Privacy Policy

Last Updated: October 8, 2026

Effective October 7, 2026, this Privacy Policy has been updated to describe Kubrio as it works today: four studios (Animation Studio, Game Studio, Comic Studio, and Robotics Studio in beta) and Kubrio Learn courses, per-kid plans, public pages for finished projects, the AI providers that process your child's work, the advertising and analytics tools on kubrio.com and the parent dashboard, and Claire, the AI assistant who emails parents. It removes apps and programs that have ended (Discovery, Sketchling, Walkie Talkie and the Crew, Summer Sprints, project tokens, and voice check-ins between Claire and children) and the optional consent for AI model improvement, which Kubrio stopped asking for on September 27, 2026. On October 8, 2026, it added "How long does Kubrio keep my information?": Kubrio keeps the work of every family that has paid, and deletes accounts that have never paid after a period without activity. Your rights as a parent, our COPPA practices, and the state-law sections are unchanged.

Key Points Summary

• Children's Privacy Protection: Kubrio is COPPA-compliant and collects only the information it needs from children. Parents create all accounts and manage access for their children. A parent gives a child's first name and age, and the child chooses an avatar. We obtain verifiable parental consent, through the payment card a parent uses to buy a plan or another COPPA-compliant method, before a child can make anything in Kubrio.
• We Don't Sell or Rent Your Data: We do not and will not sell or rent your or your child's personal information to anyone. Your data is used only to provide and improve our educational services.
• Public Projects and Parental Control: When your child premieres a project, it becomes public at kubrio.com/made with your child's first name, age, and avatar. You and your child can make it private anytime. Children can't send messages or comments to other children. Parents can review and modify their child's information through the parent dashboard, and can request deletion of their child's data by contacting customer service.

Guiding Principles

Kubrio Inc ("we," "us," "our," or "Kubrio") knows that you care about how your Personal Information is used and shared, and we take your privacy seriously. We are committed to protecting the privacy of children who use our site and applications, and have drafted this policy in accordance with the U.S. Children's Online Privacy Protection Act ("COPPA"). For more information about COPPA and general tips about protecting children's online privacy, please visit OnGuard Online. Please read the following to learn more about how we use your Personal Information. By visiting, accessing or using the kubrio.com website, and any other linked pages, features, content, or application services (including mobile applications) offered by Kubrio in connection therewith (collectively, "Kubrio"), or using any of our services, you acknowledge that you accept the practices and policies outlined in this Privacy Policy. Kubrio is where kids ages 6-13 make films, games, comics, and robots, and learn new skills through short video courses. Kids see each other's finished work in a members-only Gallery, and finished projects get public pages, as described in this policy. What Does This Privacy Policy Cover? This Privacy Policy covers Kubrio's treatment of personally identifiable information ("Personal Information") that Kubrio gathers when you access Kubrio and when you use Kubrio's services. This policy does not apply to the practices of companies that Kubrio does not own or control (including any third-party products or services used for logging into Kubrio or that are integrated with Kubrio), or to individuals that Kubrio does not employ or manage. Kubrio may contain links to other sites. Kubrio is not responsible for the privacy policies and/or practices on other sites. When linking to another site a user should read the privacy policy stated on that site. What Personal Information Does Kubrio Collect? The information we gather from users enables us to provide, personalize and improve our services, and allows our users to set up a user account and profile that can be used to personalize their learning experience on Kubrio and see the work of other children in a members-only Gallery. In connection with Kubrio, we request and display some Personal Information to other users and visitors of Kubrio, which allows users to identify one another. We collect the following types of information from our users: Personal Information You Provide To Us: During the account registration process, we receive and store the following information:

• full name of the parent or guardian (first and last name, from the sign-in account you use)

• first name of the child

• parent's email address

• parent current city, country, and location, if you add them to your profile

• your sign-in details, which our authentication provider handles (you can sign in with Google, Apple, or an email address)

• the child's age (to verify age eligibility), and the child's birthday if you add it

