Privacy Policy

For young builders: use a nickname, not your full name. Never type your address, school, phone number, passwords, payment details, private photos, or secrets into a prompt, comment, leaderboard, or app. Publishing makes an app visible to other people. Ask the adult who owns the account before you publish anything.

For parents and guardians: you own and control an account used by a child under 13. You can review projects, control publishing and community features, clear leaderboards, unpublish or delete projects, cancel billing, and delete the account. CodeDreams does not sell personal information or use it for targeted advertising.

Safety filters, access controls, rate limits, reporting tools, and human review reduce risk, but no automated system can identify every unsafe input or guarantee that every AI output or public interaction is appropriate. Adult supervision remains important.

This Privacy Policy applies to codedreams.org, the CodeDreams builder, project workspaces, AI and learning tools, Explore, cloud leaderboards, publishing, subscriptions, and related support and safety operations (the Service). “CodeDreams,” “we,” “us,” and “our” mean the operator of the Service.

The person who registers is the account holder. An account holder must be at least 13. If the account holder is under the age of majority where they live, a parent or legal guardian must approve use and every purchase. A child under 13 may build only through an adult-owned account under that adult's supervision.

A school or organization using CodeDreams under a separate agreement may be responsible for its own notices and permissions. Third-party sites and services have their own privacy practices.

• Account and consent information:email address, display name, avatar, authentication identifiers, login and reset events, and the date and policy version associated with the age, guardian, and billing confirmations. We do not ask for a child's date of birth.
• Builder content: prompts, chat messages, project names, code, files, versions, learning progress, settings, screenshots, build output, error logs, sandbox state, and publish history.
• Community and public content: published app titles, descriptions, URLs, preview images, display names, comments, votes, reports, moderation records, and leaderboard nicknames and scores.
• Technical and safety information: IP address, browser and device information, timestamps, request and security events, feature usage, deployment identifiers, abuse signals, and keyed network digests used to slow leaderboard manipulation. A keyed digest is designed to avoid storing the underlying address in the leaderboard record.
• Billing information: plan, billing interval, free or paid plan status, renewal and cancellation dates, promotion information, Stripe customer/subscription identifiers, invoices, and billing audit events. Stripe, not CodeDreams, handles full card numbers and payment credentials.
• Support information: messages, attachments, and account, safety, privacy, or billing details you choose to send us.

We use information only for legitimate, described purposes:

• create, authenticate, secure, and support accounts;
• generate and edit projects, run sandboxes, save versions, teach coding concepts, and publish apps at the account holder's direction;
• provide comments, votes, reports, moderation, and protected cloud leaderboards;
• screen public text and generated code, investigate abuse, enforce limits, protect children and other users, and respond to reports;
• operate subscriptions, invoices, taxes, cancellations, refunds, fraud controls, and account entitlements;
• debug, maintain, measure, and improve reliability; and
• comply with law, resolve disputes, enforce agreements, and protect the rights and safety of users, CodeDreams, and others.

Where law requires a legal basis, these activities rely on performing our contract, consent (including parent or guardian authorization where required), legal obligations, and legitimate interests in providing, securing, and improving the Service. We do not require consent for unrelated uses as a condition of using core features.

CodeDreams is designed for young builders, but it does not offer child-owned accounts to children under 13. A parent or legal guardian must create and own the account, review these policies, supervise the child, and complete the adult payment authorization before project creation is enabled. The adult's checkout and payment method are used as part of the parental authorization process for a paid Service.

The parent may review the child's projects and public activity, prevent further collection by stopping use, unpublish or delete projects, clear a project leaderboard, or delete the account. We do not knowingly condition a child's participation on providing more personal information than is reasonably necessary for the feature.

If we learn that personal information was collected directly from a child under 13 without required authorization, we will restrict the account and delete the information or seek valid parental permission, as applicable. Contact us immediately if you believe this happened. Parents may ask to review, correct, download, or delete information associated with their child and may refuse further use or collection.

Prompts, conversation history, relevant project files, selected logs, and technical context are sent to AI and sandbox providers when needed to answer a request, generate code, explain a lesson, or diagnose a problem. Automated safety systems may also scan prompts and generated files. Authorized people may review limited content when necessary for support, safety, security, or legal compliance.

