Children's Privacy Disclosure

Effective Date: July 28, 2026  |  Applies to: Children under 13 (COPPA)

What information MHLE collects from children

When a child under 13 creates an MHLE account, we collect and store:

• Account information — a display name (or chosen username), date of birth (used solely to determine COPPA applicability), and a hashed password.
• Study notes and uploaded documents — text notes, PDF files, and audio recordings the child creates or uploads for AI-assisted study.
• Emotional energy / brain state (ms_last_brain_state) — a self-reported label (e.g., "focused", "tired", "overwhelmed") the child selects before a study session. Used only to adjust the AI's pacing and tone.
• Learning interests (ms_interests) — subject tags the child picks during onboarding (e.g., "science", "history"). Used only to suggest relevant content.
• Usage events — which features the child uses (notes created, analyses run, lenses viewed) so MHLE can improve the learning experience.
• Device / session information — IP address at registration and standard web-server logs (browser type, timestamps). Retained per our data-retention policy.

How we use this information

• Delivering and personalizing the core learning service (AI study analysis, adaptive difficulty, concept maps).
• Adjusting AI tone and complexity based on the child's self-reported brain state.
• Suggesting relevant study content based on declared interests.
• Detecting abuse and protecting account security.
• Complying with legal obligations.

We do not use children's data for advertising, marketing, or any commercial profiling. We do not sell, share, or disclose children's personal information to third parties except as required to operate the service (e.g., our email provider for transactional emails) or as required by law.

How we protect children's information

• Passwords are stored as salted hashes — never in plain text.
• All data is transmitted over HTTPS (TLS 1.2+).
• Emotional-state and interest data is stored in isolated columns and never included in any analytics export accessible to third parties.
• Children's accounts in MHLE are not visible to other users by default — all sharing settings default to "Nobody".

Parental consent requirement

MHLE requires verifiable parental consent before a child under 13 can use the service. When a child registers, we send a time-limited confirmation link to the parent or guardian email address provided at signup. The child's account is held in a pending state until a parent clicks that link. Accounts where consent is not verified within 7 days after the link expires are deactivated.

Parent and guardian rights

As the parent or legal guardian of a child with an MHLE account, you have the right to:

1. Review your child's information

You may request a copy of all personal information MHLE has collected about your child. Email privacy@mhle.app with the subject line "COPPA Review Request" and your child's display name. We will respond within 30 days.

2. Delete your child's information

You may request that we delete your child's account and all associated personal information (notes, usage history, brain-state logs, interests). Email privacy@mhle.app with the subject line "COPPA Deletion Request". We will complete the deletion within 30 days, except where retention is required by law.

3. Refuse further collection or use

You may withdraw consent at any time by emailing privacy@mhle.app. Withdrawing consent will deactivate the child's account. We will stop collecting new data immediately and will process deletion of existing data per your instructions.

Contact us

Questions about this disclosure or your child's data:
privacy@mhle.app
Cognitive Engine, Inc. (registered operator) · Multi-Headed Learning Engine (MHLE)

See also: Privacy Policy  |  Terms of Service