• the child's interests and learning preferences, the studios you think your child will enjoy, and the devices your child uses (selected during onboarding)

• your answers to onboarding questions, such as your goals for your child and how you feel about AI

• the cardholder name and billing address you enter at checkout, which our payment processor stores In addition, children choose an "avatar" which will represent them on the service: one of Kubrio's preset cartoons or a cartoon avatar that AI makes from a text description, never from a photo. A child can choose a one-word name to show instead of their first name. Parents create all accounts and manage access for their children across various platforms. Access to Kubrio is available through paid plans, which means parents are verified based on their payment card information. Consistent with the requirements of COPPA, we collect a parent or guardian email address before we collect any Personal Information from a child. We collect credit card information and, for some families, an identity check for verification purposes but do not store that information on our servers. We've partnered with Stripe to help make verification and payments easier and safer. Stripe meets and exceeds the most stringent industry standards for security. You can learn more about the technical details of Stripe's secure infrastructure here. Kubrio does not store full credit card numbers, but instead, only the last four digits and expiration date. If you message Claire by text message or iMessage, we receive and store your phone number and the messages and photos you send. If you send Claire a voice note or talk with Claire by voice, we receive your recording and a transcript of it. Kubrio does not intentionally collect any Personal Information from children other than the information set out above. However, as part of the functionality of our service, children create content in Kubrio, including photos of their paper drawings, the words they type, the words they say when they talk to a studio instead of typing, robot designs and programs, and answers to course quizzes. Children's finished projects appear in the members-only Gallery and on public pages, as described in "Public sharing of your child's creations" at the end of this policy. Before a project goes public on its own, Kubrio checks what your child wrote in it for personal information, but we cannot guarantee the effectiveness of these measures. If you use these features to disclose personally identifiable information, you should be aware that such information could be read, collected, or used by other users and/or third parties. You agree not to provide any personally identifiable information through these features, and we are not responsible for any personally identifiable information that you provide using these features. You can choose not to provide us with certain information, but then you may not be able to create an account or take advantage of many of Kubrio's special features. The Personal Information you provide is used for such purposes as obtaining parental consent as set forth above, providing parents with notice of our privacy practices, answering questions, improving the content of Kubrio, responding to your requests for certain information, products and services, attribution for content you submit, customizing the content you see, and communicating with you about Kubrio's products and services and new features. Personal Information Collected Automatically: We receive and store certain types of information whenever you interact with Kubrio or use our services. Kubrio automatically receives and records information on our server logs from your browser including your IP address, cookie information, browser information, operating system, timezone, device ID, the pages you request, and the actions and path you take on Kubrio. Generally, our service automatically collects usage information, such as the numbers and frequency of visitors to Kubrio and how they use its various components. Kubrio only uses this data in aggregate form, that is, as a statistical measure, and not in a manner that would identify you personally. This type of aggregate data enables us to figure out how users use parts of Kubrio or services so that we can make Kubrio appealing to as many users as possible, and improve those services. As part of this use of information, we may provide aggregate information to our partners about how our users, collectively, use Kubrio or services. We share this type of statistical data so that our partners also understand how people use Kubrio or services, so that they, too, may provide you with an optimal online experience. Again, Kubrio never discloses aggregate information to a partner in a manner that would identify you personally. We may receive a confirmation when you open an email from Kubrio if your computer or device supports this type of functionality. Kubrio uses this confirmation to help us make emails more interesting and helpful and to improve Kubrio and our services. You can opt out of these communications by contacting us at privacy [at] kubrio. dot com. Analytics: Kubrio uses an analytics provider to understand how families use Kubrio. In the app your child uses, Kubrio doesn't load any analytics or tracking code. Kubrio records what your child does in Kubrio (for example, opening a studio or finishing a course) on its own servers and sends those events to the analytics provider under your parent account, not under a profile of your child. On kubrio.com and in the parent dashboard, the analytics provider records page views, clicks, and, on kubrio.com, session recordings. In the parent dashboard, events can include your name and email address, but never your child's name or age. Session recordings on kubrio.com hide what you type into forms. Advertising Measurement: kubrio.com and the parent dashboard use tags from advertising platforms (Google, Meta, and OpenAI) to measure whether our ads lead families to sign up. These tags and our servers send these platforms information such as the pages you visit, ad click identifiers, and, when you buy a plan, a scrambled (hashed) copy of your email address. Kubrio stores the campaign and referral information that brought you to Kubrio with your account. These tags never load in the app your child uses, and no third-party advertising network collects information from children on Kubrio. More About Cookies: Cookies are alphanumeric identifiers that we transfer to your computer's (or other device's) persistent storage medium (e.g., hard drive) through your browser to enable our systems to recognize your browser and tell us how and when pages in our site are visited and by how many people. We use cookies to enhance visitors' experiences, to learn more about their use of Kubrio and to improve quality. Most browsers have an option for turning off the cookie feature, which will prevent your browser from accepting new cookies, as well as (depending on the sophistication of your browser software) allowing you to decide on acceptance of each new cookie in a variety of ways. We strongly recommend that you leave the cookies activated, however, because cookies enable you to take advantage of some of Kubrio's most attractive features. Data We Collect by App: Kubrio is made up of studios and courses. Each kid's plan decides which ones they can use. In addition to the general data described above, each part of Kubrio may collect additional data as follows:

