Privacy Policy

Last Updated: December 7, 2025

Welcome to Allgood Academy. This Privacy Policy explains how we collect, use, and protect your information when you use AllgoodOS™ and our GoodBlocks™ learning modules.

1. Information We Collect

We collect information to provide a personalized learning experience. This includes:

• Account Information: If you sign in via Google, we collect your name, email address, and profile picture to create your Digital Passport and track your certifications.
• Performance Data: We record your answers, scores, choices made within GoodBlocks™, and time spent on modules.
• Recruit Code Data: If you are an under-13 learner using a Recruit Code, we store only a pseudonymized identity (your Recruit Code passphrase, an auto-assigned display name, and an auto-assigned avatar) plus your in-module progress — never a real name, email, or other identifying detail. Some non-identifying session data is also cached locally on your device (Local Storage) to keep the experience smooth between visits.

2. How We Use Your Data

We believe your data belongs to you. We do not sell your personal data to third parties. We use your data strictly for the following purposes:

• Customization: To personalize your dashboard, address you by name, and generate custom certificates/badges upon completion of challenges.
• Content Improvement: We analyze aggregated performance data (e.g., "70% of users missed Question 3") to improve our educational content and user experience.
• Authentication: To maintain your session and secure your account using Google Firebase.

3. Age Restrictions (COPPA Compliance)

You must be 13 years of age or older to create an account or sign in via Google.

If you are under 13, you must use the Recruit Code system instead of creating an account. A Recruit Code is a 3-word passphrase (for example, "arctic-fox-trot") automatically generated for you — no real name, email address, or account creation is ever required. Your display name and avatar are also generated automatically, so nothing you enter identifies you personally. We do not knowingly collect personally identifiable information (PII) from children under 13. If we discover that a user under 13 has created a real (13+) account, we will immediately delete that account and all associated data. See Section 4 below for how long Recruit Code data is retained.

4. Data Retention & Minimization (Under 13)

We collect zero Personally Identifiable Information (PII) for under-13 agent learners. Learners under 13 never provide a name, email address, or any other real-world identifying detail — instead, each is assigned a pseudonymized Recruit Code (a memorable three-word passphrase) and an auto-assigned avatar, which together serve as that learner's identity within AllgoodOS™ and let them resume progress on a different device.

All anonymous interaction data and telemetry logs are permanently purged from our systems after 90 days of inactivity. This includes session records (time on task, steps reached, completion status) and event logs (module opens, in-module choices, module completions) tied to an under-13 learner's pseudonymized session. Records still receiving activity are retained only for as long as that activity continues; once 90 days pass with no further activity, the underlying data is deleted from our production database.

5. Third-Party Services

We use trusted third-party services to operate our platform:

• Google Firebase: Used for authentication, database hosting, and secure data storage.

6. Data Security

We implement industry-standard security measures to protect your data. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Contact Us

If you have questions about this policy, please contact us at: learning@allgoodacademy.com