Vibe Kids Privacy Policy

Version 1.0 | Effective Date: 10/06/2026 | Last updated: N/A

This Privacy Policy explains how Anchored Imagination LLC ("we," "us," or "our") collects, uses, shares, retains, and protects personal information in connection with Vibe Kids (vibekids.app) (the "Service"), our web-based service that lets a child build small, single-file HTML games by directing an AI coding companion ("Vibe"), through a parent's account and with a parent's supervision.

We wrote this policy for parents and legal guardians. Vibe Kids may be used by children, and protecting children's privacy is central to how we built the Service. To the extent we are subject to the compliance obligations of the federal Children's Online Privacy Protection Act ("COPPA"), we comply with such obligations.

A. Plain-Language Summary

Here is the short version. The detailed sections below explain each point fully. If anything here conflicts with a detailed section, the detailed section controls.

• Who uses Vibe Kids. A Parent (an adult) creates and holds the account and pays for the Service. A User (often a Child) has a profile identified only by a first name or nickname the Parent chooses. A Child never logs in separately and never holds an account.
• What Vibe Kids does. Your Child types plain-English requests to Vibe, or chooses a suggested idea or action, our AI coding companion, and Vibe builds a small, single-file game in response. See Section C.
• What we collect from your Child. A first name or nickname, the prompts your Child types or the suggested ideas and actions your Child chooses, the games Vibe builds, mastery and learning records, and safety-screening results. See Section D.
• Why we collect it. To deliver the building experience, generate the game, show you how your Child is doing, and keep the Service safe. We do not use it for advertising to your Child, and we do not sell it.
• How we share it. With a short list of named service providers who help us run Vibe Kids, listed by name in Section F, and with no one else. We also review some prompts and builds ourselves, with identifying information removed, to improve safety filters and game quality. Section G explains exactly what that involves.
• You consent first. Other than the persistent identifiers described in Section H, we do not collect, use, or disclose your Child's personal information until you give Verifiable Parental Consent ("VPC"). See Section K.
• We delete data on a schedule. We do not keep your Child's information forever. The full schedule is in Section I.
• You are in control. At any time you can review, export, or delete your Child's information, or tell us to stop collecting it. See Section L.
• Where we operate. The United States. Vibe Kids is not offered in the European Union, the European Economic Area, the United Kingdom, or Switzerland. See Section N.

For any privacy question, contact us at hello@vibekids.app, +1 (425) 200-5627, or Anchored Imagination LLC, 522 W Riverside Ave # 4270, Spokane, WA 99201-0580, United States.

B. Key Terms Used in This Policy

• "we," "us," "our," "Anchored Imagination" - Anchored Imagination LLC, the operator of Vibe Kids.
• "Vibe Kids" / "the Service" - the web application at vibekids.app, including Vibe, the AI coding companion, and our related pages and services.
• "Parent" - the adult who creates and holds the account and provides Verifiable Parental Consent. References to "you" mean the Parent unless the context says otherwise.
• "Child" - a user under 13 whose profile the Parent creates within the account, identified only by a first name or nickname the Parent chooses.
• "Personal information" - the categories of information collected from or about a Parent or Child, described in Sections D and E. Personal information does not include anonymized or aggregated information that cannot be used to identify any particular individual.
• "Service provider" / "subprocessor" - a company that processes information on our behalf, under contract, to help us deliver, host, secure, or support Vibe Kids.
• "Third party" - a recipient of personal information that is not Anchored Imagination LLC and that does not act purely as a provider of support for our internal operations.
• "Verifiable Parental Consent" / "VPC" - the consent a Parent gives us before we may collect, use, or disclose a Child's personal information.

C. How Vibe Kids Works

A Parent creates the Vibe Kids account, adds one or more Children by first name or nickname only, and is expected to be present while a Child uses the Service. A Child has no separate login and cannot reach Vibe Kids without the Parent's account. For the youngest users, the Parent is often the one typing.

When a Child types a prompt, Vibe Kids sends that prompt, together with the current state of the Child's in-progress game, to our AI inference provider (named in Section F) so the model can write or edit the game. The same provider produces the mastery report and performs the automated safety screening described below.

The reach of the AI is deliberately tiny. The only thing it can produce is the one HTML file that is your Child's game. It cannot read or change any other file, it cannot reach your device or your network, and each build session is isolated from every other session and discarded when that session ends. The finished game runs inside a locked-down ("sandboxed") window with a strict content-security policy, so that even if the model produced something unsafe, it is sanitized before it can run in the browser.

Every prompt your Child has typed and every game Vibe has built is visible to you, at any time, in your Parent dashboard, for as long as we still hold it under the schedule in Section I.

