Privacy

When you create an account we collect a username (or email, for parents), a password (stored hashed), an avatar selection, and the age band / level you choose. As you use the app we collect virtual trades, lesson progress, quiz answers, badges, and basic device information needed to run the service (browser type, IP for security).

We use this information to operate the educational simulation, save your progress, show parents linked to a child account the child's portfolio and learning, and improve the product. We do not use children's data for behavioural advertising.

We do not sell personal information. We do not share data with third parties for their own marketing. We use a limited set of processors (hosting, database, email) under confidentiality obligations to run the service.

StockSmart Kids is designed for under-18 users. A child account cannot be activated without a linked parent account. Australian Privacy Principles apply; where users are located in the United States we follow the principles of COPPA, including verifiable parental consent for under-13s.

Parents linked to a child account can review the child's portfolio, transactions, lesson progress, badges, and notification preferences. Parents may request correction, export, or deletion of their child's data at any time by contacting us.

We retain account data while the account is active. When an account is deleted, personal data is removed within 30 days, except where retention is required by law (e.g. security logs).

Data is transmitted over TLS and stored with row-level access controls so that one user cannot read another user's data. Passwords are hashed. We continuously monitor for vulnerabilities.

Questions, requests, or complaints: privacy@stocksmartkids.example.