BrightWay AI Privacy Policy

This policy applies to parents/guardians and families who create an account, and to children who use BrightWay AI under a parent/guardian’s account. If you are a child, please ask a parent/guardian to read this policy with you.

Account information (required to use the Service)

• Email address (used as the login/parent contact email).
• Password (stored only as a secure password hash; we do not store your raw password).
• Plan information (Free or Plus; monthly or annual).

Learning and safety information

• Child profile details supplied by a parent: first name or nickname, age, avatar, time limit, family topic settings, selected BrightWay guide, Quick or Deep setting, Solo or Squad mode, and the Boys’ or Girls’ workshop track.
• A parent must choose the Boys’ or Girls’ workshop track for a new profile. The track changes examples and project wrappers while age sets difficulty; naturally general projects may stay the same in both tracks. The stored value is the parent’s curriculum-track selection, not a free-form gender-identity profile.
• Questions about changing sex or gender identity are handled locally with a parent handoff and are not sent to an AI provider.
• Questions and answers appear in local browser storage so the family can see recent learning history. BrightWay’s application database does not keep raw question or answer logs in the current release.
• Optional AI-generated mission illustrations require a separate Parent opt-in. OpenAI receives only the screened mission title, materials, and steps used to draw the mission aid—not the child’s raw question, name, profile, account email, or chat history.
• While an illustration is pending, an authenticated server-side queue record temporarily holds that minimized title, materials, and steps prompt. Its active queue window is at most 15 minutes, and the prompt is cleared when the job becomes ready, blocked, or failed.
• Generated illustration bytes are kept in authenticated active storage for no more than seven days and no more than 24 ready illustrations per account. They are deleted from active storage immediately when a Parent revokes illustration consent.
• Limited security counters, such as per-account daily question totals and short-lived network rate-limit counts. BrightWay keys network counters with a keyed hash and does not retain the raw network address in those records. These records do not contain raw question text.

Payments (Plus tier via Stripe, when enabled)

If you purchase Plus, payments are processed by Stripe. We store a Stripe customer ID and related subscription metadata so we can manage billing and support. We do not store full payment card numbers.

We do not collect a child’s phone number, precise geolocation, photos, contacts, or social media information. BrightWay AI has no social features, no ads, and no public profiles.

COPPA generally requires parental consent before collecting personal information from children under 13. BrightWay AI is designed to be used under a parent/guardian account.

Current parent check

• An invited parent/guardian uses a parent access code to create and sign in to the account with an email address and password.
• Before creating a child profile, the adult re-enters the account password, creates a six-digit Parent Zone PIN, and accepts a specific processing notice.
• This controlled invite flow is not offered as a substitute for every legally required form of verifiable parental consent. Additional consent steps are required before a public launch or where required by law.
• Solo mode is the default. Squad mode requires a separate, explicit parent opt-in after the Parent reviews the multi-provider processing described in Section 6. A Parent may turn Squad off in Parent Zone.
• AI-generated mission illustrations are also off by default and require their own Parent opt-in. Existing child-profile or Squad consent does not silently enable this additional OpenAI processing, and a Parent may turn it off in Parent Zone.

Parents/guardians may review, delete, or request export of the personal information we maintain about their child, and may revoke consent at any time (see Sections 9 and 10 below).

• Provide the Service (generate explanations and hands-on activity guidance appropriate for the selected age mode).
• Maintain safety and compliance (content filtering, abuse detection, policy enforcement).
• Operate accounts and subscriptions (login, billing status, customer support).
• Improve reliability and quality (debugging, performance monitoring, and improving safety guardrails).
• Protect BrightWay AI, families, and the public (fraud prevention, security, legal compliance).

BrightWay AI uses third-party AI model providers to generate responses. The Service may occasionally produce inaccurate or incomplete information. BrightWay AI is intended for learning support and activity ideas, not professional advice.

We design the system to produce age-appropriate educational content, but no automated system is perfect. Parents/guardians should supervise children’s use of the Service and use their judgment before attempting any activity.