Every prompt and every piece of generated output is screened automatically for unsafe content before the output is shown. Prompts or outputs in unsafe categories (violence, weapons, adult content, self-harm, hate) are blocked with a gentle, kid-friendly message instead of a game, and repeated misuse can lock an account, which a Parent can ask us to unlock. See Sections D and G.

Notice of this data flow, and your consent to it, both come before the first time your Child's prompt is sent to our AI inference provider. Section K explains how that consent step is sequenced.

D. The Personal Information We Collect From Your Child

We collect only the information we need to run Vibe Kids safely for your family.

We treat your Child's nickname, prompts, and builds as your Child's personal information. We store them inside your account, alongside the technical identifiers described in Section H, and they travel together through the Service. We protect the data accordingly throughout this Policy.

What we do not do. We do not use your Child's personal information for behavioral advertising. We do not sell your Child's personal information. We do not show advertising of any kind to your Child inside the Service. And we do not condition your Child's participation in Vibe Kids on your Child disclosing more personal information than is reasonably necessary to use the Service.

E. The Personal Information We Collect From the Parent

Vibe Kids also collects information from you, the Parent, to create and operate the account:

• Account information: your name, your email address, and a securely hashed password.
• Billing information: processed by Stripe, our payment processor and merchant of record. We receive the status and outcome of your purchase. We do not receive or store your full card number.
• Support and bug reports: anything you send us through the in-app bug-report form or by email.
• Technical information: your IP address, browser type, and the cookies described in Section H.
• First-party attribution: we record the referring page, UTM parameters, the landing page you arrived on, email opens and clicks, any access or invite code carried in your signup link, and a coarse geographic location derived from your IP address. We use this to understand where our families come from.

Any advertising for Vibe Kids, for example on Facebook, is directed to parents, not to children, and does not use any Child's personal information.

F. How We Share Information: Service Providers and Named Vendors

We do not sell your Child's personal information, and we do not share it except with the service providers named below and in the limited legal, safety, and business-transfer circumstances described at the end of this Section. We require each provider to keep your Child's information confidential, to use it only to provide services to us, and to maintain reasonable security, and before we release a Child's personal information to a provider we take reasonable steps to confirm it can do so.

Fireworks AI: retention and training. Fireworks AI represents that it applies zero data retention to the open-weight models we use. Prompt and generation data are held only in volatile memory for the duration of the request, are not written to persistent storage, and are not used to train models. Our standard for the live Service is that we do not route your Child's data to AI providers that retain it or train on it. The specific open-weight model may change as we improve quality and speed, but that standard does not.

Legal and safety disclosures. We may disclose information if we are required to do so by law, to protect the safety of a child or another person, or to enforce our Terms of Service.

Business transfers. If Vibe Kids is ever involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will give you notice where we are able to, and any recipient will remain bound by this Policy with respect to your Child's personal information, or we will obtain fresh consent.

We do not share your Child's personal information with anyone else. There are no social, sharing, or public-profile features in Vibe Kids, and no advertising networks receive any information from the Service.

G. Internal Review and Product Improvement

We use your Child's prompts and builds in two ways beyond generating that Child's own game. We want to be clear about both.

• Safety review. We screen every prompt and every generated output automatically, and a person on our team may review a flagged item, in order to protect the safety and integrity of Vibe Kids and the families who use it. This happens on every account and is not optional. It is how we keep the Service safe.
• Product improvement. From time to time, members of our team review batches of prompts and builds to fix bugs, to reduce false positives in our safety filters, to improve Vibe's coaching behavior and the lessons, and to compare the quality of the games different models or templates produce. Before we use a Child's prompt or build for this purpose, we remove information that identifies the Child, including the Child's nickname.

We do not use your Child's prompts or builds for advertising, we do not use them to build a profile of your Child, and we do not use them to contact your Child.

H. Persistent Identifiers, Cookies, and Analytics

When you or your Child use Vibe Kids, we automatically collect a small set of persistent identifiers: your IP address, an authentication cookie, and randomly generated session and page-view identifiers. We also derive a coarse, country, region, or city level location from your IP address using an offline lookup database that runs on our own servers (MaxMind GeoLite2). We do not collect precise geolocation, such as GPS-level location, from you or from your Child.

We use your Child's identifiers only for the following internal operations:

• Keeping you signed in and authenticating your account, and remembering which Child profile is active so the experience feels continuous.
• Maintaining and analyzing the functioning of the Service, including diagnosing errors.
• Protecting the security and integrity of Vibe Kids, including rate-limiting logins and sessions and detecting fraud and abuse.
• Complying with legal obligations.

