COPPA Compliance

Understanding the Law

The Children's Online Privacy Protection Act (COPPA) is a federal law that gives parents control over what information websites can collect from their children under 13. The law was designed to protect children's privacy and safety online.

• Parental Consent: Obtain verifiable parental consent before collecting personal information from children under 13
• Notice: Provide clear notice about information collection practices
• Access: Allow parents to review their child's personal information
• Deletion: Allow parents to request deletion of their child's personal information
• Data Minimization: Collect only information that is reasonably necessary

Educational Exception

COPPA includes a specific exception for educational technology used in schools. MetaKidz operates under this exception when schools use our platform for educational purposes, but we still maintain the highest privacy standards and encourage parental involvement.

School-Based Authorization

• Educational Use Only: Student accounts are created only by authorized school personnel for educational purposes
• School Oversight: All student data is managed under school supervision and policies
• Limited Access: Student information is accessible only to authorized teachers and school administrators
• No Direct Collection: We do not directly collect personal information from children without school authorization

Data Protection Measures

• Minimal Data Collection: We collect only what is necessary for educational activities
• No Behavioral Advertising: We never use student data for advertising or marketing purposes
• Secure Storage: All data is encrypted and stored on secure, SOC 2 compliant servers
• Limited Retention: Student data is retained only as long as educationally necessary
• No Third-Party Sharing: Student data is never sold or shared with third parties for commercial purposes

Student Account Features

• Age-appropriate interface design
• No direct communication between students
• Moderated content and interactions
• Automatic privacy settings optimized for children
• No profile information beyond what's educationally necessary

Your Rights as a Parent

Even when schools use MetaKidz for educational purposes, parents retain important rights regarding their child's personal information:

• Right to Know: Be informed about what information is collected about your child
• Right to Access: Review your child's personal information held by MetaKidz
• Right to Correct: Request corrections to inaccurate information about your child
• Right to Delete: Request deletion of your child's personal information (subject to educational requirements)
• Right to Opt-Out: Object to certain uses of your child's information

Educational Information

We collect only information that is necessary for educational purposes and authorized by the school:

• Basic Profile: Student name, grade level, and class assignment
• Educational Progress: Behavior tracking, achievement badges, and learning objectives
• School Communications: Messages between teachers and parents about the student
• Usage Data: How the student interacts with educational content (aggregated and anonymized)

Information We Do NOT Collect

• Contact Information: No email addresses, phone numbers, or home addresses from students
• Photos/Videos: No photos or videos of students (unless specifically uploaded by authorized teachers)
• Location Data: No geolocation or precise location tracking
• Browsing History: No tracking of websites visited outside MetaKidz
• Social Media: No integration with social media platforms
• Commercial Data: No information for advertising or commercial purposes

Automatic Data Collection

We automatically collect minimal technical information necessary for the platform to function:

• Device type and browser information (for compatibility)
• Log files for security and troubleshooting
• Usage analytics (aggregated and anonymized)
• Session information (automatically deleted after logout)

Technical Security

• Encryption: All data encrypted in transit and at rest using industry-standard protocols
• Access Controls: Role-based access ensures only authorized personnel can view student data
• Regular Audits: Third-party security assessments and vulnerability testing
• Incident Response: Comprehensive plan for handling any security incidents
• Staff Training: All employees trained on COPPA requirements and child privacy protection

Operational Security

• Background Checks: All employees with access to student data undergo background verification
• Confidentiality Agreements: Strict contractual obligations for all staff members
• Limited Access: Student data accessible only to employees who need it for their job functions
• Monitoring: Continuous monitoring of data access and system activities

Content Moderation

• All user-generated content is moderated for appropriate educational use
• Automated systems flag inappropriate content for human review
• Clear reporting mechanisms for safety concerns
• Immediate response protocols for serious safety issues

School Responsibility

When schools use MetaKidz, they maintain primary responsibility for ensuring appropriate use and compliance with all applicable laws, including COPPA.

• Student Consent: Schools obtain necessary permissions for educational technology use
• Parent Notification: Schools inform parents about educational technology usage
• Data Governance: Schools maintain policies for educational technology and student data
• Access Management: Schools control which staff members have access to student information

MetaKidz Commitment

• FERPA Compliance: We operate as a 'school official' under FERPA requirements
• Data Processing Agreement: Clear contracts with schools defining data handling responsibilities
• Training and Support: We provide guidance to schools on privacy best practices
• Transparency: Regular reporting on privacy practices and any incidents

Continuous Monitoring

We regularly review our practices with schools to ensure ongoing compliance and address any concerns about student privacy protection.