Privacy Policy

1. Operator and contact information

AG Academy is operated by Camp AG, a nonprofit organization. Questions about privacy, parent authorization, support, correction, revocation, or deletion may be sent to:

2. Parent account information

Camp AG may collect and maintain the following information about the parent-managed account:

• the parent's email address and Firebase account identifier;
• email-verification and account-security information;
• the Camp AG invitation or campaign used to enter the beta;
• parent-authorization status, method, notice and policy versions, and related timestamps;
• authorization-email delivery and processing information; and
• information a parent provides in a support, correction, revocation, or deletion request.

3. Child profile and learning information

After parent authorization is active, the parent may create one parent-managed child profile. AG Academy may collect:

• a nickname or first name;
• an internal child-profile identifier;
• an optional choice from fixed avatar options;
• lesson completion and quiz results;
• completion timestamps and learning progress; and
• XP, streaks, or badges when those features are available.

Child profiles are not public. AG Academy does not ask for a child's email address, full legal name, exact birthdate, home address, telephone number, uploaded photograph, voice recording, precise location, public profile, or open-ended biography.

4. Technical and security information

Firebase, hosting, network, and security systems may process IP addresses, browser or device details, timestamps, authentication records, request logs, browser identifiers, and security diagnostics. This information is used to operate the service, keep accounts signed in, prevent abuse, diagnose problems, and protect AG Academy and its users.

5. How information is used

Camp AG uses information to:

• create and authenticate parent-managed accounts;
• verify invitations and manage the family beta;
• provide and personalize lessons and learning progress;
• save completed lessons, scores, XP, streaks, and badges;
• provide parent authorization and confirmation messages;
• respond to support, correction, revocation, and deletion requests;
• maintain security and prevent misuse; and
• comply with applicable legal obligations.

6. Parent authorization

A verified email address alone does not authorize collection from a child. The parent must review the parent notice and Privacy Policy and use a separate explicit affirmative authorization control in the authenticated website.

After the parent's affirmative response, AG Academy sends a confirmatory notice following a delay. The child profile remains unavailable until the authorization and confirmation process is complete.

7. Service providers and disclosure

Camp AG uses service providers to operate AG Academy. These may include Google Firebase services for authentication, databases, file storage, hosting, server functions, and security, and Brevo for delivery of onboarding and confirmatory parent notices.

Service providers may process information only as needed to provide their services, secure the system, and comply with applicable law. Camp AG may also disclose information when reasonably necessary to comply with legal process or protect the rights, safety, and security of Camp AG, AG Academy, families, or others.

AG Academy does not sell child personal information, display behavioral advertising, make child profiles public, or use embedded YouTube players or third-party analytics in the family beta.

8. Parent choices and controls

A verified parent may use Parent Controls or contact Camp AG to:

• review or correct the child profile;
• review the parent-authorization status;
• withdraw authorization and stop further child use;
• delete the child profile and associated learning progress; or
• delete the parent account and associated family data.

Camp AG may require password reauthentication or other reasonable verification before completing a sensitive request. Some requests during the family beta may be completed manually after account ownership is verified.

9. Retention and deletion

Parent account information, the child profile, and learning progress are generally kept while the associated account remains active and while the information is needed to provide AG Academy.

A valid withdrawal or deletion request blocks further child access. Camp AG aims to complete deletion from active AG Academy systems within 30 calendar days after verifying the request.

Camp AG may retain a limited authorization and withdrawal record for up to three years to document parent choices, protect the service, and address legal or security needs. Support and delivery-processing information is kept only as long as reasonably needed for those purposes. Limited provider logs or backups may remain temporarily under provider security and backup procedures.

Expired authorization links cannot be used to activate authorization. Camp AG does not retain raw authorization links or tokens as part of the long-term authorization record.

10. Data security

Camp AG uses access controls, authentication, restricted database rules, expiring authorization links, and other safeguards intended to protect family information. No online service can guarantee absolute security.

11. Changes to this policy

Camp AG may update this Privacy Policy as AG Academy changes. The effective date and version will be updated when the policy changes. Parents will receive additional notice and a new authorization request when a material change requires renewed parent authorization.

12. Contact

Contact academicgamesacademy@gmail.com with privacy questions or requests involving a parent account or child profile.