Cookies and similar technologies. We use cookies only for essential purposes: keeping a Parent logged in, remembering the active Child profile, and security features such as login rate limiting. You can clear cookies in your browser at any time. Doing so will log you out.

Analytics. We keep our own first-party analytics, for example how many families join, which lessons are attempted, and whether a build succeeded. These are recorded on our own servers from the request itself. They set no cookie, use no third-party script, and do not follow you across other websites. The referral and campaign information described in Section E is recorded only from the Parent's waitlist or signup request, or from visits to our home and purchase pages. It is not collected on any screen a Child uses and is not associated with a Child's profile. We do not use third-party analytics cookies or advertising cookies. The only third-party script we load anywhere in the Service is the Cloudflare Turnstile bot check described in Section F, and it loads only on the two adult account forms named there.

We do not use these identifiers for behavioral advertising, to build a profile of your Child, or to track your Child across other apps, websites, or services, and we do not share them with advertising networks.

We hold your Child's identifiers only on our own servers. We never send them to an advertising network, a data broker, or an analytics vendor. We do not link them to your Child's profile for any purpose other than the internal operations listed above. The coarse location we derive from an IP address is recorded only when you, the Parent, join the waitlist or create an account, or when someone visits our home and purchase pages. It is never recorded from a screen your Child uses.

Separately, if you begin creating an account and give us your email address but never complete Verifiable Parental Consent, we delete the contact information we collected from you for that purpose after a reasonable time.

I. Retention and Deletion of Children's Personal Information

We keep your Child's personal information only as long as reasonably necessary for the purpose for which we collected it, and then we delete it. We do not keep your Child's personal information indefinitely. The schedule below is our written retention policy, and an automated daily process enforces it.

When a retention period expires, or when you ask us to delete information under Section L, we delete it from our systems using reasonable measures to protect against unauthorized access during deletion, and we direct our service providers to do the same within a reasonable time. Fireworks AI, our AI inference provider, represents that it retains no prompt or build data at all, as described in Section F.

Build sessions use only temporary storage that disappears when the session ends. Our database is the authoritative store, and it is what the schedule above governs. Remnants of deleted data may remain within our data backups for up to 12 weeks after deletion.

J. Security

We designed the technical architecture of Vibe Kids with young children in mind, and we maintain the technical and operational safeguards listed below. We also host with providers that maintain physical security at their facilities.

• Encryption of data at rest and in transit.
• Least-privilege access controls, so that each system and each person has only the access needed to do the job.
• Authentication for Parent accounts, revocable sessions, and login rate limiting.
• Running every AI-generated game inside a sandboxed preview, isolated from the rest of the Service, with a strict content-security policy and output sanitization, so the preview cannot reach your other tabs or the outside world.
• Keeping the AI off your device entirely. It never touches your files or your network, the only thing it can write is the single game file you are building, and each build session is isolated and discarded when it ends.
• Automated safety screening of prompts and outputs, with an account lock on repeated misuse.
• Logging of significant actions and monitoring for anomalous or unauthorized activity.
• Regular backups of the database, stored off the primary server, with tested restore procedures.
• Restricting access to Child data to the employees and contractors who need it, and keeping our systems and dependencies up to date.

No system is completely secure, and we cannot guarantee absolute security. We take the measures above, and we update them as our understanding of relevant risks changes. If you believe your account has been compromised, change your password and contact us immediately at hello@vibekids.app.

K. Verifiable Parental Consent

Other than the persistent identifiers described in Section H, we do not collect, use, or disclose your Child's personal information until you give us Verifiable Parental Consent ("VPC"). Notice of our practices and your consent both come before any collection, and specifically before your Child's first prompt is ever sent to our AI inference provider.

K.1 - Primary method: payment-card or transaction. You purchase Vibe Kids access through our checkout, which is operated by Stripe, using a credit card, a debit card, or another online payment method that notifies you of each transaction. That transaction is your Verifiable Parental Consent to our collection, use, and disclosure of your Child's personal information as described in this Policy, including the transmission to Fireworks AI described in Sections C and F. Before you reach a checkout step, we give you a separate, direct notice of what we collect and why (Appendix A), and we link you to this Policy. Your Child cannot submit a first prompt to Vibe until that step is complete.

K.2 - Fallback method: email plus. If your account can use the Vibe Kids AI builder without completing a paid transaction, we obtain your consent a different way. We ask you to give consent affirmatively, and then we send a confirmatory email to the address you gave us, which you must confirm before your Child's first prompt is sent to our AI inference provider. You may revoke any consent you give in response to that confirmatory email at any time. To revoke, reply to that email, write to us at hello@vibekids.app, or delete your account from Parent → Settings. Revoking consent means we stop collecting your Child's personal information and, at your direction, delete what we have already collected.

