Privacy Policy

1. Who We Are

• Business name: ThinkAI Camp
• Website: thinkaicamp.com
• Contact email: thinkaicamp@gmail.com
• Physical address: Available upon request.

ThinkAI Camp offers live instructor-led online courses and self-paced video courses for children ages 8–12, delivered via Zoom and hosted on a third-party course platform (Teachable or Thinkific).

2. Information We Collect

2.1 Information We Collect from Parents and Guardians

All personal information is collected from parents or guardians only. When a parent or guardian purchases a course, we collect:

• Parent or guardian email address — used to send purchase confirmation, course access credentials, Zoom session links, and course materials.
• Child's first name — provided by the parent at the time of purchase, used solely to address the child in course materials and to organize class groups.
• Payment information — processed securely by Stripe. We never store, access, or see your full card details.

2.2 Information We Do Not Collect

• We do not collect any personal information directly from children.
• We do not collect a child's email address, home address, phone number, date of birth, or any other identifying information beyond their first name.
• We do not collect persistent identifiers (such as tracking cookies, device IDs, or IP addresses) for advertising or behavioral tracking purposes.
• We do not collect precise geolocation data.
• We do not build advertising profiles on users or children.

2.3 Cookies and Tracking

We use only essential cookies required for the basic functionality of our website (such as maintaining your session). We do not use advertising cookies, tracking cookies, or third-party analytics that identify individual users. You may disable cookies in your browser settings; this may affect certain website functionality.

3. COPPA Compliance — Children's Privacy

ThinkAI Camp serves children under the age of 13. We comply fully with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq., and the FTC's COPPA Rule, 16 C.F.R. Part 312.

3.1 Direct Notice to Parents

Before collecting any personal information related to your child, we provide direct notice to you as the parent or guardian. This notice appears:

• On the course purchase page, before you complete checkout, clearly stating: "By purchasing this course, you confirm that you are the parent or legal guardian of the enrolled child. We will collect your child's first name to organize class groups. No other personal information about your child will be collected."
• In the purchase confirmation email sent to the parent's email address.

3.2 Verifiable Parental Consent

We obtain verifiable parental consent before collecting any personal information about a child under 13. Consent is obtained through the purchase transaction: the parent or guardian completes the Stripe payment process, which requires the adult's credit or debit card, serving as a verifiable method of parental consent under COPPA. By completing the purchase and agreeing to this Privacy Policy at checkout, the parent or guardian consents to our collection of the child's first name for the purposes described herein.

Access to all course content (both live sessions and self-paced materials) is provided only after parental purchase and consent. Children do not independently register for or access our platforms.

3.3 Video Recordings of Live Sessions

Our live instructor-led sessions conducted via Zoom are recorded. These recordings may capture the image and voice of enrolled children. By purchasing a live course, the parent or guardian explicitly consents to the recording of sessions in which their child participates.

Recordings are stored as follows:

• Temporarily on Zoom's servers during and immediately after the session.
• Subsequently uploaded to the course platform (Teachable or Thinkific) and made available in the parent's account for a period of 3 to 12 months, depending on the course.
• After the stated retention period, recordings are permanently deleted from the course platform.

Recordings are accessible only to the parent or guardian who purchased the course, via their secure account login. Recordings are not shared publicly or with any third parties beyond the storage services described in this policy.

3.4 Parental Rights Under COPPA

• You may review the personal information we hold about your child at any time by contacting us at thinkaicamp@gmail.com.
• You may request correction or deletion of your child's personal information at any time.
• You may refuse to permit further collection or use of your child's information; however, this may result in inability to access the course.
• We will not condition participation in our programs on the collection of more personal information than is reasonably necessary.

4. How We Use Your Information

• To process your course purchase and provide access to course materials and recordings.
• To send purchase confirmation and course access details to the parent's email address.
• To send Zoom session links and course scheduling information to enrolled families.
• To organize students into class groups and communicate group-specific information.
• To share post-session recordings and course materials with enrolled families via the course platform.
• To respond to support requests and questions.
• To comply with our legal obligations.

We do not sell your information. We do not use your information for advertising or marketing to third parties. We do not use student information to engage in targeted advertising or to build profiles on students for non-educational purposes.

5. How We Share Your Information

We share information only with the following service providers who help us operate our programs. All providers are contractually required to protect your data.

We do not sell, rent, or share your personal information with any other third parties for their own marketing or commercial purposes.

6. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: Request deletion of your personal information, subject to certain legal exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information. We do not sell or share children's personal information under any circumstances.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA rights.

6.1 Do Not Sell or Share My Personal Information

We do not sell or share personal information with third parties for cross-context behavioral advertising. If California law requires us to provide a formal opt-out link, you may contact us at thinkaicamp@gmail.com to make this request.

