Privacy Policy
Effective date: 30 October 2026 · Version: 1.0
This Privacy Policy explains how Sanvri LLC, doing business as GiftedCub ("we," "us"), collects, uses, shares and protects information when parents and children use giftedcub.com (the "Service").
The short version
- Parents hold the account. Children never sign up, and never give us their name, email, photo, school or voice.
- A child is a nickname, a grade and a cartoon avatar. While they practise, we record their answers and progress so we can pick the next question and show you reports.
- We never sell information, never show ads, and never send children's information to AI tools. Kid screens have no trackers of any kind.
- On parent and public pages only, we use Google Analytics to count visits. It does not store your IP address, and its advertising features are off.
- The companies we use (hosting, payments, email, Google sign-in, Google Analytics) handle data only to run GiftedCub for us.
- You are in control. Download or delete your child's data, or your whole account, at any time from your account page. Deleting really deletes: within 30 days, including backups.
- Questions: hello@giftedcub.com or +1 (980) 229-8093.
1. Who we are
- Operator: Sanvri LLC, doing business as GiftedCub
- Address: 7015 Walnut Branch Lane, Charlotte, NC 28277, USA
- Email: hello@giftedcub.com
- Phone: +1 (980) 229-8093
We are the only operator that collects and keeps children's personal information through the Service. The service providers in Section 5 handle it only on our behalf.
2. Information we collect from parents
In plain words: your email address, how you sign in, what you bought, and what you tell us. We never see your full card number.
| Information | Why we collect it |
|---|---|
| Email address | Your account, sign-in links, receipts, service emails and parental consent |
| How you sign in: an emailed sign-in link, or Google sign-in (we receive your Google account ID and email). There are no passwords. | Let you sign in securely |
| Billing details, handled by Stripe. We receive only the plan, amount, dates and payment status; Stripe holds your card. | Payments, renewals, refunds and tax |
| Child profile details you enter: nickname, grade, avatar, the test you are preparing for, and optionally your school district and test date | Choose the right practice and show the matching district information |
| Messages you send us (contact form, emails, problem reports on a question, requests for free access) | Answer you and fix problems |
| Your email settings (weekly progress email, tips and offers) | Send only the emails you want |
| How you found us (for example, a referral code or the site that sent you) | Referral credits and knowing which pages help parents |
| Device and usage data on parent and public pages (browser type, pages viewed, approximate location, the site that sent you) | Security, fixing problems and understanding which pages help parents (see Section 7) |
3. Information we collect from children
In plain words: only what a child does while practising. Children cannot type their name or anything about themselves, and we never record their voice.
Children use the Service only inside a profile their parent created. Our child screens have no free-text boxes: children cannot enter their real name, email, phone number, address, school, photos, video or voice.
When a child practises, we collect:
- Practice Data: which questions were shown, the answers chosen, time taken, hints used, progress and streaks;
- Technical data needed to run the activity: a session identifier and device/browser type, used only to keep the child in their profile, save progress, keep the Service secure and fix errors.
These identifiers are used only to support the internal operations of the Service. They are never used to contact a child, to follow a child across other sites, or for advertising.
Audio in the Service (questions read aloud) is recorded by us in advance. We never record a child's voice.
4. How we use information
In plain words: to run GiftedCub, bill you, answer you and keep things safe. Never for advertising to children, and never to train AI.
We use information to:
- provide the Service: run practice, adapt difficulty, and show progress reports to the parent;
- manage accounts, payments, refunds and renewals;
- answer support requests;
- keep the Service safe and secure, prevent fraud and abuse, and fix problems;
- improve the Service, including using de-identified, combined Practice Data to measure how hard each question is. De-identified data cannot reasonably be linked to a parent or child;
- send parents service emails and, if they have not opted out, occasional tips and offers (never to children);
- comply with the law and enforce our Terms.
We do not use children's information for advertising or marketing, or to build profiles for any other purpose. All our questions are written in advance. Children's information is never sent to an AI provider and is never used to train AI models.
5. Who we share information with
In plain words: only the companies that run GiftedCub for us, and only for that. Nobody buys or receives your data for their own use.
We do not sell personal information, and we do not share it for targeted advertising.
| Who | What they do for us | What they receive |
|---|---|---|
| Railway | Hosts the website and database | All Service data, stored for us |
| Stripe | Payments | Your email, plan and card details (you enter your card directly with Stripe) |
| Brevo | Sends our emails | Your email address and the email content |
| Google sign-in | Signs you in, only if you choose it | Your Google account details, under Google's own terms |
| Google Analytics | Counts visits to parent and public pages, never kid screens | Pages viewed, browser and approximate location, without your IP address being stored |
| Cloudflare | Runs our domain name (DNS) and stores our backups | Technical connection data, and backup files encrypted with a key only we hold |
| Zoho Mail | Our inbox, hello@giftedcub.com | Emails you send us |
| Our contractors, bound by confidentiality, who may work outside the United States (for example, in Canada) | Support and operations | What they need for the task |
| Legal and safety recipients, when required by law or court order, or to protect the safety of users or the public | Legal compliance | What the law requires |
| A successor, if our business is merged, reorganized or sold. They must keep this Policy's promises for data collected under it | Business continuity | The Service data |
Children's personal information goes only to the providers and contractors above, and only as needed to run the Service. We do not give it to anyone for their own purposes. If that ever changed, we would first ask for the parent's separate, verifiable consent.
6. Parental consent and your rights (COPPA)
In plain words: a child can't practise until you say yes. You can see, download or delete your child's data, or withdraw your consent, at any time.
6.1 How you give consent. Before a child can use the Service, the parent signs in and adds the child's profile. On that form we show this notice and ask for the parent's consent. Because you signed in with a link we emailed you, or with a verified Google account, we know the email address is yours. We then email you a confirmation with a link to withdraw consent. This is the "email plus" method allowed by the FTC's COPPA Rule (16 CFR 312.5) when, as here, children's information is never disclosed to third parties for their own use. Kid mode stays locked until consent is confirmed.
6.2 Your rights. At any time, a parent can:
- see and download the information we hold about their child: open the child's page and choose Download data;
- delete a child's profile and all its Practice Data: open the child's page and choose Delete profile;
- download or delete everything about the family: Settings → Download all data or Delete my account;
- stop further collection by withdrawing consent (the link in the confirmation email) or deleting the profile.
You can also email hello@giftedcub.com from your account email address. We check that the request really comes from the parent before acting. We never ask a child for more information than an activity needs.
7. Cookies and analytics
In plain words: kid screens use only what is needed to work. Parent pages also use Google Analytics, with advertising turned off.
- Kid screens: only the essential cookie and storage that keep the child in their profile and save progress. No analytics, advertising or social-media trackers. Our security settings block any outside script on these screens.
- Parent and public pages: essential cookies; a first-party referral cookie (kept for 60 days) when you arrive through a referral link; our own anonymous visit counter; and Google Analytics 4. Google Analytics does not log or store IP addresses, and we keep Google signals and advertising personalization switched off. We use no advertising cookies or retargeting pixels.
- You can block cookies in your browser. You need the essential cookies to stay signed in. To opt out of Google Analytics on every site, you can use Google's browser add-on at tools.google.com/dlpage/gaoptout.
8. How long we keep information
In plain words: only as long as needed. Delete your account and it is gone within 30 days; if nobody signs in for two years, we warn you and then delete it.
| Data | Why | How long |
|---|---|---|
| Child profile and Practice Data | Practice and progress reports | Until the parent deletes the profile or the account. Accounts with no sign-in for 24 months get a warning email, then are deleted 30 days later |
| Child profiles never confirmed by a parent | None, as practice was never allowed | Deleted after 14 days |
| Parent account data | Account and support | Until the account is deleted |
| Billing and tax records | Tax and accounting law | As the law requires (generally up to 7 years). They contain no children's information |
| Support messages | Support history | 24 months |
| Security logs | Security and fraud prevention | Up to 90 days |
| Encrypted backups | Disaster recovery | Replaced within 35 days |
| De-identified, combined statistics | Measuring question difficulty | May be kept, as they are not personal information |
When you delete something, we remove it from the live system straight away and it ages out of our encrypted backups within 35 days. We do not keep children's personal information indefinitely.
9. Security
In plain words: encrypted connections, very few people with access, two-step sign-in on every admin account, and a written security plan.
We keep a written information security program suited to the sensitivity of the data. It includes encryption in transit (HTTPS), encrypted backups, access limited to people who need it, two-step verification on administrative accounts, a named person responsible for security, and a risk assessment at least once a year. No system is perfectly secure. If a security incident affects your personal information, we will tell you as the law requires.
10. Your choices and rights (everyone)
In plain words: wherever you live, you can ask us to show, correct, send or delete your data.
Wherever you live, you can ask to access, correct, download or delete your personal information, and you can unsubscribe from marketing emails using the link in any email. Email hello@giftedcub.com. We will reply within the time the law requires, and always within 45 days. We will never treat you differently for using these rights. Some U.S. states give their residents extra rights, and we honor them where they apply.
11. Where data is stored
We are based in the United States, and our service providers store data mainly in the United States. Some contractors and providers may access it from other countries (for example, Canada) with appropriate safeguards.
12. Changes to this Policy
We will post updates here and change the effective date. For important changes, and always before using children's information in a new way, we will email parents first and, where COPPA requires it, ask for consent again.
13. Contact
Questions or requests: hello@giftedcub.com · +1 (980) 229-8093 · Sanvri LLC, 7015 Walnut Branch Lane, Charlotte, NC 28277, USA.