K.3 - Consent is per Child. We record a distinct consent for each Child you enroll. If you add another Child later, we will ask you to confirm consent for that Child specifically before we collect any of that Child's personal information.

K.4 - What this consent covers. Your consent covers our collection and use of your Child's personal information as described in this Policy, and the transmission of prompts and game state to Fireworks AI so that Vibe can build the game, produce the mastery report, and screen for unsafe content. It does not authorize any different or additional use. We do not disclose your Child's personal information to any third party for that third party's own purposes, we do not sell it, and we do not use it for advertising, so there is no separate advertising or data-sale consent for you to give or withhold.

K.5 - We keep a record. We record what you consented to and when you consented, so that we can always show you exactly what you agreed to. If we change our practices materially in a way that requires your consent, we will ask you again before the new practice begins. See Section O.

K.6 - Withdrawing consent. You may withdraw your consent at any time. See Section L.

L. Your Parental Rights

At any time, you may do each of the following: you may review the personal information we have collected from your Child, you may direct us to delete it, you may refuse any further use or future collection of it, and, on request, you are also entitled to a description of the specific types or categories of personal information we have collected from your Child. We also offer export and correction.

• Review the personal information we have collected from your Child, by signing in and opening your Parent dashboard. You can see every prompt your Child has typed, every build Vibe has produced, and your Child's mastery records, for as long as we still hold them under the schedule in Section I.
• Export your Child's information, by going to Parent → Settings and downloading a complete archive of your family's data. The archive is a ZIP file containing your Children's builds as playable .html files, plus machine-readable JSON of profiles, snapshots, transcripts, and mastery records and signals.
• Delete all of your Child's information, by going to Parent → Settings and permanently deleting your account and all associated Child data. Deletion is a complete purge: it removes builds, snapshots, transcripts, signals, feedback, and related records across every surface, leaving only a minimal record of the deletion request itself for compliance purposes. We send you a confirmation of what was removed.
• Correct inaccurate information about your Child, by editing the Child's profile or by writing to us at hello@vibekids.app.
• Refuse further collection of your Child's information, by writing to us or by closing your account. We treat either as a withdrawal of your consent. If you refuse further collection but keep the account open, we may not be able to continue providing the Service to your Child, because building a game requires sending the prompt to our AI inference provider.

Requests made through your account settings take effect immediately. If you contact us directly instead, for example by email, we will complete your request within 30 days. To protect your Child's privacy, we may ask you to verify your identity before we act on a deletion request or a large export request.

M. State-Specific Privacy Provisions

M.1 - We hereby notify you of the following:

• The categories of personal information we collect, and the categories of third parties we share it with. See Sections D, E, and F.
• How you can review and request changes to your information. See Section L.
• How we will notify you of material changes to this Policy. See Section O.
• This Policy's effective date. See the top of this Policy.
• How we respond to browser "Do Not Track" signals. Some browsers offer a "Do Not Track" setting. Because there is no common industry standard for interpreting those signals, Vibe Kids does not respond to them. We do not track you or your Child across other websites or services in any event. See Section H.
• Whether other parties may collect personal information about your online activities across different websites or services over time. No. See Section H.

M.2 - Anchored Imagination LLC is a Washington limited liability company, and this Policy, like the rest of our relationship with you, is governed by Washington law. See Section R. If Washington law requires us to notify you of a security breach involving your information, we will do so in the most expedient time possible and without unreasonable delay. In no event will we take more than 30 calendar days after we discover the breach. That deadline may be extended at the request of law enforcement, or for the time reasonably needed to determine the scope of the breach and restore the integrity of our systems. Where more than 500 Washington residents are affected, we also notify the Washington Attorney General on the same 30-day clock. We aim to give every affected family the same notice on the same timeline wherever they live.

N. Geographic Scope

Vibe Kids is offered in the United States, and your information is stored and processed in the United States. Vibe Kids is not directed to, offered to, or intended for individuals located in the European Union, the European Economic Area, the United Kingdom, or Switzerland. We block access from those regions at the network level. Location based on IP address is not perfect, so this is not a guarantee: if you are located in a region we do not serve, please do not use Vibe Kids, whether or not you are able to reach it. We may change the regions we serve, and this section will say so when we do.

