Privacy Policy

Our Commitment

The SuperMe Club ("SuperMe," "we," "us," or "our") builds a gamified health and wellness platform for children in grades K through 8. Protecting the privacy of the children who use SuperMe is at the center of how we designed our product. We collect as little information as possible, we never sell it, and we hold ourselves to the standards set by the Children's Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), the California Student Online Personal Information Protection Act (SOPIPA), and other applicable student data privacy laws.

This policy explains what we collect, what we deliberately do not collect, how the information is used, and the rights that schools and parents have.

Who This Policy Covers

This policy applies to children who use SuperMe through their school, as well as to the teachers, school administrators, and parents who interact with the platform. Children access SuperMe in an educational context, and participating schools provide consent on behalf of parents for the collection and use of student information solely for that educational purpose, consistent with COPPA.

On-Device Exercise Detection

SuperMe turns a child's real physical exercise into action inside the game. To do this, the platform uses the device camera to detect body position and movement in real time while the child is playing.

We want to be completely clear about how this works:

• All processing happens locally, on the device itself. Body-position detection runs in real time and is used only to move the child's in-game avatar in the moment.
• We do not record, capture, transmit, or store any images, photographs, or video of children. No image of any child is ever saved by SuperMe, sent to our servers, or shared with any third party.
• The live view never leaves the device and is never retained. Once movement is translated into game action, nothing about it is kept.
• We do not use facial recognition, and we do not collect, create, or store biometric identifiers of any kind. No biometric template, faceprint, or similar identifier is generated or retained.

In short, there are no images of children stored anywhere by SuperMe.

We Do Not Collect Information Directly from Children

SuperMe does not collect any personal information directly from children. Children cannot enter, submit, or upload personal information through the platform. There is no field, form, or feature that would allow a child to provide personal information about themselves, and children are never asked to.

Information Provided by the School

The only child information that exists in SuperMe is information that the school itself provides. A teacher, principal, superintendent, or other authorized school administrator enters this information on the child's behalf, at the school's discretion, so that the child can have a saved account. The only information a school may provide about a child is:

• The child's name, or a username if the school prefers to use one instead of a real name, and
• The child's formal school email address.

That is the complete list. We retain only this information, and only for as long as it is useful to the school. If a school chooses not to provide it, the child can still use the core exercise experience without it.

We do not collect a child's home address, phone number, precise location, photographs, birth date, or any similar details, and no such information can be entered into the platform by anyone.

Separately, the platform records limited gameplay information (such as exercise activity within the game and progress across the wellness pillars). This information is generated by play rather than submitted by the child, and it is associated with the school-provided account so that teachers can see participation and so the platform functions correctly.

How We Use Information

We use the limited information we collect only to:

• Create and maintain a child's account so their progress is saved,
• Allow teachers and school administrators to see participation and support students,
• Enable in-game features such as multiplayer play within the school setting, and
• Operate, maintain, secure, and improve the platform.

We use information solely for educational and platform purposes. We never use it to build a profile of a child for any purpose unrelated to the educational service.

What We Never Do

We want schools and parents to understand our firm limits:

• We do not sell, rent, or trade children's personal information to anyone.
• We do not use children's personal information for targeted or behavioral advertising, and we do not allow third parties to do so.
• We do not build advertising or marketing profiles of children.
• We do not disclose children's personal information to third parties for advertising or any other purpose that is not integral to providing the service.

Service Providers and Third Parties

We work with a small number of trusted service providers that help us operate the platform, such as secure hosting and database services. These providers may process the limited account information described above only to perform services for us, under contracts that require them to protect the information and prohibit them from using it for any other purpose.

The categories of third parties we share limited account information with, and the purpose of each, are:

We do not disclose children's personal information to any third party for targeted advertising. If we ever wished to disclose personal information for a purpose that is not integral to the service, we would first obtain separate verifiable consent, consistent with COPPA.

Data Retention and Deletion

We do not retain children's personal information for longer than is reasonably necessary to provide the educational service.

• We retain a child's account information (name or username and school email) only for as long as the child's school maintains an active account, or as directed by the school.
• When a school ends its use of SuperMe, or when a school or parent requests deletion, we delete the associated children's personal information within 60 days, except where a longer period is required by law.
• We never retain children's personal information indefinitely.
• As described above, no images or video of children are ever retained at any point.

Data Security

We maintain a written information security program with administrative, technical, and physical safeguards designed to protect children's personal information from unauthorized access, use, or disclosure. These measures include encryption of information in transit using TLS, encryption of our database at rest, storage of account credentials only in hashed form, role-based access controls that limit teachers and school administrators to the students of their own school, restriction of production system access to a small number of authorized personnel, and periodic review of our security practices. Personnel who handle children's information are trained on our privacy and security obligations.

School Consent and Parental Rights

Because SuperMe is used in schools for an educational purpose, participating schools may consent to the collection and use of student information on behalf of parents, as permitted under COPPA. Consistent with FERPA, SuperMe acts as a service provider to the school, the school controls the student records, and we use student information only under the school's direction.

Parents and schools have the right to:

• Review the personal information we have collected from a child,
• Request that we correct or delete that information, and
• Refuse to permit further collection or use of the child's information.

To exercise any of these rights, parents should contact their child's school, or contact us directly using the details below and we will work with the school to fulfill the request.

Children Outside a School Setting

SuperMe is designed for use only through schools, and all child information in the platform is provided by the school. We do not collect personal information directly from children in any setting. If we learn that a child's personal information has somehow reached us without the school's involvement and the required consent, we will delete it promptly.

Changes to This Policy

If we make material changes to this policy, we will update the effective date above and notify participating schools before the changes take effect, so that schools can review the changes on behalf of the families they serve.

Contact Us

If you have questions about this policy or about how we handle children's information, please contact us:

The SuperMe Club
Operated by Childrens Wellbeing, Inc.
Email: privacy@thesupermeclub.com