Last updated: February 23, 2026
At Codi Codi, we take your privacy seriously — especially when it comes to our youngest users. This Privacy Policy explains how we collect, use, and protect personal information when you or your child uses our platform. By using Codi Codi, you agree to the practices described in this policy.
We collect the following types of information: • Account Information: When a parent or guardian creates an account, we collect a name, email address, and password. Child accounts are created by parents and require only a username and password — no personal email is required for children. • Usage Data: We collect data about how the platform is used, such as challenges completed, XP earned, levels reached, and time spent on activities. This helps us improve the learning experience. • Device Information: We may collect basic device information (browser type, operating system, screen size) to optimize the experience across devices. • Cookies: We use essential cookies to keep you logged in and remember your preferences. See our Cookies section for more details.
We use the information we collect to: • Provide and maintain the Codi Codi platform and its features. • Personalize the learning experience for each child (difficulty levels, recommended challenges). • Track progress and achievements within the platform. • Communicate important updates about the service to parents and guardians. • Improve our platform through aggregated, anonymized usage analytics. • Ensure the safety and security of all users. We will never use children's data for advertising or sell personal information to third parties.
Codi Codi is designed for children ages 6-16, and we are committed to complying with the Children's Online Privacy Protection Act (COPPA) and similar international regulations. • Parental Consent: A parent or guardian must create and manage child accounts. We do not knowingly collect personal information from children without parental consent. • Limited Data Collection: We collect only the minimum data necessary to provide the service. Child accounts use usernames — not real names or email addresses. • No Behavioral Advertising: We never serve targeted advertising to children or use their data for marketing purposes. • Parental Access: Parents can review, modify, or delete their child's information at any time through their parent dashboard.
We implement industry-standard security measures to protect your data: • All data is transmitted over encrypted connections (HTTPS/TLS). • Passwords are securely hashed and never stored in plain text. • Access to personal data is restricted to authorized personnel only. • We conduct regular security reviews and updates. • Data is stored on secure, reputable cloud infrastructure. While no system is 100% secure, we are committed to protecting your information using best practices and promptly addressing any security concerns.
Codi Codi uses cookies and local storage for essential platform functionality: • Authentication Cookies: To keep you securely logged in during your session. • Preference Cookies: To remember your language, theme, and accessibility settings. • Progress Data: To save game progress and resume where you left off. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies that track individual users. You can manage cookie preferences through your browser settings.
We may use trusted third-party services to help operate our platform: • Cloud Hosting: To securely store and serve the application. • Authentication Providers: To enable secure login functionality. • Analytics (Anonymized): To understand general usage patterns and improve the platform. All third-party providers are vetted for their privacy and security practices. We do not share personally identifiable information of children with third parties except as necessary to provide the service, and never for advertising purposes.
We retain your data only for as long as necessary to provide our services: • Active Accounts: Data is retained while the account is active. • Inactive Accounts: Accounts inactive for 24 months may be flagged for deletion, with prior notice sent to the parent's email. • Account Deletion: When an account is deleted, all associated personal data is permanently removed within 30 days. Anonymized, aggregated data may be retained for analytics. • Backup Data: Encrypted backups are purged on a rolling schedule.
As a parent or guardian, you have the right to: • Access: View all personal information we hold about your child. • Correction: Update or correct any inaccurate information. • Deletion: Request complete deletion of your child's account and data. • Restriction: Limit how your child's data is used. • Portability: Request a copy of your child's data in a portable format. • Consent Withdrawal: Withdraw consent for data collection at any time, which may result in account deactivation. To exercise any of these rights, please contact us at [email protected] or use the controls available in your parent dashboard.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes: • We will notify parents via email before changes take effect. • We will update the "Last Updated" date at the top of this page. • Continued use of the platform after changes constitutes acceptance of the updated policy. • For material changes affecting children's data, we will seek renewed parental consent where required.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: • Email: [email protected] • Subject: Privacy Inquiry We aim to respond to all privacy-related inquiries within 48 hours.