Legal

Children’s Privacy Notice

Last updated · June 2026
Working draft. This is placeholder text for the Scolavo mockup. It is not legal advice and will be reviewed by counsel and a privacy specialist before launch.

On this page

  1. The short version
  2. Who this is for
  3. What we collect & why
  4. Verifiable parental consent
  5. How schools authorize use (FERPA)
  6. Children in the EU/UK (GDPR-K)
  7. No ads, no selling, no profiling
  8. Third parties (by category)
  9. Parental rights
  10. Data retention & deletion
  11. Contact & withdrawing consent

The short version

Scolavo (“we”, “us”) is a learning product used by children, families, and schools. We collect the minimum we need to deliver lessons and save progress. We get a parent’s permission before we collect a child’s personal information directly, and we ask separately before we would ever share it with a third party. We never use children’s data for advertising, we never sell it, and we don’t build advertising or behavioral profiles of students. This notice explains, in plain language, what we do and the rights parents and schools have.

Who this is for

This notice covers learners we treat as children — those under 13 in the United States, and the equivalent age set by local law elsewhere (see GDPR-K below). It applies whether a child reaches Scolavo through a Family plan, where a parent or guardian sets things up, or a School plan, where a school authorizes use on a parent’s behalf as permitted by law.

What we collect & why

We follow the principle of data minimization: we only collect what a feature genuinely needs to work.

We do not collect biometric identifiers (such as face or voice prints), government-issued ID numbers, or precise geolocation from children. We don’t require a child to disclose more than is reasonably necessary to take part in a lesson.

Consistent with COPPA, including the amended rule, we obtain verifiable parental consentbefore collecting personal information from a child under 13 on a Family plan. We ask for two distinct permissions and treat them separately:

Granting the first does not grant the second. A parent can give one without the other, and can revoke either at any time (see Parental rights).

How schools authorize use (FERPA)

When a school or district uses Scolavo with its students, the school directs and controls the use of student data, and we act as a “school official” performing a service the school would otherwise perform itself, under the FERPA school-official exception and applicable state student-privacy laws. In that role the school may provide consent on parents’ behalf as the law allows. We use student data only to provide the service to the school, under the school’s direction, and we return or delete it at the end of the engagement on request.

Children in the EU/UK (GDPR-K)

Under the GDPR, the age at which a child can consent to online services on their own is set by each member state between 13 and 16 (16 by default; the UK sets 13). Below that threshold, we rely on consent given or authorized by a parent or guardian. We honor these ages and apply the same minimization, no-advertising, and deletion safeguards described here to children in those regions.

No ads, no selling, no profiling

In line with student-privacy laws such as SOPIPA, we do not:

We don’t use children’s work or activity to train advertising models.

Third parties (by category)

We share children’s personal information only with service providers who help us run the product, under contracts that limit them to our instructions and prohibit using the data for their own purposes. By category, these include:

Payment information is handled by adults on the billing account, not by children. We do not allow these providers to use a child’s data for advertising, and any sharing beyond operating the service requires the separate parental consent described above.

Parental rights

Parents and guardians (and schools acting for their students) can at any time:

On a Family plan, a parent creates and controls each learner profile and can review, export, or delete a child’s data from their account or by contacting us. On a School plan, please reach your school first, since the school directs the data; we will support the school in fulfilling the request.

Data retention & deletion

We keep a child’s personal information only as long as needed to provide the service or as the law requires, then delete or anonymize it. If an account or profile is closed, or a parent revokes consent, we delete the associated children’s personal information within a reasonable period, except where we must retain limited records to meet a legal obligation.

Contact & withdrawing consent

To review or delete your child’s information, withdraw consent, or ask a question, contact our privacy team: privacy@scolavo.com. We’ll verify the request comes from the parent, guardian, or authorized school before acting on it. See also our Privacy Policy and Terms of Service.

HomePracticeLevelsBlogMe