Privacy Policy

Effective October 7, 2026

Writerrific (“we,” “us,” or “our”) operates the writing workshop at writerrific.com. This Privacy Policy explains what information we collect, how we use it, and the choices you have — including rights specific to children under 13 under the Children’s Online Privacy Protection Act (COPPA).

If you have any questions or want to request deletion of your child’s data, contact us at hello@writerrific.com.

1. Who This Policy Covers

This policy covers parents and guardians who sign up for Writerrific, and the children (grades 3–7) who use the writing workshop. Children access the Service through a private link — they do not create accounts or provide personal information directly. All enrollment is initiated by a parent or guardian.

2. Information We Collect

From parents and guardians

• Name — provided when joining the waitlist or being enrolled
• Email address — used to send your child’s access link, your parent dashboard link, and progress notifications
• Child’s grade level — used to assign age-appropriate curriculum

From children (through the writing workshop)

• First name — used to personalize the workshop experience
• Writing drafts — the text your child writes during sessions, stored so they can continue across sessions
• Chat messages with Ms. Reyes — stored to give Ms. Reyes context for the current session
• Progress data — which days are complete, current day number

Parent authorization records

We record the parent and student account, parent email, the notice text and version, email verification method, confirmation time, and any withdrawal. Verification codes are stored as hashes, expire after 15 minutes, and allow at most five incorrect attempts. Expired challenges are removed by scheduled cleanup.

Automatically collected

• Standard server logs (IP address, browser type, timestamps) — kept for up to 30 days for security and debugging purposes. We do not use these for analytics or advertising.
• Aggregate site analytics — Vercel Web Analytics and Speed Insights count page views and measure page speed without cookies or cross-site tracking. They do not record writing, chat, names, or email addresses.
• Google Analytics and ad measurement on our public pages only — Our homepage, Trust & Privacy page, Privacy Policy, and Terms use Google’s tag (Google Analytics and Google Ads). It may set cookies and records how visitors reach and use those pages, and whether a visit led to a sign-up, so we can improve the site and tell which ads work. It never runs in the student workshop, student login, parent login, or parent dashboard. We send Google no names, email addresses, writing, or child information, and we have turned off Google signals and ad-personalization signals.

We do not collect:

• Children’s email addresses
• Passwords (no accounts — access is by private link)
• Payment information
• Photos or audio
• Location data

3. How We Use Information

• To provide and personalize the writing workshop for your child
• To send you your child’s access link and your parent dashboard link
• To notify you when your child completes a day’s work
• To let your child continue their writing across sessions
• To improve the Service using aggregated, anonymized patterns — never in a way that identifies your child

We do not use your information or your child’s information to serve ads, build advertising profiles, or sell to third parties. The only advertising-related processing is the public-page measurement described above, which counts visits and parent sign-ups and never includes your child’s information.

4. AI Processing — Ms. Reyes

Ms. Reyes is powered by Anthropic Claude, a third-party AI service. When your child submits writing or sends a message, that text is sent to Anthropic’s API to generate a response. This means your child’s writing drafts and chat messages are processed by Anthropic’s systems.

Anthropic’s API data usage policies apply. As of this writing, Anthropic does not use API inputs to train their models. For current details, see anthropic.com/privacy.

We send only the content necessary for the coaching response — we do not send parent email addresses or billing details to Anthropic. Parent summaries may include the child’s first name, and coaching may include parent-provided notes. Writing, chat, and notes may contain personal information.

5. Third-Party Services

We do not share your data with any other third parties.

6. Children’s Privacy (COPPA)

We are committed to complying with the Children’s Online Privacy Protection Act (COPPA). Here is how we handle children’s information:

• Parental consent — A parent or guardian enrolls each child and provides the child’s name and grade. Enrollment starts a parent authorization process. Before student access is enabled, the parent reviews a direct notice, explicitly authorizes the described processing, verifies a code sent to their email, and receives a confirmation. Earlier terms acceptance alone does not enable access.
• No direct collection from children — Children access the workshop through a link. They do not register, create a profile, or provide an email address.
• Limited collection — We collect only what is necessary to operate the workshop (name, writing, chat).
• No behavioral advertising — We never use children’s data for targeted advertising.
• Parental access and deletion — You can request to review, correct, or delete your child’s data at any time. Email us at hello@writerrific.com and we will respond within 10 business days.

Parents can withdraw authorization from their dashboard. This pauses student access and further AI coaching and summaries. Parents retain access to saved work and can request deletion at hello@writerrific.com. Withdrawal does not automatically delete work or cancel a subscription; billing controls remain available in the dashboard.

7. Data Retention

We retain student data for as long as the student is actively enrolled. If you request deletion or a student account is removed, we delete all associated data (writing, chat history, progress) within 30 days. Parent email addresses on the waitlist are retained until you unsubscribe or request deletion.

8. Security

Data is stored in Supabase with encryption at rest and in transit (TLS). Access to student data is restricted to the student’s private link, the parent’s dashboard link, and our admin interface (protected by a secret key). We do not store passwords — there are no passwords to compromise.

9. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you or your child
• Correct inaccurate information
• Request deletion of your or your child’s data
• Withdraw consent (which will result in us stopping the Service for your child)

To exercise any of these rights, email hello@writerrific.com. We will respond within 10 business days.

10. Changes to This Policy

We may update this Privacy Policy as the Service evolves. We will notify enrolled parents by email before material changes take effect. The “Effective” date at the top reflects the most recent update.

11. Contact

Questions, data requests, or concerns: hello@writerrific.com