CodeDreams does not intentionally use a child's personal information for advertising or submit it for general-purpose model training. AI providers process content under their service terms, settings, and contractual restrictions. Do not include sensitive personal information or secrets in builder content.

Publishing is optional and makes the selected app and its public metadata available on the internet. Public content can be viewed, copied, linked, indexed, or screenshotted by others. Unlisted means omitted from general discovery; it does not mean private to anyone who has the link.

Explore comments, public display names, votes, and leaderboard nicknames and scores are visible to other people. Use a nickname. Public text is screened and may be blocked, held, hidden, or removed. Reports and moderation records are not public. Unpublishing or deleting removes content under our control, but cannot recall copies already made by other people, browsers, search engines, or archives.

Stripe provides checkout, card handling, recurring billing, payment method management, invoices, taxes, fraud prevention, and the billing portal. Stripe receives billing and payment information directly. We receive the identifiers and status information needed to connect the subscription to the account and enforce the selected plan.

We use payment and adult-confirmation records to perform the subscription agreement, prevent unauthorized child purchases, handle support and refunds, maintain accounting records, and help document parental authorization where an adult permits a child under 13 to use the adult-owned account.

We disclose only what is reasonably necessary:

• to hosting, database, authentication, AI, sandbox, deployment, payment, logging, security, and support providers working for us;
• to the public when the account holder chooses to publish;
• to a parent, guardian, school, or organization entitled to control the relevant account;
• when required by law or reasonably necessary to prevent harm, investigate abuse or fraud, enforce agreements, or protect rights; and
• in a financing, merger, acquisition, reorganization, or sale, subject to appropriate confidentiality and applicable law.

We do not sell personal information, share it for cross-context behavioral advertising, or display third-party behavioral advertising. If that ever changes, we will update this policy and obtain any consent required for children before the change takes effect.

Account and project content is kept while the account is active and until the account holder deletes it or it is no longer needed to provide the Service. Leaderboard entries remain until the owner clears them, rotates the project, deletes the project, or we remove them for safety or integrity. Comments remain until deleted or moderated.

On account deletion, CodeDreams removes the profile, owned projects, project files, public apps, and connected active deployment records from its live systems. Deletion from provider backups and caches occurs on those providers' normal secure rotation schedules. We retain only limited billing, tax, transaction, fraud, security, safety-report, and legal records for the period reasonably necessary or required by law; those records are restricted from ordinary product use.

We review retention by purpose and do not keep child personal information indefinitely. When a purpose ends, information is deleted, de-identified, or isolated where deletion is temporarily impracticable.

Account holders can update their display name and password, choose whether to publish, control comments, votes, and leaderboards, unpublish or delete projects, manage or cancel billing, and delete the account. Parents may exercise these controls for a child using their account.

Depending on location, you may have rights to know, access, correct, delete, restrict, object, withdraw consent, receive a portable copy, appeal a decision, or complain to a privacy regulator. California residents may also request the categories and specific pieces of personal information collected and disclosures made. We do not sell or share personal information for behavioral advertising, so there is no separate sale/share opt-out to exercise.

Send a request to support@codedreams.org. We will verify authority over the account before disclosing or deleting information. We will not discriminate against anyone for exercising a privacy right.

We use administrative, technical, and organizational measures designed for the sensitivity of the information, including access controls, row-level authorization, restricted service credentials, text and code screening, database constraints, rate limits, audit records, encrypted transport, payment-provider isolation, and incident response. No internet service can promise perfect security.

CodeDreams and its providers may process information in Canada, the United States, and other countries where they operate. Information may therefore be subject to local law. Where required, we use contractual and other recognized transfer safeguards.

We may update this policy as the Service or law changes. We will post the new effective date and provide additional notice or obtain renewed consent when a material change requires it, especially for a new use or disclosure of children's information.

Privacy, parent, deletion, or safety requests can be sent to support@codedreams.org. Ask for the Privacy Lead. Legal operator and mailing details are available from support for formal notices.

Please also review the Terms of Service and Refund & Cancellation Policy.