Security and privacy

Your kids' info is sensitive. Here is exactly how we handle it.

Last updated May 19, 2026

COPPA

Only parents create accounts. Kids do not sign up, log in, or interact. We collect kids' first name, age/grade, and parent-supplied health/contact info as part of the family profile. Never sold, never used for advertising.

FERPA

Kidtra is not a school or educational agency, so we are not directly covered by FERPA. However, we treat any school records you forward (report cards, IEPs, attendance) as confidential.

Email forwarding security

Your private Kidtra inbox is unique to your account. We can only see emails you explicitly forward. No mailbox OAuth, no broad permissions.

No model training on your data

Action item extraction sends content to Anthropic Claude API with zero-day retention. Anthropic does not use your data to train their models.

Encryption + storage

TLS 1.2+ in transit. AES-256 at rest. Application data on Supabase US East.

Deletion

Account deletion is in-product. All your data, including kids profile info and forwarded emails, is purged within 30 days.