HeyLabs AI ("we", "our", or "us") is an artificial intelligence platform designed to inspire curiosity, support learning, and empower innovation through AI-powered experiences. We are committed to protecting the privacy of all users, especially children, and we comply with the Children's Online Privacy Protection Act (COPPA) for users under the age of 13, and with general best privacy practices for users aged 13 and above.
This Privacy Policy explains how we collect, use, share, and protect personal information on HeyLabsAI.com, and outlines your rights and choices whether you are a child, parent, or teacher.
Who Does This Policy Apply To?
If you are under 13, we will request verifiable consent from your parent or legal guardian before collecting any personal information.
If you are 13 or older — including teenagers, parents, or teachers — your data will be processed in accordance with applicable privacy laws and practices.
Section 2: Information We Collect
HeyLabs AI is designed to minimise the collection of personal information, especially from children. We collect only what is necessary to provide a safe and personalised experience.
For All Users (Under and Over 13)
We may collect:
Age or birth month/year (for age screening purposes).
Learning preferences and interests (selected topics, areas of curiosity, etc.).
Usage data (e.g. time spent, session history, types of questions asked).
Progress records (e.g. completed lessons, badges earned, feedback logs).
Login credentials (e.g. username and password; real names are never used unless voluntarily provided).
Parent or teacher email addresses (for account creation, notifications, or approvals).
For Children Under 13
We do not collect contact details, photos, location data, or other identifiable personal information unless a parent has given permission.
We send a parental notification and obtain consent before enabling any feature that stores or shares a child's learning progress.
If consent is not received, all data is deleted within 7 days of registration.
For Users Aged 13 and Over
We may collect email addresses and allow progress sharing without additional parental consent.
We still limit data collection to educational and operational purposes only.
We allow users to access or delete their personal information upon request.
We do not support public posts, open community features, or advertising networks that collect data from users.
Section 3: Age Screening
HeyLabs AI uses a neutral age-determination process for student accounts only, in order to comply with the Children's Online Privacy Protection Act (COPPA). This allows us to determine whether parental consent is required before collecting or storing personal information.
Student Accounts
When a child registers as a student, we ask for their birth month and year to determine whether they are under 13. The age entry form is neutral and does not encourage or discourage users from estimating their age.
If the user is under 13:
We allow them to continue using the platform temporarily and ask them to enter a parent's or legal guardian's email address.
We then send a direct notification to the parent requesting verifiable parental consent.
If consent is not received within 7 days, the student's account will be deactivated and all associated data will be securely deleted.
Parent and Teacher Accounts
We do not collect age information for parent or teacher accounts. Parents and teachers may create accounts using an email address or single sign-on options (such as Google Sign-In). These users are subject to the standard privacy protections described in this policy.
Section 4: Parental Consent
HeyLabs AI is committed to protecting the privacy of children under the age of 13 in accordance with the Children's Online Privacy Protection Act (COPPA). We may not collect, use, or store personal information from a child under 13 without first obtaining verifiable consent from a parent or legal guardian.
How Do We Request Consent?
When a child indicates during registration that they are under 13:
We ask the child to enter their parent's or legal guardian's email address.
We send a direct notification to the parent explaining what information may be collected, how it will be used, and the consent process.
We also provide a link to this Privacy Policy in full, along with instructions on how to approve or decline the account.
If Consent Is Not Provided
The child may continue to use the platform in a limited mode for up to 7 days while awaiting consent.
If verifiable parental consent is not received within 7 days of registration, the child's account will be deactivated and all associated data will be permanently deleted.
What Counts as Consent?
Depending on the nature of the features being enabled, we may accept the following as verifiable parental consent:
Email confirmation from the parent (e.g. clicking a verification link or replying to confirm).
For features that may enable public sharing or external communications, we may require a stronger form of consent such as credit card verification, a signed consent form, or telephone/video confirmation.
Parental Rights
Review the personal information we have collected about their child.
Revoke consent at any time.
Request deletion of their child's account and all associated data.
Instructions for exercising these rights are provided in Section 8 of this policy.
Section 5: How We Use Information
HeyLabs AI collects limited information in order to provide users with a safe, personalised, and educational experience while protecting their privacy.
For All Users
We use the information collected (such as age, selected topics, and usage patterns) to:
Personalise learning recommendations and AI interactions.
Provide badges or other motivational feedback that tracks progress.
Maintain account security and the integrity of the system.
Conduct usage analytics to improve our services.
We do not use information for marketing or behavioural advertising purposes.
For Children Under 13
If a child is under 13, we use their information only to:
Operate the educational features of the platform.
Show their learning progress to their parents and any teachers explicitly invited by a parent.
Maintain internal records (e.g. session history, topic preferences).
Obtain parental consent or comply with legal obligations as required.
We do not:
Display public profiles.
Enable messaging features.
Collect contact, photo, or location data.
Use persistent identifiers other than for session management or internal analytics.
For Parents and Teachers
We may use parent and teacher information to:
Manage linked student accounts.
Send notifications and reports about student progress.
Provide access to administration dashboards.
Offer product updates or support.
Parent and educator accounts are never used for advertising targeting or sold to third parties.
