Privacy Policy
- We collect nothing from a child until a parent or guardian gives verifiable consent.
- We don't ask children for their email, phone number, birthdate, gender or ethnicity.
- Chat transcripts are deleted after 90 days.
- We never sell personal information, never show ads, and never use children's information for advertising.
- A guardian can review, export or delete their child's information at any time.
1. Who we are
myguru ("we", "us") is an AI coach that helps middle schoolers discover their strengths through conversation, with their guardian in the loop. myguru is currently a small invitation-only pilot for families in San Diego. This policy covers this website (myguru.review) and the myguru app.
Questions or requests: [email protected].
2. This website
This website has no accounts, analytics or advertising trackers, and we don't set cookies.
- Pilot waitlist. Only parents and guardians 18 or older may join. We collect your email address and, if you choose, your first name and ZIP code (to see whether you're in the pilot area). We use this only to invite you to the pilot and tell you about its availability. We don't collect anything about your child on the waitlist. We keep waitlist entries until the pilot ends or you ask us to remove you, whichever comes first. To be removed, email us.
- Hosting and security. The site is served through Cloudflare, which processes your IP address and request details to deliver the page and block attacks. Cloudflare may set strictly necessary security cookies.
- Fonts. Pages load typefaces from Google Fonts, so your browser sends your IP address to Google when you visit.
- Email. If you email us, we use your email address and message only to reply.
3. Children's privacy (COPPA)
myguru is designed for children in grades 6–8, many of whom are under 13. We comply with the U.S. Children's Online Privacy Protection Act (COPPA).
Consent comes first
A guardian creates the family account and adds their child. Before consent, we hold only the child's nickname, grade and (optionally) school district. If the guardian doesn't complete consent within 30 days, we delete that record automatically. Nothing else is collected from or about the child until the guardian completes a verifiable parental consent method through our consent provider and accepts this notice.
What we collect from children
| Information | Why |
|---|---|
| Nickname, grade, optional school district, picture-PIN (stored only as a hash) | To sign in and fit activities to the child's age |
| Chat messages with the coach | To run the conversation and notice strengths |
| Mood check-ins | To keep sessions calm and spot when a child needs support |
| Strengths profile, activities tried and feedback on suggestions | To build the child's evolving profile and improve suggestions for that child |
| Safety events | To respond to signs of risk (see section 5) |
We don't collect a child's email, phone number, birthdate, gender, ethnicity, photos, precise location or contacts. We don't require a child to share more than an activity needs.
Guardian rights
A guardian can, at any time:
- review the information we hold about their child;
- export it;
- refuse further collection by revoking consent, which stops the child's sessions immediately;
- have it deleted.
Use the guardian settings in the app or email us. For security, we ask the guardian to sign in again before export, deletion or revocation.
4. What we collect from guardians
Name, email address, and phone number if you choose text alerts; sign-in records; and your consent record (method, date and notice version). We use these to run your account, verify consent, send weekly summaries and safety alerts, and respond to you.
5. Safety
Every child message passes through automated safety checks. If a message suggests a child may be at risk of harm, the coach pauses the activity, responds with care, and shows crisis resources such as the 988 Suicide & Crisis Lifeline. We may notify the guardian. Where a message suggests abuse at home, a trained reviewer may handle the situation instead of notifying the home guardian. We keep a safety record with a redacted excerpt. We may disclose information when required by law or to protect a child's safety.
6. How AI is used
Coach replies are generated by large language models from Anthropic. Before a child's message reaches the model, our deterministic safety filter screens it. We send the model only what it needs to respond, and our agreement with Anthropic doesn't allow them to use our data to train their models. Guardians see summaries in plain language, not raw transcripts by default.
7. Who we share information with
We don't sell or rent personal information, and we don't share it for advertising. We share it only with service providers that help us run myguru, under contracts that limit their use to providing that service:
- Anthropic: AI responses;
- a verifiable parental consent provider: guardian verification;
- Amazon Web Services: hosting and data storage in the United States;
- Cloudflare: website delivery and security;
- email and text message providers: guardian notifications.
We may also disclose information if required by law, to protect someone's safety, or as part of a merger or acquisition, in which case this policy will continue to apply to the information.
8. How long we keep information
| Information | Kept for |
|---|---|
| Chat transcript text | 90 days |
| Strengths profile, activities, check-ins, safety records | Until the account is deleted |
| AI usage logs (no child text) | 13 months |
| Child records never consented | 30 days |
| After a deletion request | Deleted within 30 days; backups expire within 35 days |
9. Security
We keep a written information security program. Data is encrypted in transit and at rest, access is limited to people who need it, and children's sign-in attempts are rate-limited and locked after repeated misses. No system is perfectly secure; if a breach affects your information, we'll notify you as the law requires.
10. California residents
If you live in California, you have the right to know what personal information we collect, to delete it, to correct it, and not to be discriminated against for exercising these rights. We don't sell or share personal information as those terms are defined in California law. To make a request, email us; we'll verify your identity before acting on it.
11. Changes
If we make a material change to how we handle children's information, we'll notify guardians and get new consent before applying it. We'll post other changes here and update the effective date.