Privacy Policy

This Privacy Policy explains how PixelOS App, Inc. ("PixelOS," "we," "our," or "us") collects, uses, discloses, retains, and protects personal information through our websites, applications, classes, and related services (collectively, the "Services").

PixelOS is a United States service designed for children in a parent-managed, guardian-managed, school-managed, or other authorized educational setting. This Policy includes our Children's Privacy Notice for children under 13 and their parents or legal guardians.

1. Who We Are

PixelOS App, Inc. is the operator of the Services.

Postal address: 2503 7th Street, Santa Monica, CA 90405, United States
Email: [email protected]

2. Scope

This Policy applies to information processed through:

• https://www.pixelos.app and other PixelOS-operated web experiences
• PixelOS parent, child, student, educator, and organization accounts
• PixelOS mobile applications
• Family subscriptions, paid classes, camps, and educational programs
• Waitlists, onboarding, support, and account communications
• Creative tools for generating apps, games, images, music, stories, and other content

This Policy does not govern an independent third-party service that a user chooses to visit outside PixelOS.

3. How Children Access PixelOS

Children do not enter into a contract with PixelOS or independently purchase access.

For individual family access, an adult creates and authenticates the parent account, reviews the direct Children's Privacy Notice, affirmatively consents for the identified child, and completes the applicable payment flow before the child uses the full Services. The completed card or App Store transaction is used to verify that consent.

For direct-to-family paid classes, the parent account controls enrollment. PixelOS verifies the parent's email before checkout, the parent provides the child's profile and age range, reviews the direct Children's Privacy Notice, affirmatively consents for that child, makes the one-time class payment that verifies the consent, and chooses whether the child's prompts may appear in private parent reports.

For a school, camp, or organization program, the organization and participating adults must have authority to provide the child's access and any legally required notice or consent. A separate agreement with the organization may also apply.

4. Children's Privacy Notice

Information we collect about a child

Depending on the features the child uses, we may collect:

• A screen name, first name, nickname, or similar profile name provided by a parent or authorized program
• An age range or privacy age bucket, rather than a full birth date
• Class, camp, organization, or enrollment information
• Parent-selected interests, safety settings, restrictions, and permissions
• Prompts, text, drawings, images, and other creative inputs
• Generated apps, games, images, music, stories, code, project files, and saved project state
• Safety signals and reports associated with a prompt or creation
• Pseudonymous identifiers used to keep the child's work in the correct account or program workspace
• Limited device, usage, security, and diagnostic information described below

We do not require a child to provide more personal information than is reasonably necessary to participate in an activity.

How we use children's information

We use children's information to:

• Provide the creative experience requested by the child and authorized adult
• Generate, save, display, revise, and restore the child's creations
• Apply age-appropriate safety controls, content moderation, and parent settings
• Operate paid classes, camps, and educational programs
• Provide private reports when a parent has enabled prompt reporting
• Prevent abuse, investigate security or safety incidents, and troubleshoot failures
• Comply with law and enforce our Terms of Use

We do not sell children's personal information, show behavioral advertising to children, or use children's information to build advertising or marketing profiles.

Publishing and sharing

Children may use a game link to share a generated game. The shared game page contains the game itself and does not display the child's profile, parent account, email address, contact information, or other account details. A game link may be accessible to anyone who receives it.

Children should not place their own or another person's personal information in a game. PixelOS may block or remove a shared game that contains personal information, unsafe material, or content that violates our Terms of Use. Parents may contact us to request removal of a shared game.

Voice input

On supported mobile devices, speech may be converted to text using the device's speech-recognition features. PixelOS receives the resulting text and does not retain the microphone recording.

When web voice input is used, live microphone audio is sent to a transcription service only to create the requested text transcript. PixelOS does not save the raw microphone audio. Once submitted, the transcript is treated like a typed prompt.

Parents' choices and rights

A parent or legal guardian may:

• Review the categories of information collected from their child
• Request access to specific information associated with their child
• Correct the child's profile information
• Refuse further collection or use of the child's information
• Revoke consent and disable the child's access
• Request deletion of the child's information or the family account

Submit a request to [email protected]. We will verify that the requester controls the relevant parent account or otherwise has authority to act for the child. A child will not be required to disclose additional personal information as a condition of a parent's exercise of these rights.