6.2 How to Submit a Verified Request

To exercise your California privacy rights, contact us at thinkaicamp@gmail.com with the subject line "California Privacy Request." We will verify your identity by confirming the email address associated with your account before processing your request. We will respond within 45 days as required by law.

6.3 Categories of Personal Information Collected

• Identifiers: parent or guardian email address; child's first name.
• Commercial information: course purchase records (processed by Stripe).
• Audio/visual data: session recordings (for live course purchasers only, with parental consent).
• Source: directly from the parent or guardian.
• Business purpose: course access, session communication, and delivery of educational content.
• Third parties disclosed to: Stripe, course platform, Zoom — as described above.

7. SOPIPA Compliance (California Student Privacy)

ThinkAI Camp complies with the Student Online Personal Information Protection Act (SOPIPA), Cal. Bus. & Prof. Code § 22584 et seq. Specifically:

• We do not use student information to engage in targeted advertising.
• We do not build a profile of a student for non-educational purposes.
• We do not sell student information.
• We do not disclose student information except as necessary to provide our educational services or as required by law.
• Student information is used solely to support the educational experience at ThinkAI Camp.

8. CalOPPA Compliance

• This Privacy Policy is posted prominently on our website at thinkaicamp.com.
• We will notify users of material changes to this policy by updating the Effective Date and, where appropriate, by email to enrolled families.
• We honor Do Not Track (DNT) signals. We do not track users across third-party websites for advertising purposes.
• Users may request to review personal information we hold by contacting thinkaicamp@gmail.com.

9. GDPR — Rights of Users in the EEA and UK

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the GDPR and applicable UK data protection law.

9.1 Legal Basis for Processing

• Contract performance: Processing the parent email and child's first name is necessary to fulfill the course purchase and deliver course services.
• Legitimate interests: To respond to support requests and manage course operations.
• Consent: For recording of live sessions, consent is obtained at the time of purchase.
• Legal obligation: Where required by applicable law.

9.2 Your GDPR Rights

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data where there is no overriding legal reason to retain it.
• Right to restriction of processing: Request that we restrict processing in certain circumstances.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent (e.g., session recordings), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise your GDPR rights, contact us at thinkaicamp@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

9.3 International Data Transfers

ThinkAI Camp is based in the United States. If you are located in the EEA or UK, your data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) adopted by the European Commission, and require our processors (Stripe, Zoom, Teachable/Thinkific) to maintain equivalent safeguards for any such transfers.

10. Data Retention

• Parent email address and child's first name: retained for the duration of the course enrollment and for up to 7 years thereafter as required for tax and legal compliance purposes.
• Payment records: retained by Stripe per their legal obligations; we retain transaction records for up to 7 years for accounting purposes.
• Session recordings: available in the course platform account for 3 to 12 months from the date of the session, as specified at the time of purchase. Recordings are permanently deleted after this period.

Upon written request, we will delete personal information that we are not legally required to retain within 30 days.

11. Data Security

We implement reasonable technical and organizational measures to protect personal information, including:

• Encrypted payment processing through Stripe (TLS/SSL encryption and PCI-DSS compliance).
• Secure access controls on the course platform, requiring authenticated login for all account access.
• Restricted access to personal data — only ThinkAI Camp staff directly involved in course delivery have access to student enrollment information.
• Recordings stored on password-protected accounts with access limited to the purchasing parent or guardian.

In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected users and relevant authorities within the timeframes required by applicable law (72 hours under GDPR; promptly under applicable US state laws).

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

12. Age Verification and Parental Consent at Purchase

Our website and course checkout process include an age confirmation step. The purchasing adult must confirm that they are the parent or legal guardian of the child being enrolled and that they have read and agree to this Privacy Policy. Access to all course content is provided only after parental purchase and explicit agreement to this policy.

Children do not independently create accounts, register, or access our platforms without a parent or guardian having first completed the purchase and consent process.

13. Third-Party Links and Services

Our website and course platform may contain links to third-party services (such as Zoom or Stripe). We are not responsible for the privacy practices of those services. We encourage you to review their privacy policies:

• Stripe: stripe.com/privacy
• Zoom: zoom.us/privacy (including Zoom's Children's Educational Privacy Statement)

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date and Last Updated date at the top of this document. If changes are material — particularly changes affecting how we handle children's information — we will notify enrolled families by email and may require renewed parental consent where required by COPPA. Your continued use of our services after notice of changes constitutes acceptance of the updated policy.

15. Contact Us

For any questions about this Privacy Policy, to exercise your privacy rights, or to review, correct, or delete information we hold about you or your child, please contact:

We are committed to resolving privacy concerns promptly and transparently. For COPPA-related requests regarding your child's information, we will respond within 5 business days.