Privacy Policy

What We Collect

Summer Expedition collects the following information to run the program:

• Kid profiles: name, age, avatar selection, activity logs, photos, voice recordings, journal entries
• Parent profiles: name, email address, Google account information
• Usage data: login times, activity completions, streaks, XP earned

Where Data Lives

• Database: Neon Postgres (US region, encrypted at rest)
• File storage: Google Cloud Storage (US region)
• Hosting: Vercel (US)
• Voice transcription: OpenAI Whisper API (data not retained by OpenAI)
• Badge generation: OpenAI image API (admin-only, data not retained)

Who Can See What

• Parents see their own family's kid data (activities, journals, photos)
• The program runner (admin) can see all participant data
• Other families see only activity feed events (badge earns, milestones) and basic profile info

What We Don't Do

• No advertising or third-party trackers
• No selling or sharing data with third parties
• No automated decision-making about children

Data Retention

Data is kept for the life of the program. Parents can request deletion of their family's data at any time by contacting the program runner.

Contact

For privacy questions, contact the program runner directly.