Privacy Policy
- We collect only what we need to run learning games and lessons and to show families and educators how children are doing.
- We never sell personal information, never show ads, and never use children's information for advertising or profiling.
- Children don't give us an email address, and a child's profile is created by a parent, or by a teacher or center with the parent's permission.
- Parents can review or delete their child's information at any time. Our Children's Privacy Notice explains how.
1. Who we are
Offszn Education (the "Service") is operated by Offszn Tech LLC ("Offszn," "we," "us"). This policy explains what information we collect through the Service, how we use and share it, and the choices you have. It is part of our Terms of Service.
2. Information we collect
2.1 From adult account holders
| Account | What we collect |
|---|---|
| Parents and guardians | First and last name, email address, password (stored only as a one-way hash), language preference, notification preferences, and subscription status. |
| Teachers | First and last name, email address, password hash, classrooms you create, and the assignments you make. |
| Child care centers and staff | Center name, the operator's and staff members' names and email addresses, password hashes, and optionally the center's phone number and address. We also store the billing interval and subscription status. |
Consent records. Each time you accept our Terms of Service and Privacy Policy, or give or confirm parental consent for a child, we save a record of it: the date and time, the document version, where it happened (for example, sign-up), your IP address, and your browser type. This is our proof that consent was given. You can see your own records in Settings → Legal & privacy.
Online consent forms for child care centers. When a parent signs a center's online consent form, we collect the child's first and last name and grade, the parent's name and relationship to the child, an optional email or phone number, the typed signature, and the same date, version, IP address, and browser details. These are shared only with that center.
Payment information (card number, expiration date, billing address) is entered directly with our payment processor, Stripe, and is never stored by us. We keep only Stripe's customer and subscription reference IDs.
2.2 About children
What we collect about children, and why, is set out in detail in the Children's Privacy Notice below.
2.3 Collected automatically
- Usage and learning activity: which games and lessons are played, answers, scores, time spent, and progress.
- Device and log data: IP address, browser type, the pages requested, and timestamps, recorded in our server logs for security and troubleshooting.
- Cookies: described in Section 5.
We do not use third-party advertising, ad networks, or third-party analytics trackers, and we do not collect precise location, photos, voice recordings, or contacts.
3. How we use information
- To provide the Service: running games and lessons, saving progress, adjusting difficulty, and showing progress to the child's parent, teacher, or center.
- To send account-holder emails: welcome and account emails, and, if enabled in Settings, progress updates about your child, such as lessons completed, achievements, streaks, and weekly summaries. These emails include the child's first name and activity. Parents can turn them off in Settings at any time.
- To process payments and manage subscriptions.
- To keep the Service secure, prevent abuse, fix bugs, and understand which features work so we can improve them. This includes internal A/B tests of features.
- To comply with the law and enforce our Terms.
We do not sell or rent personal information, use it for targeted or behavioral advertising, or build marketing profiles of children.
6. Children's Privacy Notice (COPPA)
The Service is directed to children, so we follow the U.S. Children's Online Privacy Protection Act and the FTC's COPPA Rule (16 C.F.R. Part 312). This notice describes our practices for information we collect from and about children under 13. We apply the same protections to every child profile, whatever the child's age.
6.1 Operator contact
Offszn Tech LLC
2300 185th Place, Lansing, IL 60438
Phone: 708-663-5900
Email: offszntech@gmail.com
We are the only operator collecting or maintaining children's personal information through the Service.
6.2 What we collect from or about children
| Information | Provided by | Why |
|---|---|---|
| First name | Parent, teacher, or center | To greet the child and label progress |
| Last name | Copied from the parent's account, or entered by the center | To tell apart children with the same first name |
| Grade level | Parent, teacher, or center | To show grade-appropriate content |
| Birth year (optional) | Parent | Age-appropriate content |
| Avatar (picked from a preset list) | Parent, center, or child | Personalization. No photos are ever used. |
| Username and password (optional) | Parent, who may choose them with the child | So the child can sign in. Passwords are stored only as a hash. |
| Kiosk PIN (center children) | Center staff | So the child can sign in on a shared device. Stored only as a hash. |
| Learning activity: answers, scores, time spent, skills, lessons, quizzes, achievements, coins, streaks, and which questions the child has seen | Collected as the child plays | To save progress, avoid repeating questions, and adjust difficulty |
| Drawings and their titles (art activities) | The child | Saved to the child's private gallery. The child can delete them, and we keep at most 50. |
| Code typed in coding games | The child | To check the child's answer |
| Persistent identifiers: an internal account ID and the session and test cookies in Section 5 | Collected automatically | Only to support the internal operations of the Service, such as keeping the child signed in, security, and fixing errors. Never for advertising. |
We do not collect a child's email address, phone number, home address, photos, video, voice recordings, precise location, or any free-text messages to other people. The Service has no chat or social features. Because the system requires an email on every account, it generates a non-working placeholder address for each child, which nobody can send mail to.
We do not require a child to give more information than is reasonably necessary to take part in an activity.
6.3 How we use children's information
Only to provide the learning Service to the child, show progress to the child's parent, teacher, or center, send the parent progress emails (which can be turned off), and keep the Service secure and working. We never use children's information for advertising, marketing, or profiling, and never sell it.
6.4 How we disclose children's information
We do not disclose children's personal information to third parties for their own purposes. We use the service providers in Section 4.1 only to support the internal operations of the Service, and none of them may use children's information for any other purpose. Stripe never receives children's information. Inside the Service, a child's information is visible only as described in Section 4.2. We disclose children's information only as required by law or to protect a child's safety.
6.5 Parental consent
- Parent-created profiles: only a signed-in parent or guardian can add a child. Before the profile is created, the parent must confirm they are the child's parent or guardian and consent to the practices in this notice. We then email a direct notice of our practices to the parent's account email so the parent has a record and can contact us or delete the profile at any time.
- Teacher- and center-created profiles: a teacher or child care center may add a child only after getting the parent's or guardian's written consent, and must confirm this each time they add a child. Our Terms require them to keep that consent and remove the child if the parent withdraws it. We give centers and teachers a parent consent form to use.
If we learn that we have collected a child's information without the required consent, we will delete it promptly.
6.6 Parents' rights
A parent or guardian may at any time:
- Review their child's information: progress, activity, and reports are shown on the parent dashboard, and parents can download PDF progress reports. You can also email us for a copy.
- Delete their child's information: open the child's Settings page and choose Delete this child's account and data, or email us. Deletion removes the child's profile, progress, drawings, and activity history.
- Refuse further collection by deleting the profile, or by asking us to stop. We cannot provide the Service to a child without the information described above.
For children added by a center or teacher, parents may contact the center or teacher or contact us directly. We verify that a request comes from the child's parent before acting on it, and we respond within 30 days.
7. Data retention and deletion
Our written data retention policy:
- Children's information is kept only while the child's profile is active, for the purpose of providing the Service. When a parent deletes a profile, or an account holder closes their account, we delete the child's information from our live systems immediately. Copies in encrypted backups and server logs expire within 30 days.
- Consent records are kept while the account exists, as proof of consent. A child's parental-consent records are deleted together with the child's profile. Online consent forms signed for a center are kept while that center's account is open and deleted within 30 days after it closes.
- Account holder information is kept while the account is open. When an account is closed, it is deleted within 30 days, except billing records we must keep for tax and accounting purposes.
- Server logs, which include IP addresses, are automatically deleted after 30 days.
- We do not keep children's information indefinitely, and we do not keep it longer than reasonably necessary for the purpose for which it was collected.
8. Security
We maintain a written information security program, appropriate to the sensitivity of children's information, that includes:
- encryption of all traffic (HTTPS/TLS) and encryption at rest of our database and file storage;
- passwords and kiosk PINs stored only as one-way hashes, with lockouts after repeated failed PIN attempts;
- access to production systems restricted to authorized personnel, using least-privilege permissions;
- sign-in rate limiting, automatic sign-out of idle kiosk sessions, and security monitoring; and
- a designated person responsible for the program, which is reviewed at least once a year.
No system is perfectly secure. If a breach affects your information, we will notify you as required by law.
9. Your choices and rights
- Update your account details and email preferences in Settings.
- Turn off progress emails in Settings.
- Delete a child's profile from the child's Settings page.
- Ask us to access, correct, or delete your information, or to close your account, by emailing offszntech@gmail.com. We respond within 30 days.
Offszn is based in Illinois and the Service is intended for users in the United States. Residents of some states may have additional rights under state law, and we will honor them as the law requires. We do not respond to "Do Not Track" signals because we do not track users across other sites.
10. Changes to this policy
If we change this policy, we will update the effective date and version above. If we make material changes, especially any change to how we collect, use, or disclose children's information, we will notify account holders by email or in the Service and ask for acceptance or, where COPPA requires, new parental consent before the change applies to information already collected.
11. Contact us
Offszn Tech LLC
2300 185th Place, Lansing, IL 60438
Phone: 708-663-5900
Email: offszntech@gmail.com