• Animation Studio, Game Studio, and Comic Studio: Photos of paper drawings, the words your child types (titles, story lines, character names, game text, and comic pages), and the project your child finishes. Your child can talk instead of typing: the recording goes to an AI speech-to-text provider, and Kubrio deletes it after turning it into text. AI turns your child's drawings and words into pictures, video clips, music, and game art, and an AI helper responds to what your child types or says.

• Robotics Studio (beta): A photo of your child's paper robot drawing, which AI reads to help build the robot, and the robot's design and program. The photo of the drawing stays private and never appears on a public page.

• Kubrio Learn: Which course films your child watches and for how long, quiz answers, and the stickers your child earns.

• The Gallery: The sticker reactions your child gives to other kids' finished work, which work your child views or plays, and any work your child reports.

• Claire (parent emails and messages): Your replies to Claire, the messages you send her, and what you tell her about your family. AI writes Claire's emails and replies. Data From Apps That Have Ended: Some Kubrio apps have ended or are paused, including Discovery, Sketchling, Walkie Talkie and the Crew, Podcast Studio, Book Club, Biographer, Stocks, and voice check-ins with Claire. Claire no longer talks with children. Kubrio keeps what your child made in these apps until you delete your child's profile or ask us to delete it. That can include drawings, text, Crew conversations, transcripts of check-ins with Claire, and voice recordings from Walkie Talkie, Podcast Studio, Book Club, and Biographer. To review or delete this data, contact us at privacy [at] kubrio. dot com. AI Processing and Consent: Kubrio's studios use artificial intelligence to deliver core features. AI processing of your child's content requires your explicit consent, which you give in its own required step during sign-up, before your child can use Kubrio. Our AI service providers process your child's content only to provide the feature, and Kubrio shares with them only what each feature needs. Without this consent, AI-powered features will not be available for your child. To withdraw this consent, contact us at privacy [at] kubrio. dot com. Because the studios depend on AI, withdrawing it ends your child's use of the studios. Kubrio doesn't use your child's content to train AI models. Until September 27, 2026, Kubrio offered an optional consent to use anonymized usage patterns to improve its AI features. Kubrio no longer asks for or uses that consent. Will Kubrio Share Any Of The Personal Information It Receives? Personal Information about our users is an integral part of our business. We neither rent nor sell your Personal Information to anyone. To be absolutely clear, we do not and will not sell your, or your child's data. With Respect To A Child's Personal Information: Kubrio will not send Personal Information about a child to other companies or people, except when: we have a parent's consent to share the information, including the AI processing and public sharing you agree to at sign-up, or with the service providers that help us run Kubrio as described below; or we are required to do so to comply with the law, including for example, to comply with a court order or subpoena; to enforce our Terms of Service, or site rules; or to protect the safety and security of our users and site. If Kubrio, or substantially all of its assets were acquired, or in the unlikely event that Kubrio goes out of business or enters bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. As set forth below, you acknowledge that such transfers may occur, and that any acquirer of Kubrio may continue to use your Personal Information as set forth in this policy. User profile information including a child's first name (or chosen one-word name), age, and avatar, and the projects children finish ("User Submissions"), may be displayed to other users and, on public pages, to visitors. With respect to Personal Information other than a child's Personal Information: WE SHARE SUCH PERSONAL INFORMATION ONLY AS DESCRIBED BELOW. Affiliated Businesses We Do Not Control: We anticipate that we may become affiliated with a variety of businesses and work closely with them. In certain situations, these businesses may sell items to you through Kubrio. In other situations, Kubrio may provide services, or sell products jointly with affiliated businesses. You can easily recognize when an affiliated business is associated with your transaction, and we will share your Personal Information that is related to such transactions with that affiliated business. Service Providers We engage third party companies and individuals to perform services on our behalf (e.g., software maintenance services, email service providers, delivery services, database management, web analytics, payment processing and other services). These third parties have access to your information so that they may perform these tasks on our behalf. They process it only to provide this assistance, and Kubrio shares with them only the information each task needs. We may permit our service providers to use aggregate information which does not identify you or de-identified data for other purposes. Third-Party Services: These categories of service providers process data for Kubrio:

• AI service providers: make images, video clips, music, and game art from your child's drawings and words; turn your child's speech into text; check uploaded drawings for safety; power the AI helper in the studios; and write Claire's emails and replies.

• Cloud hosting and storage: run Kubrio and store account data, projects, and files for the duration of the account.

• Authentication: handles parent sign-in. Only parent email and sign-in details are processed.

• Payment processing and identity verification: handle plan billing and, for some families, an identity check. Parent payment details are processed by the payment provider and not stored by Kubrio.

• Email and text messaging: send Kubrio's emails, receive your replies, and carry the text messages and iMessages you exchange with Claire.

• Analytics and advertising measurement: as described in "Personal Information Collected Automatically". Consent For Internal Media Usage Kubrio is a place where children make things and learn. When your child finishes a project, it hangs in the Kubrio Gallery, which only Kubrio members (children and parents with Kubrio accounts) and Kubrio can see. Other children see the project with your child's first name (or chosen one-word name) and avatar, and can react with a preset sticker. There are no comments or messages. From your parent dashboard, you can hide any project from everywhere, including the Gallery. Consent For External Media Usage When your child premieres a project, it becomes public at kubrio.com/made, and Kubrio can feature it on kubrio.com, as described in "Public sharing of your child's creations" at the end of this policy. You agree to this when you sign up, and you and your child can make any project private anytime. We celebrate the fantastic work of Kubrio students, and with separate parental consent, we may share their work on social media and other platforms, such as our Blog and our YouTube channel. We will only share children's work on social media if parents provide explicit consent and the content does not contain Personal Information. Business Transfers: In some cases, we may choose to buy or sell assets. In these types of transactions, user information is typically one of the business assets that are transferred. Moreover, if Kubrio, or substantially all of its assets were acquired, or in the unlikely event that Kubrio goes out of business or enters bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of Kubrio or its assets may continue to use your Personal Information as set forth in this policy. Protection of Kubrio and Others: We may release Personal Information when we believe in good faith that release is necessary to comply with the any applicable law, regulation or other legal requirement; enforce or apply our conditions of use and other agreements; or protect the rights, property, or safety of Kubrio, our employees, our users, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction. Except as set forth above, you will be notified when your Personal Information may be shared with third parties, and will be able to prevent the sharing of this information. Is Personal Information About Me Secure? Your child's Kubrio account is protected by your parent sign-in for your privacy and security. You need to ensure that there is no unauthorized access to your account and Personal Information by selecting and protecting your password appropriately and limiting access to your computer (or other device) and browser by signing off after you have finished accessing your account. Kubrio endeavors to protect user information to ensure that user account information is kept private, however, Kubrio cannot guarantee the security of user account information. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time. Kubrio contains links to other sites. Kubrio is not responsible for the privacy policies and/or practices on other sites. When linking to another site you should read the privacy policy stated on that site. This Privacy Policy only governs information collected on Kubrio. Please be aware that whenever you voluntarily post information to public areas on Kubrio or any other public forums, such information can be accessed by the public. Security Measures We Employ:

