1. Who this policy applies to
This policy applies to any child under the age of 13 who uses Calmiverse. Calmiverse accounts for children are created and managed by a parent or legal guardian ("Parent"). Children do not sign up directly.
2. Information we collect from children
We intentionally collect the smallest amount of personal information needed to provide a calm, age-appropriate experience:
- Account info provided by the Parent: child's first name (or chosen nickname), age or grade, and city/state for age-appropriate content.
- In-product activity: mood selections, journal entries the child writes, garden plants they grow, calm points, streaks, and which mini-games or activities they complete.
- Technical data needed to operate the service: device type, browser, approximate region (from IP), and basic crash/diagnostic logs. We do not use this data for advertising.
We do not knowingly collect: precise geolocation, contacts, photos/camera or microphone data, behavioral advertising identifiers, or persistent cross-site tracking from children.
3. How we use children's information
- To provide the journal, sensory garden, cozy friends, and other in-app features.
- To save progress (streaks, calm points, unlocked friends) across sessions and devices.
- To keep the service safe, debug crashes, and prevent abuse.
- To respond to Parent requests (e.g., reviewing or deleting data).
4. We do not show ads or sell data
Calmiverse does not display third-party advertising to children, does not allow ad networks to track children across the web, and does not sell or rent children's personal information to anyone. We do not use children's data to train external AI models.
5. Verifiable parental consent
Before a child can use Calmiverse, the Parent must create the account, agree to this policy and our Terms of Service, and provide consent. Where required by law, we use a verifiable parental consent method (such as a credit-card transaction, signed consent form, or government-ID verification) before enabling features that collect more than the COPPA "internal operations" minimum.
6. Parents' rights
- Review the personal information we have collected about your child.
- Delete your child's account and all associated personal information.
- Refuse further collection by closing the account at any time.
- Withdraw consent previously given.
To exercise any of these rights, email operations@sunrisingsolutions.com from the email address on file. We respond within 30 days.
7. Service providers
We share limited data with vetted infrastructure providers (e.g., hosting, database, error monitoring) that are contractually required to use it only to operate Calmiverse, keep it secure, and not for their own purposes. A current list is available on request.
8. Data retention & deletion
We retain children's data only as long as the account is active, or as required to comply with legal obligations. When a Parent deletes the account, we delete personal information from our live systems within 30 days and from backups within 90 days.
9. Security
Data is transmitted over TLS, stored encrypted at rest, and protected by row-level access controls so one family's data cannot be read by another. No system is perfectly secure; we will notify Parents promptly if a breach affects their child's data.
10. Changes to this policy
If we make material changes, we will notify Parents by email and require renewed consent before the changes apply to existing child accounts.
11. Contact us
Questions or requests: operations@sunrisingsolutions.com. Operator: Calmiverse, Inc.