CPCleverPupil
Your data, your kid, your keys

Privacy, plainly stated.

CleverPupil is built for kids — and that means we treat data like parents would. Local AI. No advertising trackers. Parent custody on every payout. Here’s the full picture.

Last updated · April 2026

Data we collect

We collect your name, email, age group, learning progress, and chat messages with the AI tutor. Payment data is processed by BTCPay Server (for crypto) and Coinbase (for cards via their hosted checkout) — we never see or store card numbers.

  • Account info: name, email, role (parent / kid / teacher).
  • Kid profile: age band, language, subject preferences.
  • Learning data: lessons completed, milestones earned, streak length, chat transcripts with the tutor.
  • Payment metadata: invoice IDs, Lightning payment hashes, on-chain transaction IDs. No card numbers.

How we use your data

Your data powers personalized tutoring, lesson tracking, and subscription management. AI conversations are processed locally on our self-hosted servers — no prompts or responses are sent to OpenAI, Anthropic, Google, or any third-party cloud AI service.

We do not sell your data, share it with advertisers, or use it to train external models. Period.

Where your data lives

All application data is stored on our self-hosted Postgres database on hardware we own and operate. AI inference (text, image, voice, music) runs locally on Apple Silicon hardware with Metal GPU acceleration. No third-party cloud databases. No shared tenancy.

Your rights (GDPR & CCPA)

You have the right to:

  • Access the data we hold on you and your child.
  • Export your data in a portable format.
  • Correct inaccurate information.
  • Delete your account and erase your data.
  • Withdraw consent at any time.

Use the Settings page to exercise any of these rights, or email us at [email protected].

Cookies & tracking

We use a single essential cookie — your authentication session. That’s it. No analytics trackers. No advertising pixels. No fingerprinting. If you log out, the cookie is deleted.

Children & parental consent

CleverPupil is built for kids ages 2–17. Parental consent is required for every child account, including those over 13. Parents create the account, approve the kid profile, and hold the keys to any Bitcoin savings vault their child earns.

We do not knowingly collect data from children without parental consent. We are aligned with the U.S. Children’s Online Privacy Protection Act (COPPA) and applicable EU child-data rules.

Payments & custody

Subscription payments flow through BTCPay Server (Bitcoin) or Coinbase’s hosted checkout (cards converted to BTC). Savings boost amounts are held in a CleverPupil-operated escrow vault, ledgered per kid, and Lightning-released to the parent-controlled wallet on milestone approval.

We never hold custody of your child’s funds. The Lightning address that receives payouts is yours. Editing it requires admin approval — friction by design.

Data retention

We retain account and learning data for as long as your account is active. After deletion, data is erased from production within 30 days and from rolling backups within 90 days. Payment records may be kept longer where required by law (typically 7 years for tax compliance).

Changes to this policy

When this policy changes materially, we’ll email account holders at least 14 days before the change takes effect. The “Last updated” date at the top of this page always reflects the current version.

Questions about your data?

We answer privacy questions personally — no support-bot runaround.

[email protected]