Section 6: Information Sharing
HeyLabs AI is designed with privacy and security as top priorities. Regardless of a user's age, we do not sell, rent, or disclose personal information to third parties for marketing or advertising purposes.
When May We Share Information?
We may share limited information only in the following circumstances:
With parent-approved teachers: A child's learning progress (e.g. completed lessons, badges, time spent) may only be shared once a parent has approved sharing. Children under 13 cannot initiate sharing on their own. Parents may revoke access at any time. These teachers may only view data and may not communicate with the child via the platform.
With service providers (internal support only): We may work with trusted service providers who support our platform (e.g. cloud hosting, analytics, customer support). These providers may only access anonymised or limited data strictly to serve us, under strict confidentiality obligations. They may not use the data for any other purpose, and no behavioural advertising is permitted.
When legally required: We may disclose information if required by law, regulation, legal process, or to protect the safety of children or users (e.g. to comply with a court order).
What We Never Do
We do not permit third-party advertising networks or tracking services.
We do not display public profiles or leaderboards visible to others.
We do not allow children to share content publicly (e.g. in forums or comment sections).
Section 7: Data Security and Retention
HeyLabs AI takes the security and integrity of all user data seriously, especially when children are involved.
Security Measures
We use a combination of technical, administrative, and physical safeguards, including:
Secure HTTPS encryption during data transmission.
Password protection and minimum strength requirements for all accounts.
Firewalls and access controls to restrict access to stored data.
Role-based permissions for internal staff.
Confidentiality agreements with employees and service providers.
We do not store sensitive identifiers (e.g. photos, location data) and do not permit personal information to be shared publicly.
Data Minimisation
We collect and retain only the information reasonably necessary to provide our educational services. In particular, the platform is designed to operate with minimum data, especially for children under 13.
Data Retention and Deletion
We retain personal information only for as long as necessary to support active accounts or to comply with legal requirements.
If verifiable parental consent is not received within 7 days of a child under 13 registering, we delete the account and all associated data.
Upon request by a parent, teacher, or user, we will promptly and securely delete personal data.
All deletions are carried out using secure methods to prevent recovery.
Section 8: Your Rights and Choices
HeyLabs AI respects your right to control your personal information. This section explains how parents, students, and educators can access, review, or delete data associated with an account.
For Parents of Children Under 13
If your child is under 13, you have the right to:
Review the personal information we have collected about your child.
Revoke any consent you have previously provided.
Delete your child's account and associated data at any time.
Prevent future collection or use of your child's information.
You may exercise these rights by:
Logging into your parent account.
Using the tools available in your dashboard.
Contacting us via our privacy email address (listed in Section 10).
We may need to verify your identity before making any changes.
For Users Aged 13 and Over
You may access and update your account information.
You may request deletion of your personal information.
You may review linked student progress data (if authorised).
All users may delete their accounts at any time; we will process deletion requests promptly.
Section 9: Data Transfers and Third Parties
HeyLabs AI is operated by a US-based company. By using our platform, you understand that your personal information may be transferred to, stored in, and processed in the United States, where our servers and service providers are located.
International Users
If you are located outside the United States, including within the European Union (EU), please be aware that US data protection laws may differ from those in your jurisdiction. By using HeyLabs AI, you consent to the transfer and processing of your information as described in this Privacy Policy.
Third-Party Service Providers
We work with a limited number of third-party service providers to support our operations, including:
Cloud infrastructure and hosting providers.
Analytics tools used strictly for internal service improvement.
Customer support platforms.
These service providers are:
Contractually obligated to keep data secure and confidential.
Prohibited from using children's data for advertising or profiling purposes.
Permitted access only to the minimum data necessary to fulfil their function.
HeyLabs AI does not use behavioural advertising services or permit external advertising networks.
Section 10: Contact, Updates and Complaints
We are committed to protecting your privacy and responding promptly to any concerns.
Contact Us
If you have questions about this Privacy Policy or wish to make a request concerning personal information about you or your child, please contact us:
Postal Address: HeyLabs AI (operated by HeyLabs, Inc.)
1207 Delaware Avenue #3426 Wilmington, DE 19806 United States of America
Privacy Policy Updates
This Privacy Policy may be updated from time to time. When we make changes, we will revise the "Last Updated" date at the top of the policy. If we make significant changes, we will notify parents of registered children by email or through their dashboards before the changes take effect. We encourage all users and parents to review the policy regularly.
For EU Users
If you reside in the European Union, you acknowledge that your personal data may be transferred to and processed in the United States. Although the US may not offer the same level of protection as your jurisdiction, we implement security measures to protect your data and comply with this Privacy Policy.
Section 11: GDPR Compliance (For Users in the European Union)
If you are located in the European Union, the processing of your personal data is subject to the General Data Protection Regulation (GDPR). This section explains your rights and how HeyLabs AI complies with these requirements.
Data Controller
HeyLabs AI is operated by:
HeyLabs, Inc. 1207 Delaware Avenue #3426 Wilmington, DE 19806 United States of America
Your personal data may be transferred to and processed in the United States. We use contractual and organisational security measures to protect your data in compliance with GDPR standards.
Special Note Regarding Children
For children under the age of 16 in the EU, consent must be provided by a parent or legal guardian. Our system requires verifiable parental consent for users under 13 before any data is collected or stored.
← Back to Home