BookBright

COPPA Notice

Last updated: 2026-04-28. First-pass content; lawyer review pending.

Our commitment

BookBright is built for kids in grades 3-12, including children under 13. The Children’s Online Privacy Protection Act (COPPA) governs how we handle their data. We comply with COPPA at the design level, not as an afterthought.

What we collect from children under 13

For student profiles created by a parent under a parent account, we collect:

  • Display name (first name or nickname only; no last name)
  • Grade level
  • Optional avatar/mascot selection (no photos)
  • Study activity: which questions were attempted, results, streaks, mastery

We do not collect: email addresses, last names, phone numbers, addresses, photos, geolocation, voice recordings, or any persistent identifier that would let a child be tracked across services.

Parental consent and control

A parent or legal guardian creates the account, manages billing, and creates the student profile. The parent can at any time:

  • Review the data associated with each student profile
  • Edit or delete a student profile
  • Refuse the further collection of data by deleting the account
  • Receive a copy of the student’s data by email request

Account deletion removes student profile data within 30 days.

No third-party tracking

We do not use third-party advertising networks. We do not allow third parties to collect data from children using BookBright.

Service providers

We use Supabase (database), Stripe and RevenueCat (payments, parent-side only), Resend (transactional email, parent-side only), and Vercel (hosting). Each operates as a service provider on our behalf and does not use child data for any other purpose.

Teachers and student data

Teacher accounts are list-building only. Teachers cannot see who used a share code, cannot see individual student progress, and have no visibility into student profile data. This is intentional to keep school-side use COPPA-aligned without requiring district-level data agreements.

Questions and requests

Email mark.nygren1@gmail.com. We respond to parental requests within 30 days, usually within 1-2 business days.