Privacy Policy

1. Who We Are

Zacai is an AI and STEM education platform operated by Design Show Inc. ("we," "us," "our"), a U.S.-based company. Our platform is available at zacai.org.

We are committed to protecting the privacy of all learners, including children. This policy describes what personal information we collect, how we use it, and your rights regarding that information.

Contact: For privacy questions or requests, use the support form.

2. Children's Privacy (COPPA)

Zacai serves learners starting at age 3. We take children's privacy seriously and comply with the U.S. Children's Online Privacy Protection Act (COPPA).

• Under 13: Account registration requires verified parental or guardian consent before we activate the account. We send a consent verification email to the parent's address provided at signup. Accounts are not activated until consent is confirmed.
• Ages 13–18: A parent or guardian must also approve the learner account before it opens. Age band stays on the learner. Adult 19–99 teaching copy is never shown on a child profile.
• Data minimization: For learners under 13, we collect only what is strictly necessary to provide the educational service: a username/display name, parent email address, age band, and learning progress.
• No behavioral advertising: We do not serve targeted advertisements to children and do not share children's data with advertisers.
• Parental rights: Parents and guardians may review, correct, or request deletion of their child's account data at any time through the support form.

3. Information We Collect

4. How We Use Your Information

• Provide, personalize, and improve the educational experience
• Manage your account, subscription, and billing
• Send transactional emails (account confirmation, team invitations, receipts)
• Enforce our Terms of Service and investigate abuse or safety concerns
• Comply with legal obligations

We do not sell personal information to third parties. We do not use personal information for targeted advertising.

5. Third-Party Services

• Approved AI providers (when enabled) — When the live tutor is configured, lesson questions and bounded lesson context (title, concept, public explanation, activity prompt, age band) may be sent to an approved provider such as Anthropic. We do not send passwords, JWTs, full answer keys, raw resume drafts, or unnecessary account data. If no provider is enabled, tutor requests fail closed and no prompt is sent.
• Brevo — Transactional email delivery (account confirmation, invitations).

Each third-party service processes data according to its own privacy policy. We select services that meet appropriate data-protection standards.

6. Data Retention

We retain account and learning data for as long as your account is active. When you delete your account, we delete your personal information within 30 days, except where retention is required by law or to resolve disputes.

Audit logs (login events, subscription changes) may be retained for up to 12 months for security and compliance purposes, in anonymized or aggregated form.

7. Your Rights

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate data.
• Deletion: Delete your account at any time from Account. This permanently removes your profile and learning data.
• Parental access (COPPA): Parents may request access to, correction of, or deletion of their child's data through the support form (topic: Account).

To exercise any right, use the support form. We aim to respond within 30 days. No public privacy mailbox is advertised until one is configured and deliverable.

8. Security

We use industry-standard security measures: TLS encryption in transit, hashed passwords, rate limiting on authentication endpoints, and role-based access controls. No method of transmission over the internet is 100% secure. If you believe your account has been compromised, use the support form immediately.

9. International Users

Zacai is operated from the United States. If you access Zacai from outside the U.S., your data may be transferred to and processed in the U.S. By using Zacai, you consent to this transfer.

10. Changes to This Policy

We may update this policy to reflect changes in our practices or applicable law. We will notify registered users of material changes by email at least 14 days before the change takes effect. Continued use of Zacai after that date constitutes acceptance of the updated policy.

11. Contact Us