• Encryption of data in transit and at rest

• Secure authentication and password protection

• Access to personal information limited to Kubrio's founder and the automated systems that run the service, on a need-to-know basis

• Deletion of a child's data on request, as described in this policy

• Monitoring for unauthorized access or suspicious activity Data Breach Notification In the unlikely event of a data breach that affects your or your child's personal information, we are committed to transparency and prompt notification: What We Will Do:

• Investigate the breach immediately to determine its scope and impact

• Take steps to contain the breach and prevent further unauthorized access

• Notify affected parents by email within 72 hours of discovering the breach

• Provide details about what information was compromised

• Explain what steps we are taking to address the breach

• Offer guidance on steps you can take to protect your family

• Report the breach to appropriate authorities as required by law What Information We Will Provide:

• The date and nature of the breach

• The types of personal information that were compromised

• Whether the breach affected your child's account

• What we are doing to investigate and resolve the issue

• Resources and support available to you

• Contact information for questions and assistance Your Response Options:

• We will provide guidance on protective measures you can take

• We will offer support in monitoring for any misuse of information

• You may request immediate account closure and data deletion if desired

• We will work with you to restore security and confidence in our platform We take data security seriously and work continuously to protect your family's information. What Personal Information Can I Access? Kubrio allows you to access the following information about you for the purpose of viewing, and in certain situations, updating that information. This list will change as Kubrio changes.

• Real (full) name of parent and child

• Account and user profile information

• Parent email address

• Sign-in details

• User preferences

• Billing preferences Parents may review information relating to their child's account at any time by signing in to the parent dashboard on the website. Expanded Parental Rights: As a parent, you have comprehensive rights to access and control your child's information: Right to Review:

• All personal information collected from your child

• All AI interactions and conversations your child has had

• All content created by your child

• Learning progress and activity history

• The sticker reactions your child gave and received, and any reports your child made Right to Download:

• Request a complete export of your child's data in a portable format

• Download all of your child's work, projects, and creations

• Export learning progress and achievement records Right to Modify:

• Update your child's profile information

• Change your child's name or avatar

• Modify privacy settings and preferences Right to Delete:

• Request deletion of your child's personal information

• Request deletion of specific content or projects

• Request deletion of AI interaction history

• Close your child's profile entirely Right to Control:

• Make any of your child's projects private, or make a private project public

• Hide any project from everywhere, including the members-only Gallery

• Withdraw consent for AI processing, as described in "AI Processing and Consent"

• Control which features your child can access How to Exercise These Rights: A parent can contact our customer service department to access, change, or request deletion of Personal Information by contacting us at privacy [at] kubrio. dot com. We will respond to your request within 30 days. You can also delete your child's profile or your account from your parent dashboard. When you do, Kubrio deletes your child's data, including projects, drawings, recordings, and files, within 30 days. Please note that Personal Information about a child may remain in backup storage for up to 90 days after a request for deletion of that child's data. This may be the case even though no information about that account remains in our active user databases. Some information may be retained as required for legal compliance, safety, and fraud prevention purposes as described in "How long does Kubrio keep my information?" later in this policy. How long does Kubrio keep my information? Kubrio keeps your family's information only as long as it needs it to run your account. This is Kubrio's data retention policy:

• If you've paid for a Kubrio plan or pack, Kubrio keeps your child's projects as a portfolio for as long as your account exists, including after you cancel. Your child may want to show this work years from now. You can delete any project, your child's profile, or your account at any time.

• If you've never paid, Kubrio deletes your account after a period without activity. An account is active when you sign in to the parent dashboard or your child uses Kubrio.

• An account with no child profile and unfinished setup is deleted 30 days after signup. Claire emails you at least 7 days before.

• Any other account that has never paid is deleted after 180 days without activity. Claire emails you 30 days before the deletion. If you or your child sign in before the date in that email, Kubrio keeps the account.

• A payment that was fully refunded counts as never paid.

• When Kubrio deletes an inactive account, it deletes your child's data the same way as when you delete it yourself, including projects, drawings, recordings, files, and public pages.

• Kubrio keeps billing records, such as invoices and payment history, for as long as tax and accounting law requires, usually 7 years. Billing records don't include your child's work.

• Deleted data may remain in backup copies for up to 90 days. When Does Kubrio Obtain Parental Consent? Kubrio collects multiple forms of parental consent to comply with COPPA: CONSENT 1: GENERAL SERVICE (BY PURCHASE) In order for a child to make things in Kubrio, a parent or guardian must buy a plan for that child by providing their credit card information. Access to Kubrio is available through paid plans, which means parents are verified based on their credit card information. Some families who joined before September 28, 2026 were verified through an identity check instead. In purchasing access, the parent or guardian grants us permission to collect necessary Personal Information from their child. Some families receive access without a card payment, for example through a promotion or a partner program. For those families, Kubrio verifies the parent through another method it offers, such as an identity check, before a child can make anything. These verification methods are designed to comply with COPPA and to make sure an adult is the one signing a child up for Kubrio. CONSENT 2: AI PROCESSING AND PUBLIC SHARING (REQUIRED, GIVEN IN ITS OWN SIGN-UP STEP) During sign-up, parents are presented with a separate consent screen. On it, you consent to AI processing of your child's content and agree that your child's projects become public when your child premieres them. Kubrio's studios use AI to deliver features (for example, Animation Studio turns drawings into animations). Our AI service providers process your child's content only to provide the feature, and Kubrio shares with them only what each feature needs. This consent is separate from your purchase. You can withdraw it at any time by contacting us at privacy [at] kubrio. dot com, and you can make any project private at any time from your parent dashboard. Without this consent, AI-powered features will not be available. CONTENT GENERATED BY A CHILD Certain activities on our sites and applications allow children to create content (like films, games, comics, robots, and photos of their drawings) within Kubrio. By registering and creating an account for your child on Kubrio, you grant us permission to show your child's finished content in the members-only Gallery and, when your child premieres it, on a public page, as described in "Public sharing of your child's creations". Any sharing of your child's content on our social media channels requires separate explicit parental consent and will only occur if the content does not contain Personal Information. INTERACTIONS BETWEEN CHILDREN Children can't send messages or comments to other children on Kubrio. In the members-only Gallery, children can see other children's finished projects with their first name (or chosen one-word name) and avatar, react with a preset sticker, see which children viewed their work, and report a project that looks wrong. Public pages have no comments, reactions, or contact features. Safety Checks: Kubrio checks for:

• Personal information in what your child writes in a project, such as a phone number, an email address, a web address, a street address, a school name, or your family's last name, before the project goes public on its own

• Drawing photos that don't look safe, using an AI safety check before a studio uses the drawing

• Projects that other children report What Happens: When a check finds something:

• A project with personal information stays private, and we email you what we noticed

• An unsafe drawing isn't used, and Kubrio logs a safety alert on your child's account

