What Tiny Coderz collects, why, and who it's shared with - in plain language.
From the parent who signs up: an email address and password, used only to secure the account and send verification/account emails.
About each child profile: a first name, age, and the interest they pick (e.g. dinosaurs, space) - used to personalize lesson tone, hints, and project themes. A child never signs up on their own; a profile only exists because the parent account created it.
What the child does in lessons: the code they write and run, the output it produces, which concepts they've mastered, hints shown to them, and messages exchanged with their AI buddy or in "teach-back" mode. This is what powers the personalized hints, the Bug Detective ranks, and the parent dashboard.
Anthropic (Claude API): a child's submitted code, their questions to their AI buddy, and their teach-back explanations are sent to Anthropic's Claude API to generate hints, replies, and follow-up questions. Anthropic does not receive the parent's account email or password.
Code execution: submitted code is run in an isolated sandbox to produce the step-by-step trace a lesson animates. In production this sandbox is the public Piston code-execution service - the code itself is sent there to run, nothing else about the child's profile is.
We do not sell data, and we do not run advertising on this app.
When enabled for this deployment, we use Google Analytics to see aggregate traffic patterns on the public marketing pages - which pages get visited, roughly how many people sign up. This tracks page views on the app as a whole; it is not tied to a specific child's lesson activity, code, or messages, which never leave our own servers and Anthropic's Claude API as described above.
Account and profile data lives in our database. Sign-in works with a token stored in your browser's local storage (not a tracking cookie) - it identifies your logged-in session and nothing else.
A parent can edit their child's age at any time from the parent dashboard, and can remove a child's profile entirely - which deletes that profile's progress, buddy customization, and chat history for good. There's no separate "request my data be deleted" process to go through; the control is already in the dashboard.