Children's Privacy (COPPA)

Last updated: August 31, 2026

This page supplements our Privacy Policy and explains, specifically, how Limud Education Inc. ("Limud") handles personal information collected from children under 13 in connection with the Children's Online Privacy Protection Act (COPPA).

1. Two Ways a Child's Account Reaches Limud

Limud is a K-12 platform used inside schools and by families. A student account is created in one of two ways, and each carries its own consent pathway:

• School-enrolled students. A district or school administrator creates or approves student accounts as part of the school's use of Limud for instruction. Under the FTC's COPPA guidance, a school may consent on a parent's behalf to the collection of a student's personal information when the technology is used for a school-authorized educational purpose and no other purpose. Limud only uses information collected this way for the educational purposes described in our Privacy Policy and this page - never to build a profile for advertising. The school remains responsible for providing its own parents with notice of the tools it has authorized, consistent with its own policies.
• Parent- or student-initiated accounts. A parent can create an account for their child, or a student can register directly and later request to join a school's district. In either case, before a parent grants any of the consent categories described below, no personal information tied to a specific data-collection purpose is used for that purpose.

2. Verifiable Parental Consent

Parents manage consent for their linked children from their own Limud account. Consent is tracked per child and per category, not as a single blanket toggle:

• Categories: data collection, AI interaction, third-party sharing, photo/video, and location tracking - each can be granted or revoked independently.
• Verification: consent is recorded against the parent's own authenticated account (verified via their account email by default), with the IP address at the time of consent captured and the action written to our audit log.
• Duration: a grant of consent is valid for one year and must be renewed; a parent can revoke any category at any time, effective immediately.
• Where to manage it: from the parent account's consent settings, or by emailing privacy@limud.co.

3. What We Collect From Children

As described in our Privacy Policy, we collect account information (name, email, role, grade level), technical/security data (IP address, browser user-agent), and usage data (assignments, AI tutor interactions, performance metrics). For district-enrolled students, additional fields (address, phone, date of birth, emergency contact) are collected only when the district itself supplies them as part of enrollment - Limud does not ask a child directly for this information.

We do not knowingly collect more personal information from a child than is reasonably necessary for the educational purpose the account was created for.

4. The AI Tutor and Children

Limud's AI tutor and the automated learning note it maintains process a child's learning activity to personalize instruction. See our AI Disclosure page for what that note contains, when it is written by the AI model versus a deterministic fallback, and what teachers and parents can see. A parent can withhold the "AI interaction" consent category described above; we do not have a technical means today to selectively disable only the AI tutor for one child while leaving the rest of the account active, so withholding this category may limit which features are available to that child. Contact privacy@limud.co if you need this.

5. No Behavioral Advertising, No Sale of Data

We do not run advertising on Limud, we do not use third-party advertising or tracking pixels, and we do not sell or rent children's personal information. Our only data sub-processors are the operational vendors listed on our Subprocessors page, each bound to use data solely to provide their service to us.

6. Retention and Deletion

We retain student data for the duration of the active subscription plus 90 days, as described in our Privacy Policy. A parent can request deletion of a specific child's data - by category (grades, assignments, messages, AI interactions, behavioral data, account/profile data, or everything) - either in-app at Account → Delete Account, or by emailing privacy@limud.co. Deletion requests are reviewed and completed by an administrator within 30 days.

7. Reviewing and Removing a Child's Information

A parent may review the personal information Limud has collected about their child through the parent dashboard (grades, submissions, and the AI note at Reports), and may request that we correct or remove it using the deletion path above or by emailing us.

8. Contact Us

Questions about children's privacy, or to exercise a parent's rights under COPPA, contact:

Limud Education Inc.
Email: privacy@limud.co