures)
Grammaropolis Adventures is designed for children under 13, and a child’s participation is set up and controlled by a parent or guardian. Our account process works as follows:
- Account creation: only a parent or guardian creates an account. During sign-up the parent provides their own email address; the child does not create a login or enter their own contact information.
- Email verification: we verify the parent’s email address by sending a secure, single-use sign-in link to the address they provided. The parent confirms control of that inbox by clicking the link. The parent then chooses a nickname to represent their child. Parents may also sign in with a Google account, in which case Google confirms the email address on our behalf.
We are continuing to strengthen this process to align it with the parental-consent methods recognized under COPPA.
2.2 School-Mediated Accounts
For accounts created by schools or districts, Grammaropolis relies on the school to obtain necessary parental consents. Grammaropolis assumes that each school and/or district has provided parents and/or guardians the appropriate notices and has provided authorization for Grammaropolis to collect the necessary student data as outlined in COPPA. Schools act as agents of parents for purposes of COPPA consent in the educational context.
2.3 What Parents Can Do
Parents and guardians have the right to:
- Review the personal information we have collected from their child
- Request that we delete their child’s personal information
- Refuse to permit further collection of their child’s information
- Revoke consent at any time
To exercise any of these rights, email us at support@grammaropolis.com. We handle these requests by hand rather than through an automated self-service control in the account area today. Signed-in parents can manage a few settings on their own directly in the account area, including the child’s nickname, the weekly parent report, and their subscription and billing through our payment processor.
We will not require a child to disclose more information than is reasonably necessary to participate in the Service. A parent’s refusal to provide consent will not prevent the child from accessing non-personalized educational content.
3. How We Use Information
3.1 To Provide the Educational Service
- Operate and deliver interactive grammar experiences
- Process AI-powered educational interactions in real time
- Track learning progress and personalize difficulty
- Generate parent session summaries showing what grammar concepts the child practiced
- Manage accounts, process payments, and communicate with parents
3.2 To Improve the Service
We use aggregated, de-identified data to understand how our experiences are used and to improve them. This data cannot be used to identify any individual child.
3.3 What We Do NOT Do
- Use children’s personal information for advertising or marketing
- Sell children’s personal information to third parties
- Use children’s data to train AI or machine learning models
- Create behavioral profiles of children
- Use children’s personal information for any purpose other than providing and improving the educational service
- Send any communications directly to children
4. Third-Party Service Providers
We share personal information only with service providers who are necessary to operate the Service, and only under contractual obligations to protect the data:
| Provider | Purpose | Data Shared |
|---|---|---|
| Anthropic (Claude) | AI-powered educational interactions | Conversation content (processed in real time, not stored by Anthropic for training) |
| Supabase | Database, authentication | Account information, learning progress, session data |
| Stripe | Payment processing | Parent payment information (Grammaropolis does not store credit card numbers) |
| Resend | Sending email to parents (sign-in links and the weekly parent report) | Parent/guardian email address and the content of the email |
| Sentry | Application error monitoring, so we can find and fix problems | Technical error diagnostics, which may include a parent’s IP address or account identifier captured at the moment of an error |
| Optional single sign-on for parents and teachers | Name and email address from the Google account a parent or teacher chooses to sign in with | |
| Clever | Single sign-on for teachers and students on school accounts | Sign-in identity from the school’s Clever account (name, school-provided email, and role) |
| Vercel | Application hosting and cookieless website analytics | Technical logs (IP address, request metadata). Our analytics are cookieless and do not track individual children across sites. |
We do not share personal information with advertising networks, data brokers, or any third party for marketing purposes.
If Grammaropolis goes through a business transition such as a merger, acquisition, or sale of assets, personal information may be transferred. The acquirer will be subject to this Privacy Policy until it is revised pursuant to this Policy.
5. Data Retention and Deletion
We keep personal information while it is needed to provide the educational service. The table below describes how retention works today. We are honest about what is automated and what is done by hand: AI conversation content is automatically deleted 30 days after the session, while most other data is retained while the account exists and is removed when a parent asks us to remove it. We do not automatically delete account data when a subscription is cancelled; a parent can request deletion at any time (see below).
| Data Type | Retention Period | How It Is Deleted |
|---|---|---|
| AI conversation content (personal details filtered out before saving) | Automatically deleted 30 days after the session | Purged automatically on a daily schedule, and also removed when a parent requests deletion by email |
| Learning progress | Retained while the account is active | Deleted when a parent requests deletion by email |
| Parent account info | Retained while the account is active | Deleted when a parent requests deletion by email |
| Payment records | As required by tax and financial law | Retained by our payment processor for the required period, then deleted |
| Anonymous device identifier (a first-party functional cookie / local storage value; not used for advertising) | Up to one year in the browser | Cleared by the browser at expiry or when a visitor clears their site data; the account activity it keys to is removed when a parent requests deletion |
| Technical logs and error diagnostics | Held by our hosting and monitoring providers | Removed by those providers according to their standard retention windows |
Deletion requests: parents may request deletion of their child’s personal information at any time by emailing support@grammaropolis.com. We will act on a verified deletion request within 30 days and confirm completion to the parent. Deletion is handled by our team; there is not yet a one-click delete control in the account area.
6. Data Security
- All data is transmitted using TLS/SSL encryption
- Data is stored in the United States on servers operated by our infrastructure providers
- Access to personal information is restricted to authorized personnel on a need-to-know basis
- We conduct regular security reviews of our systems and service providers
If there is any unauthorized disclosure or access to personally identifiable information, Grammaropolis will promptly notify affected users and, where applicable, the relevant school(s), and will cooperate with any investigation of the incident.
7. How to Contact Us
If you have any questions about this Privacy Policy, wish to exercise your parental rights, or have concerns about your child’s privacy, please contact us:
- By Email: support@grammaropolis.com
- By Mail: Grammaropolis LLC, 1714 Banks St., Houston TX 77098
- By Phone: 281-241-1124
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes to how we collect, use, or share children’s personal information, we will notify parents by email and update the effective date at the top of this Policy. Continued use of the Service after changes are posted constitutes acceptance of the revised Policy.
This Privacy Policy works together with our Terms of Service. © 2026 Grammaropolis, LLC.