Generated mission illustrations can be inaccurate, omit a material, add an object, or place something incorrectly. They are visual aids, not authoritative diagrams or safety instructions. BrightWay gives curated built-in visuals priority over generated art when a matching activity is available. The written materials, steps, and safety notes remain the mission source of truth.

We share information only as needed to provide BrightWay AI and run our business. We do not sell personal information.

Service providers (processors)

• AI answer providers in Solo mode: We send the question, age band, and parent-selected project track only to the AI service selected in Parent Zone for answer generation. The separately consented illustration processing described below is the only exception. Current BrightWay guides may use OpenAI, Anthropic (Claude), Moonshot AI (Kimi), or xAI (Grok), when separately configured. BrightWay keeps xAI unavailable unless the deployment has explicitly confirmed Zero Data Retention and checks the provider's retention response header.
• AI providers in Squad mode: Only after a Parent explicitly opts in, we send the question, age band, and parent-selected project track to all four configured AI providers. BrightWay screens the four returned summaries, then sends the original question and those screened summaries to OpenAI, acting as the captain, to assemble one final mission. This intentionally involves more third-party processing than Solo mode.
• Optional AI mission illustrations: Only after a Parent separately opts in, BrightWay may send a screened mission title, materials, and steps to OpenAI to create one child-facing mission illustration, even when a different service produced the answer. This request excludes the raw child question, child name, profile, account email, chat history, and provider transcript. The feature remains unavailable unless the dedicated OpenAI project is explicitly confirmed for Zero Data Retention. OpenAI filters the prompt and output, and BrightWay uses its standard moderation setting rather than a reduced-moderation mode.
• Payment processing: Stripe processes subscriptions and payments.
• Infrastructure and hosting: We use standard infrastructure providers to host the Service and store data securely.

Legal and safety

We may share information if we believe it is reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, or respond to lawful requests.

Business transfers

If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

BrightWay AI does not show advertisements, and we do not engage in behavioral advertising. We do not allow third-party ad networks to collect information from the Service for targeted ads.

We keep personal information only for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

• Account data is retained while your account is active.
• Visible raw chat history remains in the family’s browser until it is cleared or the account is logged out. BrightWay does not currently retain raw question or answer logs in its application database.
• The minimized prompt for a pending mission illustration has an active queue window of at most 15 minutes and is cleared on a terminal result. Expired illustration rows are pruned when the service starts or a later illustration is queued. The production cleanup schedule and one post-release run have been verified; ongoing monitoring remains required.
• Generated mission illustrations are removed from active storage within seven days, when the 24-illustration account cap removes an older image, or immediately when a Parent revokes illustration consent. They are delivered through an authenticated BrightWay route; provider image URLs and base64 image data are not stored in the browser.
• Recently deleted illustrations may remain temporarily in owner-restricted database backups. The production backup process deletes BrightWay database backups after seven days; its schedule and one post-release run have been verified, while ongoing monitoring and restore testing remain required.
• AI providers process requests under their own data-retention terms and account settings.
• Billing records are retained as required for accounting/tax and compliance purposes.

When information is no longer needed, we take reasonable steps to delete it or de-identify it.

Parents/guardians can:

• Request access to the personal information associated with the account.
• Request correction of inaccurate information.
• Request deletion of the account and child profile (subject to certain legal/recordkeeping obligations), and clear local browser history by logging out.
• Revoke consent for continued collection/use of a child’s information by closing the account.
• Turn off AI mission illustrations and immediately delete the child’s active generated-illustration records.

To exercise these rights, contact us at pj@aissistedconsulting.com.

If you are a parent/guardian and you believe your child has provided personal information outside of the parent account context, please contact us. We will work with you to delete the information and prevent further collection where appropriate.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no system can be guaranteed 100% secure.

BrightWay AI is operated from the United States. If you access the Service from outside the U.S., you understand that your information may be processed in the U.S. and other locations where our service providers operate.

We may update this policy from time to time. If we make material changes, we will update the effective date and take reasonable steps to notify parents/guardians.

PestFriend LLC (BrightWay AI)
Ocala, Florida, USA
Email: pj@aissistedconsulting.com