• Kubrio reviews reported projects and can remove them

• Repeat violations may result in account suspension These measures are designed to prevent the communication of Personal Information and age-inappropriate content. We strongly encourage children never to provide Personal Information about themselves or any third party in their projects, and certainly never to attempt to circumvent our safety measures. We also recommend that parents carefully supervise their children when they participate in online activities. When Will Kubrio Email Me? We may use your contact information to send emails to you about Kubrio and other related topics that may be of interest to users of Kubrio. Many of these emails come from Claire. Claire is an AI assistant, not a person: AI writes her emails and her replies when you write back, and Kubrio can read your conversations with her. You can opt out of these communications by contacting us at privacy [at] kubrio. dot com. As part of Kubrio's services, you will receive email and other communication relating to your child's User Submissions, such as an email when your child premieres a project. You acknowledge and agree that by posting such User Submissions, Kubrio may send you email and other communication that it determines in its sole discretion to be related to your User Submissions. Please note that if you do not want to receive legal notices from us, such as this Privacy Policy, those legal notices will still govern your use of Kubrio, and you are responsible for reviewing such legal notices for changes. Changes To This Privacy Policy Kubrio may make changes to this Privacy Policy from time to time. Use of information we collect now is subject to the Privacy Policy in effect at the time such information is used. If we make changes in the way we use Personal Information, we will notify you by posting an announcement on Kubrio or sending you an email. Users are bound by any changes to the Privacy Policy when he or she uses Kubrio after such changes have been first posted. If we make material changes to how we collect, use, or disclose children's personal information, we will notify parents by email and obtain renewed consent where required by COPPA. In such cases, you will be presented with updated consent screens upon your next login. California Privacy Rights If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): Your California Rights:

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell about you and your child

• Right to Delete: You have the right to request deletion of personal information we have collected about you or your child, subject to certain exceptions

• Right to Opt-Out: You have the right to opt out of the "sale" or "sharing" of personal information. Note: We do NOT sell personal information for monetary consideration, and we don't use your child's content to train AI models. The advertising tags on kubrio.com and the parent dashboard, described in "Personal Information Collected Automatically", may be considered "sharing" of your information under California law. You can opt out by contacting us.

• Right to Correct: You have the right to request correction of inaccurate personal information

• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information (such as your child's biometric data - which we do not collect)

• Right to Non-Discrimination: You have the right to not receive discriminatory treatment for exercising your privacy rights Information We Collect (California Summary):

• Identifiers: Parent and child names, email addresses (parent only), a parent's phone number if they message Claire, child avatars, and advertising and device identifiers for parents and visitors

• Internet Activity: How you and your child use our platform, pages visited, features used

• Geolocation Data: General location (city/state) for parent account, if you add it

• Audio Information: Your child's speech when they talk to a studio (deleted after it's turned into text), recordings kept from apps that have ended, and your voice if you talk with Claire by voice

• Education Information: Child's learning progress, quiz answers, work created, interactions with educational content

• Commercial Information: Payment and transaction history How We Use Information:

• To provide educational services

• To improve our platform

• To communicate with parents

• To ensure child safety and COPPA compliance

• To process payments

• To measure our advertising (parent and visitor information only) Who We Share Information With:

• Service providers (hosting, analytics, payment processing, AI services, email and messaging) as described in the "Third-Party Services" section

• Advertising platforms, for parents and visitors only, as described in "Personal Information Collected Automatically"

• We do NOT sell personal information to third parties for monetary consideration Exercise Your California Rights: Contact us at privacy [at] kubrio. dot com. We will respond to verifiable requests within 45 days. You may designate an authorized agent to make requests on your behalf by providing written authorization. California Minors' Rights to Content Removal: If you are a California resident under 18, you may request removal of content or information you posted on Kubrio. To request removal, contact us at privacy [at] kubrio. dot com. Please note that removal does not ensure complete deletion from backup systems, and we may retain the information as required by law or as described in "How long does Kubrio keep my information?" Questions Or Concerns If you have any questions or concerns regarding privacy on Kubrio, please contact us at privacy [at] kubrio. dot com For information about your rights and responsibilities as a user, please also review our Terms of Service at kubrio.com/terms Additional Resources for Parents:

• Federal Trade Commission (FTC) - Protecting Kids Online

• Common Sense Media - Protecting Kids Online

• National Center for Missing & Exploited Children - NetSmartz