This Children’s Privacy Policy applies to children under the age of 13 who access or use the Sherpal App, either directly or through a parent-approved account. The App is not intended as a primary service for children under 13, but we recognize that some features may be accessible to them with proper parental consent, as outlined in Section 1B of our General Terms and Conditions (“Terms”). If we learn that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information promptly and notify the parent, unless we are required to retain it by law.

We collect only the personal information that is reasonably necessary to provide the App to children under 13 and to comply with COPPA. This includes:•  Basic Identification Data: A username or pseudonym and an email address (typically the parent’s) to facilitate account creation and consent verification. We do not require a child’s full name, home address, or phone number unless provided voluntarily by a parent during the consent process.

Content Created by Children: If a child under 13 submits text, drawings, or other content through the App (e.g., personalized projects or responses generated via AI Features), we may retain that content to support the child’s use of the service, subject to parental oversight.

Technical Information: Device information (e.g., IP address, browser type) and usage data (e.g., time spent on features) may be collected automatically to ensure the App’s functionality and security, but this is not linked to a child’s identity unless necessary for consent verification.We do not collect information for marketing purposes from children under 13, nor do we share their data with third parties for commercial activities without explicit parental consent, beyond what is required to operate the App (e.g., cloud storage via Amazon S3, as noted in Section 3 of the Terms).

Personal information from children under 13 is collected only with verifiable parental consent, obtained through a secure process designed to meet COPPA standards. This process may include:

Email Verification: Parents receive an email to confirm their identity and consent, which they must respond to within a specified timeframe.

Signed Consent Forms: Parents may download, sign, and return a consent form to info@sherpalai.com, detailing the permissions granted for their child’s use.

Online Registration: A parent-facing portal within the App may guide parents through an electronic consent process, which may evolve based on technological updates.

Technical data is gathered automatically through the App’s infrastructure (e.g., Amazon CloudWatch, Redis Cache), but we ensure it is anonymized where possible and not used to identify children unless linked to a consented account.

We use the personal information of children under 13 solely to provide and improve the App’s services, in line with Section 4 of our Privacy Policy. This includes:

Service Delivery: Enabling account access, supporting AI-driven features (e.g., personalized learning or content generation as described in Section 3A of the Terms), and ensuring a safe user experience.

Parental Communication: Notifying parents about their child’s account status, updates, or required actions (e.g., consent renewal), as permitted under Section 19 of the Terms.

Safety and Compliance: Monitoring for violations of the Terms or EULA, and retaining data as needed to comply with COPPA or legal obligations, such as investigating reported misuse.

We do not use children’s data to serve targeted advertisements or build user profiles for commercial purposes, and any analysis is limited to improving App functionality under strict privacy controls.

Sthirah does not sell or rent children’s personal information to third parties. We may share it only under the following circumstances:

Service Providers: Third-party vendors (e.g., Amazon ECS, MS SQL Server) listed in Section 3 of the Terms assist in operating the App (e.g., hosting, payment processing) and are bound by confidentiality agreements to protect children’s data.

Legal Requirements: We may disclose information if required by law, a court order, or to protect the safety of the child or others, as outlined in Section 6 of the Privacy Policy.

Business Transfers: In the event of a merger or acquisition, children’s data may be transferred to a successor entity, provided they adhere to this Children’s Privacy Policy, as noted in Section 6 of the Privacy Policy.

Parental Consent: With explicit parental approval, we may share data for specific purposes (e.g., educational collaborations), but this is rare and requires additional verification.

Parents play a central role in managing their child’s use of the App. Under COPPA, we provide the following rights and processes:

Verifiable Consent: Before collecting any personal information from a child under 13, we require a parent to provide verifiable consent. This may involve completing an online form, returning a signed document, or verifying identity via email. Instructions are available by contacting info@sherpalai.com.

Review and Deletion: Parents may review the personal information we have collected from their child, request corrections, or demand deletion by submitting a written request to info@sherpalai.com. We will act on such requests within a reasonable timeframe, unless retention is required by law (e.g., for legal compliance or dispute resolution).

Revocation of Consent: Parents may withdraw consent at any time by emailing info@sherpalai.com, after which we will cease collecting new information and delete existing data, subject to legal retention periods.

Account Management: Parents can terminate their child’s account and request data removal, as detailed in Section 1B of the Terms and Section 8 of the Privacy Policy, by contacting us with the child’s username or account details.

To exercise these rights, parents must verify their identity (e.g., via email or a signed letter), and we may request additional information to confirm their relationship to the child.

Sthirah implements robust measures to protect children’s personal information, as outlined in Section 7 of the Privacy Policy. These include encryption of data in transit and at rest, access controls limiting employee access to children’s data, and regular security audits. However, no online service is entirely immune to breaches, and we disclaim liability for unauthorized access beyond our reasonable control. In the event of a data breach affecting a child’s information, we will notify the parent within 72 hours (per GDPR standards or as required by the CCPA), via email or the App, provided we have current contact details, and outline steps to mitigate harm.

To ensure compliance with COPPA and enhance child safety, we may restrict certain features or functionalities for users under 13. This could include limiting access to public chat functions, restricting the types of content a child can submit, or disabling location-based services unless explicitly approved by a parent. These restrictions are subject to change based on legal requirements or Sthirah’s discretion, and parents will be notified of significant changes via email.

We may update this Children’s Privacy Policy to reflect changes in our practices, technology, or legal obligations. Any material changes will be communicated to parents via email or a prominent notice within the App, at least 30 days prior to the effective date, allowing time to review and adjust consent if needed. Continued use of the App after such changes constitutes acceptance of the revised policy.

We value your trust and are here to assist with any concerns about your child’s privacy. Please contact us at:Sthirah, Inc. 3903 Garnet Fls, Sugar Land, TX 77479, Houston, Texas Email: info@sherpalai.com