Privacy Policy

1. Introduction

Vibe Cōdr Academy is a service operated by Deacon Hill LLC ("we," "us," or "our"). We are committed to protecting the privacy of all of our users, and we take special care when it comes to children. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data.

By using Vibe Cōdr Academy, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our service.

2. COPPA Compliance

We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. All child accounts on Vibe Cōdr Academy are created and managed by a parent or legal guardian (collectively, "adults"). A child cannot create an account on their own.

If you believe we have inadvertently collected personal information from a child under 13 without appropriate consent, please contact us immediately at info@deaconhill.com and we will promptly delete the information.

3. Information We Collect

3a. From Adults (Parents, Guardians, and Teachers)

• Account information: name, email address, and password.
• Billing information: payment details are collected and processed by LemonSqueezy, our third-party payment processor. We do not store credit card numbers on our servers.
• Usage data: subscription tier, account creation date, and login timestamps.

3b. From Children (Ages 9–17)

• Account information: a username (display name) and password, both chosen by the parent or guardian. We encourage adults to use nicknames or aliases rather than a child's real name.
• Projects: HTML, CSS, and JavaScript code created within the coding editor.
• Conversations: chat messages exchanged between the child and Crackers, our AI tutor.
• Usage statistics: daily message counts, time spent in the editor, and project save/publish history.
• Blocked content log: records of messages that were blocked by our content filtering system, including the content attempted and the reason for the block.

We do not collect a child's real name, email address, phone number, physical address, photograph, or any other directly identifying personal information. Our PII detection system actively blocks attempts to share such information through the chat interface.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Vibe Cōdr Academy service.
• Process AI-assisted coding requests via our AI tutor, Crackers.
• Enforce content filtering and safety policies to protect children.
• Enable adults to monitor their children's activity, including message history, projects, blocked content attempts, and time spent on the platform.
• Process subscriptions and billing through LemonSqueezy.
• Respond to support inquiries and communicate service-related information.
• Enforce our Terms of Service and protect against fraud or misuse.

5. Third-Party Services

We use a limited number of third-party services to operate Vibe Cōdr Academy. Each is used only for its stated purpose:

• Anthropic (Claude): Our AI tutor, Crackers, is powered by Claude, an AI model developed by Anthropic. Conversation messages are sent to Anthropic's API to generate responses. We apply content filtering before and after each API call. Anthropic's data handling practices are governed by their own privacy policy.
• LemonSqueezy: Payment processing is handled by LemonSqueezy as our Merchant of Record. When you subscribe to a paid plan, your payment information is collected directly by LemonSqueezy and is subject to LemonSqueezy's Privacy Policy. We do not store your full credit card information on our servers.
• MongoDB: User accounts, projects, conversations, and usage data are stored in MongoDB databases. We use appropriate security measures to protect stored data.
• Plausible Analytics: We use Plausible, a privacy-focused, cookieless analytics tool, to understand how visitors use our website. Plausible does not use cookies, does not collect personal information, and does not track users across websites. All data is aggregated and anonymous. Learn more at Plausible's Data Policy.

We do not use advertising networks or social media tracking pixels.

6. Cookies and Tracking

Vibe Cōdr Academy uses only essential authentication session cookies to keep you logged in. We do not use cookies for tracking, advertising, or analytics purposes. We do not use third-party tracking cookies. Our analytics provider, Plausible, is fully cookieless and does not store any data on your device.

7. Data Sharing and Selling

We do not sell, rent, trade, or otherwise share personal information with third parties for their marketing or advertising purposes. We will never sell your data or your child's data.

We may disclose information only in the following limited circumstances:

• To comply with applicable law, regulation, legal process, or enforceable governmental request.
• To enforce our Terms of Service, including investigation of potential violations.
• To detect, prevent, or otherwise address fraud, security, or technical issues.
• To protect the rights, property, or safety of Deacon Hill LLC, our users, or the public as required or permitted by law.

8. Data Retention and Deletion

We retain user data for as long as the account remains active. When an adult deletes a child account, we delete all associated data, including projects, conversations, usage statistics, and blocked content logs. When an adult deletes their own account, all child accounts under that adult are also deleted along with all associated data.

You may request deletion of your account and all associated data at any time by contacting us at info@deaconhill.com. We will process deletion requests within 30 days.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect the information we collect. Passwords are hashed, connections are encrypted via HTTPS, and database access is restricted. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Parental Rights

Parents and guardians have the right to:

• Review all personal information collected from their child by logging into their parent dashboard.
• Request deletion of their child's personal information.
• Refuse further collection of their child's personal information by deleting the child account.

To exercise these rights, log into your parent dashboard or contact us at info@deaconhill.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. For significant changes that affect children's data, we will provide notice to the email address associated with the parent account. Your continued use of the service after any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: