Privacy Policy

1. Who is responsible

Kids Business Adventure Academy is an educational program created and operated by Crown Oak Learning LLC. Crown Oak Learning LLC is the operator responsible for the information described here.

Children have their own notice with more detail, coming soon. Until it is published, the sections below about children apply.

2. What we collect from a parent

Your name and email address, so we can create and secure your account and contact you. A password, stored only as a salted hash; we never see or store the password itself.

Whether you confirmed you are a parent or guardian aged 18 or over, which version of our policies you accepted, and when. Whether you chose to receive marketing email.

Payment identifiers returned by our payment processor, such as a customer and subscription reference, the status of your membership, and the card brand and last four digits when the processor returns them. Card numbers never reach us.

Support messages you send us. Security and rate-limiting records, including a network fingerprint used to stop brute-force attacks.

3. What we collect about a child

A first name or nickname that you choose; it does not have to be their real name. An age range, not a date of birth. An avatar you pick from a preset list.

Course progress: missions completed, XP, badges, and how much of a lesson was watched. Their written mission answers and business plan notes. If you allow Community participation: posts, comments, reactions, and any project images they share.

We never ask a child for a last name, a date of birth, an email address, a phone number, a home address, a school, a precise location, a social media handle, or a photograph of themselves.

4. What we never do

We do not sell personal information. We do not use it for targeted advertising. We do not allow advertising networks to track your family on this site. There are no Meta or TikTok pixels, no retargeting, no fingerprinting for advertising, and no session replay.

5. Why we use it

To run your account and keep it secure. To deliver the course and save progress. To take payment and manage your membership. To send you transactional email such as verification, receipts, and cancellation confirmation.

To keep the Community Hall safe, including automated screening and moderation. To meet legal, tax, and dispute obligations. To send marketing email, only if you chose it, and only until you unsubscribe.

6. Who receives it

We use service providers who process information on our instructions. Our hosting, database and file storage provider stores everything the service holds. Our payment processor receives your name, email, and payment details; card details go directly to the processor and never reach us, and the processor does not receive your child's information. Our email provider receives your email address to deliver messages to you; we never send email to a child. A video provider serves lesson video.

Saying that we do not sell your information does not mean nobody else ever touches it. The providers above necessarily process it to make the service work. That is an operational disclosure, not a sale and not targeted advertising.

Inside the Community Hall, what your child posts is visible to other signed-in academy families. Those families are other people, not our staff.

We may also disclose information if the law requires it, or to protect a child from harm.

7. How long we keep it

We keep information only as long as there is a reason to, and you can ask us to delete yours at any time. Our retention schedule sets these limits: unverified accounts, 30 days; inactive free accounts, two years so a family can return; an active membership, for as long as it is active; a cancelled account, 180 days so you can come back.

When you delete a child profile we begin erasing it straight away and aim to finish within 30 days. Community reports, one year. Records of consent and acceptance, and billing and tax records, seven years, as evidence of what was agreed and to meet tax and dispute obligations. Security logs, one year. Backups, 35 days.

8. Your rights

You can ask us to show you what we hold, correct it, give you a copy, delete it, stop further collection, or withdraw permission for your child. Email us at crownoaklearning@gmail.com from the address on your account. You can also edit child profiles and cancel membership yourself from your parent account.

We will ask you to confirm it is really you before acting, and we will respond within the time the law allows, usually 30 days. We will not charge you, and we will not make the process harder than signing up.

Deleting your account does not delete records we must keep, such as evidence of consent and billing records. We will tell you what was kept and why.

9. Security

Passwords are stored only as salted hashes and are never recoverable. Sessions expire. Access to family data is restricted and enforced on the server for every request, not in the browser. Uploaded images are checked, stored privately, and served only to authorized families. Administrator access is limited to named accounts.

No service can promise perfect security, and we do not.

10. Changes and contact

We will tell you before a material change takes effect, and where the law requires it we will ask for your permission again rather than assuming it.

Crown Oak Learning LLC. Email: crownoaklearning@gmail.com.