COPPA Compliance

Last updated: March 21, 2026

1. What is COPPA?

The Children's Online Privacy Protection Act (COPPA) is a U.S. federal law that protects the privacy of children under 13 years of age. It requires operators of websites and online services directed at children to obtain verifiable parental consent before collecting personal information from children.

2. How Eddy Complies with COPPA

2.1 Parental Consent

• Student accounts for children under 13 can only be created by a parent, guardian, or authorized teacher acting under the school's COPPA authority.
• Parents must provide consent before any personal information is collected from their child.
• Teachers acting as authorized school officials may provide consent on behalf of parents for educational use, as permitted under COPPA's school exception.

2.2 Limited Data Collection

• We collect only the minimum information necessary for the educational service: a display name, grade level, and learning progress data.
• We do not require children to provide personal information beyond what is needed to participate in the educational activities.
• Student data is stored locally on the device by default, not uploaded to external servers.

2.3 No Advertising or Third-Party Sharing

• Eddy does not display advertisements to any users, including children.
• We do not share children's personal information with third parties for commercial purposes.
• We do not use children's data for behavioral profiling or targeted content.

2.4 Parental Rights

Parents have the right to:

• Review all personal information collected from their child
• Review their child's AI conversation history
• Set content boundaries and safety levels for their child's account
• Request deletion of their child's personal information at any time
• Refuse further collection of their child's information (which may limit access to certain features)

2.5 Content Safety

• All AI-generated responses are filtered for age-appropriateness before reaching the child.
• Content moderation runs locally and does not require sending children's data to external services.
• Teachers and parents can review all AI interactions at any time.
• Safety settings can be customized per student by parents or teachers.

3. School Use (COPPA School Exception)

Under COPPA, schools may consent on behalf of parents for the collection of children's personal information when the information is used solely for educational purposes. When Eddy is deployed in a school setting:

• The school's administrator or authorized teacher provides consent on behalf of parents.
• Data collected is used exclusively for educational purposes within the school's Eddy environment.
• Schools may review and delete student data through the administrator dashboard.
• We do not use school-consented data for any purpose other than providing the educational service.

4. Data Security for Children

• Children's data is encrypted both at rest and in transit.
• Access to children's accounts requires authentication by a parent, teacher, or the child (with parent-set restrictions).
• We conduct regular security audits of our systems.
• In the event of a data breach affecting children's data, we will notify affected parents and the FTC within 72 hours.

5. Data Retention

Children's personal information is retained only as long as necessary to fulfill the educational purpose. When a student account is deleted by a parent, teacher, or administrator, all associated personal data is permanently removed within 30 days.

6. Contact Us

If you have questions about our COPPA compliance or wish to exercise your parental rights, please contact us:

Email: contact@cbullsoftware.click

Company: Charging Bull Software

We will respond to all COPPA-related inquiries within 5 business days.

← Back to Eddy