Privacy policy

What Vidya is

Vidya is a children's mathematics product run by Cosmos369 (a GalaxyZen AI initiative). It teaches Bhāratī Kṛṣṇa Tīrthajī's 16 sutras and 13 sub-sutras to learners aged 8–16, with a Charter-bound AI Coach that gives hints, never the final answer.

What we collect

• Account identity — name (optional), parent email, and an account ID. Managed by Clerk (our authentication provider). Used to sign you in and send the weekly parent insight.
• Learner state — which sutras have been attempted, mastery scores, daily-plan completions, hint-ladder usage, problem responses. Stored in our database and tied to the account ID. Used to personalise the next lesson and the parent report.
• Chat with the Coach — your child's questions and the Coach's responses, for the purpose of continuing the conversation and improving lesson quality. Retained 90 days then summarised, then the raw chat is deleted.
• Server logs — request method + path + status code + IP address (rounded to /24) for security and abuse prevention. 30-day retention.

What we never collect

• Location data beyond country (inferred from IP).
• Microphone, camera, or device sensors.
• Social-graph or contact-list data.
• Ad-tracking identifiers or third-party trackers. There are none.
• Children's payment details. Payments are billed to the parent account only, via Stripe — we never see card numbers.

COPPA — children under 13

Vidya is designed for use by children, including those under 13. Per COPPA we require verifiable parental consentbefore collecting any personal information from a learner under 13. At account creation:

• The parent's email is captured separately from the learner's identity.
• A consent record is stored with the parent's IP and timestamp.
• The parent can review, edit, export, or delete the learner's data at any time via the Settings page or by emailing privacy@cosmos369.ai.

GDPR — your rights

You (or your child's parent/guardian) have the right to:

• Access — download every record we hold about your account as a JSON file. Email privacy@cosmos369.ai with subject "Vidya data export request" — we reply within 30 days (usually within 1 business day).
• Rectification — correct anything wrong. Use Settings or email us.
• Erasure — delete your account and all associated learner data. Email privacy@cosmos369.ai with subject "Vidya account deletion request". Deletion happens within 30 days. Financial records required for tax compliance are retained per local law (typically 7 years).
• Portability — export in machine-readable format. Same channel as Access.
• Withdraw consent — cancel the subscription and/or request deletion. No retention penalty.

Who we share data with

Only the third parties we need to run the service:

• Clerk (authentication) — name, email, password hash. Their privacy policy: clerk.com/privacy
• Stripe (payments) — billing address, card data (Stripe never gives us card numbers). Their privacy policy: stripe.com/privacy
• Supabase (database hosting) — all learner state. Their privacy policy: supabase.com/privacy
• Vercel (web hosting) — server logs (path + IP). Their privacy policy: vercel.com/legal/privacy-policy
• Cloudflare (CDN + DNS + bot mitigation) — request metadata. Their privacy policy: cloudflare.com/privacypolicy

We do not sell or rent your data. Ever. The Coach and curriculum-bridge models run on infrastructure we control; learner data is not shared with third-party AI providers for training purposes.

How long we keep it

• Active accounts: as long as the account is active.
• Cancelled accounts: 30 days, then deleted (parent can request immediate deletion).
• Coach chat raw logs: 90 days, then summarised, then raw deleted.
• Server logs: 30 days.
• Audit logs (security-relevant events): 1 year.
• Financial / tax records: 7 years (legal requirement).

Where we are

Cosmos369 / GalaxyZen AI operates from Toronto, Canada. Data is stored in Supabase regions in the United States by default. If you require EU/UK data residency, email us and we'll arrange.

Changes to this policy

If we change anything material, you'll see a notice in the dashboard at next sign-in, and we'll email parents on file.

Contact

For anything privacy-related, email privacy@cosmos369.ai. For everything else, hello@cosmos369.ai.

See also: Terms of service · Back to Vidya home