Xyplor

Privacy Policy

Last updated: October 9, 2026.

This is a placeholder privacy policy for our private beta. A formal version will be published before public launch. Questions? Email hello@xyplor.com.

What we collect

  • Account info (parent email via our auth provider, parent PIN hash, kid profile name, age, grade, avatar, optional kid PIN, and an optional kid email if the kid signs in with an emailed link)
  • Kid activity on the platform — chats with Nova, creations, exploration progress, journal entries, assessment results, ideas extracted from chats
  • Build iteration prompts — when your kid edits a game or project by asking the AI to change it, we store the prompt text (truncated to the first 2,000 characters) along with what the AI changed, so we can debug failures, monitor costs, and improve the maker pipeline
  • Daily time-usage records (minutes used, minutes earned)
  • AI call metadata — tokens, cost, latency, feature — for cost monitoring
  • AI-generated content produced in response to your kid's prompts

What we don't do

  • We don't sell your data. Ever.
  • We don't show ads inside the app, and we never use kid data for advertising.
  • We don't share kid data with third parties except the service providers listed below, and only for the job each one does for us.
  • We don't track kids across other sites. The advertising measurement tag described below is never loaded on kid pages.

Service providers

We use these services to run Xyplor. Each one sees only the data it needs for its job, and we don't let them use it for anything else.

Running the app

  • Clerk: parent sign-in (email, sign-in identity)
  • Neon: database hosting (all app data)
  • Vercel: application hosting and delivery, plus file storage for uploads and generated audio
  • Upstash: rate limiting (an account ID, email or IP address plus a request count, kept for minutes to hours)

AI

  • Anthropic: the Claude API processes kid prompts and returns AI responses. Anthropic does not train on API data.
  • OpenAI: text-to-speech. When a kid's creation reads text aloud, that text is sent to OpenAI to make the audio. OpenAI does not train on API data.

Email, payments and reliability

  • Resend: sends our emails (the recipient's email address and the email content). Most emails go to parents, such as weekly summaries and approval requests. Kids who sign in by email also get their sign-in links through Resend.
  • Stripe: processes payments (parent name, email and payment details). We never see or store full card numbers.
  • Sentry: error monitoring. When something breaks, it receives technical details about the error. It is set up not to collect personal information.

Analytics and advertising measurement

  • PostHog: product analytics (which pages and features get used). Accounts are identified by a random ID, never a name or email, and we remove kid profile IDs from page addresses before they're sent. Session recording is turned off.
  • OpenAI Ads: measures whether our ads on ChatGPT lead to sign-ups and purchases. A measurement tag runs only on our public marketing pages, the parent sign-up page and the parent checkout confirmation pages, never on kid pages. When a parent signs up or buys, we send OpenAI the event and a one-way hashed (SHA-256) copy of the parent's email and account ID. Kid data is never sent.

Your controls

  • Parents can review every AI conversation their kid has had, plus all creations and ideas, from the parent dashboard.
  • Parents can delete a kid profile from the parent dashboard. The profile is hidden immediately; all associated data (chats, creations, ideas, roadmap, activity) is permanently erased 30 days later by a nightly purge job.
  • Parents can rotate or revoke the family invite code at any time from Family Settings.
  • Parents can remove a co-parent from the family at any time (primary parent only).
  • Parents can download all family data as a file, and the primary parent can delete the whole family account, from Family Settings (both behind the parent PIN). Deletion hides every kid profile immediately, stops any subscription from renewing, and permanently erases all family data and sign-in accounts 30 days later (payment records stay with Stripe, as tax and accounting rules require); it can be cancelled until then. You can also email hello@xyplor.com for either.

Safety on shared devices

A 4-digit parent PIN gates the parent dashboard, separate from the auth login, so a kid using the family device can't wander into parent-only views. Each kid can also set their own 4-digit PIN to protect their profile.

COPPA

For users under 13, we require a parent to create the kid profile — kids do not create their own accounts. We collect the minimum needed to personalize the experience (name, age, grade, avatar), never share it with third parties for marketing or advertising, and give parents full visibility into and control over their kid's activity.

Contact

Questions, concerns, data export requests, or deletion requests: hello@xyplor.com

Xyplor LLC
3801 N Capital of TX Hwy, Ste E-240, PMB 1006
Austin, TX 78746
Phone: (512) 766-8724