Privacy policy

At Ziggyloo, LLC (“Ziggyloo,” “we,” “us,” or “our”), we believe that your child's data is as precious as your child. We are building a safe, adaptive space for neurodiverse learners, and that starts with trust. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.ziggyloo.com), use the Ziggyloo mobile application (the “App”), or interact with any Ziggyloo services.

1. Information we collect

A. Information you provide to us (parents)

To create an account and manage the Ziggyloo experience, we ask parents to provide:

• Contact information: Name, email address
• Account credentials: Username and password
• Payment information: Processed securely by our third-party payment provider (Stripe). We do not store full credit card numbers.
• Child profile settings: Nicknames, age, interests, and specific learning or emotional goals (e.g., “needs help with transitions”)

B. Information we collect from children

Ziggyloo is an educational tool. To function as an adaptive AI tutor, the App collects:

• Voice interactions: When a child speaks to Ziggyloo, audio data is processed to generate a response
• Learning & sentiment data: We analyze interactions to understand a child's learning progress and emotional sentiment (e.g., happy, frustrated, calm) to adapt the curriculum and storytelling
• Usage data: Which stories, games, or lessons are accessed

2. How we use your information

We use the information we collect for specific, limited purposes:

• To provide the service: Delivering personalized stories, tutoring, and educational conversations
• To improve Ziggyloo: Analyzing aggregated (anonymized) trends to improve our AI's ability to support neurodiverse learning styles
• To communicate with parents: Sending progress reports, resources, subscription updates, and customer support

3. How we share information (and how we don't)

We do not sell data. We strictly prohibit the selling, renting, or trading of any personal information — parent or child — to third parties.

No behavioral advertising to children. We do not allow third-party advertising networks to collect data from the child-facing areas of our App.

Service providers: We may share data with trusted third-party vendors who assist us in operating our service (e.g., cloud hosting, payment processing). These parties are contractually obligated to keep your information confidential and use it only for the services we request.

Legal requirements: We may disclose information if required to do so by law or in good-faith belief that such action is necessary to comply with state and federal regulations (such as COPPA).

4. Children's privacy (COPPA compliance)

Ziggyloo is committed to compliance with the Children's Online Privacy Protection Act (COPPA).

• Verifiable parental consent: We require a parent or guardian to create an account and consent to the collection of their child's information before the child can use Ziggyloo
• Right to review: Parents have the right to review the personal information collected from their child
• Right to revoke: Parents may revoke their consent and request the deletion of their child's account and data at any time by contacting us

5. Data security

We employ administrative, technical, and physical security measures to protect your personal information, including:

• Encryption: Data is encrypted in transit (TLS 1.3) and at rest
• Access controls: Strict limits on which employees can access user data
• Infrastructure: All data stored on encrypted servers within the United States (AWS)

While we have taken robust steps to secure your information, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against interception.

6. Your rights and choices

• Access and correction: You may log in to your parent dashboard to view and update your or your child's profile information
• Data deletion: You may request the full deletion of your account and all associated data by emailing us at support@ziggyloo.com. We will remove it within 30 days.
• Data export: You can request a copy of your child's data in a portable format
• Withdraw consent: You can withdraw consent for data collection at any time by deleting the child's profile

7. Third-party services

We use the following third-party services to operate Ziggyloo. Each has been evaluated for COPPA compliance and operates under data processing agreements that restrict how your data may be used:

• OpenAI — AI conversation processing. Operates under a data processing agreement that prohibits retention of user data for their own model training. Conversation data is processed in real time and not stored by OpenAI.
• AWS (Amazon Web Services) — Cloud infrastructure and encrypted data storage within the United States.
• Stripe — Payment processing for parent subscriptions only. Stripe is PCI DSS Level 1 certified. We do not store credit card numbers on our servers.

8. AI data processing and model training

To provide personalized learning experiences, your child's interactions with Ziggyloo are processed through AI systems. We want to be transparent about how this works:

• Real-time processing: Conversations are processed by our AI to generate appropriate educational responses. This processing happens in real time.
• No individual training: No individually identifiable child data is used to train AI models. We do not feed your child's conversations into model training datasets.
• Aggregated improvements: We may use anonymized, aggregated patterns from overall Service usage to improve our educational approaches and AI accuracy. This data cannot be traced back to any individual child.
• Third-party AI providers: Our AI partner (OpenAI) operates under strict data processing agreements. They do not retain, access, or use your child's data for their own purposes.

9. Data retention and deletion

We retain your data only for as long as necessary to provide the Service and comply with our legal obligations:

• Active accounts: Data is retained for the duration of your subscription.
• After cancellation: We retain account data for 30 days after cancellation to allow for reactivation, after which it is permanently deleted.
• Deletion requests: If you request full data deletion, we will remove all personally identifiable information within 30 days. Some anonymized, aggregated data may persist in our analytics systems.
• Legal requirements: We may retain certain data as required by law (e.g., billing records for tax purposes) even after account deletion.

10. Contact us

If you have questions or comments about this Privacy Policy, please contact us at:

Ziggyloo, LLC
1911 Grayson Hwy, Ste. 8-154
Grayson, Georgia 30017 USA
Email: support@ziggyloo.com