Privacy Policy
Effective: May 12, 2026
1. Who we are
Tinkerix ("we", "us") is an AI-powered platform that helps teachers generate interactive classroom activities. This policy explains what we collect from teachers who use Tinkerix and from students who interact with generated tools.
2. Information we collect
From teachers (account holders). When you create an account we collect your name, email address, and authentication identifiers from your sign-in provider. During onboarding you may also provide your grade level, subjects taught, and curriculum preferences. We log the prompts you submit, the tools you generate, and basic usage metrics (counts, timestamps, plan tier).
From students. Tinkerix is designed so that students do not need an account to play a teacher-generated tool. We do not knowingly collect names, emails, or other personally identifiable information from students. Tools may store ephemeral progress (such as a score) in the student's own browser; that data does not leave the device.
Payments. If you upgrade to a paid plan, payment is processed by Stripe. We never see or store your full card number.
Uploaded documents. If you attach a document to a generation request, the file's contents are sent to our AI provider so a tool can be created from it. We do not retain the original file longer than necessary to complete the request.
3. How we use information
- To operate the service and generate tools you request.
- To enforce plan limits, prevent abuse, and secure the platform.
- To improve the product (in aggregate, never to identify individuals).
- To send essential service emails (account, billing, security).
We do not sell personal information, and we do not use student interactions to train AI models.
4. Sharing
We share data only with the processors required to run Tinkerix: our backend host (Supabase / Lovable Cloud), our AI provider (Anthropic) for generation requests, and Stripe for payments. Each is contractually bound to handle data only on our instructions.
5. Children's privacy (FERPA / COPPA)
Tinkerix is intended for use by teachers in classroom settings. Teachers act as the school's authorized agent when assigning tools to students. Because we do not knowingly collect personal information from children under 13, COPPA verified parental consent is not required from us; teachers and schools are responsible for ensuring their use complies with FERPA, COPPA, and applicable state laws.
6. Data retention
Account data is retained while your account is active. Generated tools are retained until you delete them or close your account. You may request deletion of your account and associated data at any time by emailing legal@tinkerix.app.
7. Your rights
Depending on where you live (e.g. GDPR/EEA, UK, California), you may have the right to access, correct, export, or delete personal data we hold about you, and to object to certain processing. Email legal@tinkerix.app to exercise these rights.
8. Security
We use industry-standard encryption in transit (TLS) and at rest, scoped row-level security on our database, and least-privilege access controls. No system is perfectly secure; please report suspected vulnerabilities to legal@tinkerix.app.
9. Changes
We may update this policy from time to time. Material changes will be announced by email or in-product notice. Continued use after the effective date constitutes acceptance.
10. Contact
Questions or requests: legal@tinkerix.app.