Xyplor

Privacy Policy

Last updated: May 12, 2026.

This is a placeholder privacy policy for our private beta. A formal version will be published before public launch. Questions? Email hello@xyplor.com.

What we collect

  • Account info (parent email via our auth provider, parent PIN hash, kid profile name, age, grade, avatar, optional kid PIN)
  • Kid activity on the platform — chats with Nova, creations, exploration progress, journal entries, assessment results, ideas extracted from chats
  • Build iteration prompts — when your kid edits a game or project by asking the AI to change it, we store the prompt text (truncated to the first 2,000 characters) along with what the AI changed, so we can debug failures, monitor costs, and improve the maker pipeline
  • Daily time-usage records (minutes used, minutes earned)
  • AI call metadata — tokens, cost, latency, feature — for cost monitoring
  • AI-generated content produced in response to your kid's prompts

What we don't do

  • We don't sell your data. Ever.
  • We don't run advertising.
  • We don't share kid data with third parties except the infrastructure providers below, each under their data-processing agreements.
  • We don't track kids across other sites.

Infrastructure providers

We use these services to run the app. They see only the data required to do their job and are contractually bound not to use it for other purposes.

  • Clerk — parent authentication (email, OAuth identity)
  • Neon — database hosting (all app data)
  • Vercel — application hosting and delivery
  • Anthropic — Claude API, which processes kid prompts and returns AI responses. Anthropic does not train on API data.

Your controls

  • Parents can review every AI conversation their kid has had, plus all creations and ideas, from the parent dashboard.
  • Parents can delete a kid profile from the parent dashboard. The profile is hidden immediately; all associated data (chats, creations, ideas, roadmap, activity) is permanently erased 30 days later by a nightly purge job.
  • Parents can rotate or revoke the family invite code at any time from Family Settings.
  • Parents can remove a co-parent from the family at any time (primary parent only).
  • Parents can export all family data or request full account deletion by emailing hello@xyplor.com.

Safety on shared devices

A 4-digit parent PIN gates the parent dashboard, separate from the auth login, so a kid using the family device can't wander into parent-only views. Each kid can also set their own 4-digit PIN to protect their profile.

COPPA

For users under 13, we require a parent to create the kid profile — kids do not create their own accounts. We collect the minimum needed to personalize the experience (name, age, grade, avatar), never share it with third parties for marketing, and give parents full visibility into and control over their kid's activity.

Contact

Questions, concerns, data export requests, or deletion requests: hello@xyplor.com

Xyplor LLC
3801 N Capital of TX Hwy, Ste E-240, PMB 1006
Austin, TX 78746
Phone: (512) 766-8724