O. Material Changes to This Policy

We may update this Privacy Policy as Vibe Kids evolves. If we make a material change, including a change to the categories of information we collect, the third parties to whom we disclose it, our retention schedule, or our Verifiable Parental Consent method, we will notify you by email at the address associated with your account and, where we have an in-service notice surface, by posting a notice inside the Service, before the change takes effect. If a material change requires new or updated consent, we will ask you for it before the new use begins. The "Last Updated" date at the top of this Policy always reflects the most recent revision.

P. Relationship to the Terms of Service

If anything in our Terms of Service appears to conflict with this Privacy Policy on how we handle your Child's personal information, this Privacy Policy controls.

Q. Operator Contact and Notice

The following identifies the operator that collects and maintains personal information from children through Vibe Kids:

Operator: Anchored Imagination LLC · Address: 522 W Riverside Ave # 4270, Spokane, WA 99201-0580, United States · Telephone: +1 (425) 200-5627 · Email: hello@vibekids.app

Anchored Imagination LLC is the sole operator of Vibe Kids. Fireworks AI, DigitalOcean, Stripe, Brevo, and Cloudflare provide services to us and are not operators or co-operators of Vibe Kids.

All privacy questions, consent-withdrawal requests, review requests, export requests, and deletion requests should be directed to the contact information above.

R. General

Governing law. This Privacy Policy is governed by the laws of the State of Washington, without regard to conflict-of-laws principles, and subject to applicable federal law.

Conflict. If anything in this Policy conflicts with any other Anchored Imagination LLC document regarding a Child's personal information, this Policy controls.

Questions. We take the privacy and safety of the children using Vibe Kids seriously, and we welcome direct questions from parents at hello@vibekids.app.

Appendix A: Direct Notice to Parents

This is the separate, direct notice Anchored Imagination LLC delivers to a Parent at the moment consent is requested, by email and on the consent screen, before any of a Child's personal information is collected. It is a companion artifact to the posted Privacy Policy, not a part of it, and it is not the same thing as the summary in Section A.

Subject: Before your child starts building: what Vibe Kids collects, and your consent

Hello,

You are about to set up Vibe Kids for your child. Before your child types a single prompt, here is exactly what we will collect, what we will do with it, and what you are consenting to. Please read it. It is short.

1. Why we have your email address. We collected your email address, and, if you joined our waitlist, the fact that you asked to be notified, in order to give you this notice and to obtain your consent. That is the only reason we have it at this point.

2. Your consent is required first. We will not collect, use, or disclose your child's personal information until you give us Verifiable Parental Consent. If you do not give consent within a reasonable time, we will delete the contact information we collected from you for this purpose.

3. What we will collect from your child, and how we will use it.

4. Who else receives your child's information, and why. One company receives your child's own content: Fireworks AI, our AI inference provider. We send it your child's prompt and the current state of the game so that it can generate the game, produce the mastery report, and run the automated safety screening. Fireworks AI represents that it retains none of that data and does not use it to train models.

Our other providers support the service but do not receive your child's prompts or builds: DigitalOcean (hosting and database, which stores service data on our behalf), Stripe (payment processing), Google Workspace (internal communications), PagerDuty (system monitoring), Brevo (email delivery to you), and Cloudflare Turnstile (a bot check that runs only on our adult signup and password-reset forms). We do not share your child's information with anyone else, we do not sell it, and we do not disclose it to anyone for their own purposes, other than where the law requires it, to protect a child's safety, or if Vibe Kids is ever sold or merged, as Section F of the Privacy Policy explains, so there is no separate advertising or data-sharing consent for you to give or withhold. If that ever changes, we will ask you separately and you will be able to say yes to Vibe Kids without saying yes to that. We do not show ads to your child.

5. The full Privacy Policy. Read it here: https://vibekids.app/privacy. It includes our complete retention schedule, our security measures, and your rights.

6. How you give consent. Completing your purchase at our Stripe checkout, using a card or another online payment method that notifies you of the transaction, is your Verifiable Parental Consent. If your account can use the AI builder without a purchase, we will instead ask you to confirm your consent by clicking the link in your confirmation email. You may revoke any consent you give in response to that email at any time, by replying to it, by writing to hello@vibekids.app, or by deleting your account from Parent → Settings.

7. If you do not consent. If you do not provide consent within a reasonable time, we will delete the information we collected from you in order to ask for it, and your child will not be able to build with Vibe.

8. You stay in control. At any time you can review everything your child has typed and built, for as long as we still hold it under the retention schedule in Section I of the Privacy Policy. You can export it as a ZIP file, delete all of it, or tell us to stop collecting it, from Parent → Settings or by writing to us.

Anchored Imagination LLC · 522 W Riverside Ave # 4270, Spokane, WA 99201-0580, United States · +1 (425) 200-5627 · hello@vibekids.app