5. Other Information We Collect

Parent, guardian, and educator information

We may collect:

• Name, email address, authentication credentials, and account identifiers
• Email-verification and parental-consent records, including the notice version, method, source, and date
• Child-profile information the adult provides
• Family subscription, class enrollment, camp, and organization information
• Payment status, billing provider identifiers, purchase history, and limited payment-method details such as card brand and last four digits; PixelOS does not receive full payment-card numbers
• Messages, feedback, survey responses, waitlist submissions, and support requests

Information collected automatically

We may collect:

• IP address and approximate location derived from it
• Browser, device, operating-system, and application information
• Sign-in, session, and security-cookie information
• Pages or screens viewed and features used
• Pseudonymous account, child, organization, app, and request identifiers
• Timestamps, error details, performance measurements, and abuse-prevention signals

We use cookies and similar technologies to authenticate accounts, remember settings, protect the Services, and understand service reliability. Disabling essential cookies may prevent signed-in features from working.

6. How We Use Information

We use personal information to:

• Provide, personalize, maintain, and secure the Services
• Authenticate adults and keep child work connected to the correct managed account
• Process subscriptions, class purchases, and enrollment
• Fulfill AI generation, transcription, moderation, and creative requests
• Apply parent, teacher, organization, and safety controls
• Send transactional, class, account, security, and service communications
• Measure reliability, diagnose problems, prevent fraud or abuse, and improve service operations
• Respond to support and privacy requests
• Meet legal obligations and protect users, PixelOS, and others

PixelOS does not use children's prompts, creative inputs, or creations to train PixelOS models or general-purpose AI models. We send this content to AI service providers only to provide requested generation, transcription, moderation, and safety features. A provider may temporarily retain inputs and outputs under its applicable API terms, including for safety and abuse monitoring. We do not intentionally submit child content for provider model training.

7. When We Disclose Information

We disclose only the information reasonably necessary for the following purposes:

• AI generation, transcription, and safety providers: to process prompts, inputs, and requested outputs; transcribe voice input; and moderate content
• Cloud hosting, storage, database, and secure sandbox providers: to run the Services and store account data and creations
• Authentication, email, and customer-support providers: to sign users in, verify parent email addresses, and deliver service communications
• Payment providers and app stores: to process family subscriptions and one-time class purchases, prevent fraud, and maintain billing records
• Analytics and observability providers: to measure service operation, investigate failures, and protect the Services; browser analytics uses no account identity or browser storage and uses a daily-rotating, non-reversible measurement identifier
• People who receive a game link: to display the generated game requested by the user; the shared page does not display the child's profile or account details
• Schools, camps, and organizations: to administer an authorized program and provide information to authorized staff under the applicable agreement and parent settings
• Professional advisers and authorities: when reasonably necessary for legal, accounting, audit, security, or compliance purposes, or when required by law
• A successor organization: as part of a merger, financing, reorganization, acquisition, or sale, subject to continued protection of personal information and applicable notice requirements

AI and other service providers process information under their applicable service terms and data controls. Some providers may temporarily retain service data for operational, safety, and abuse-monitoring purposes.

PixelOS does not sell personal information for money, share it for cross-context behavioral advertising, or disclose children's personal information for targeted advertising.

Service providers that may collect or maintain children's information

Depending on the feature used, the service providers that may collect or maintain children's information on our behalf include Vercel, OpenAI, Google, fal.ai, Modal Labs, E2B, Cloudflare, Neon, Turso, PostHog, Langfuse, Inngest, Resend, Stripe, Autumn, and Apple. Some AI features offered through fal.ai or another gateway may be processed by the model provider identified for that feature, including Google, ElevenLabs, or MiniMax. PixelOS App, Inc. is the operator designated to answer parents' questions about all of these information practices at the postal and email addresses in Sections 1 and 13.

8. Data Retention and Deletion

We apply the following retention rules:

• Active accounts and creations: retained while the account remains active and the information is needed to provide the requested Services, unless the parent deletes the content sooner
• Prompts and creative inputs: retained by PixelOS only as needed to provide the requested creation, maintain an authorized project history or private parent report, apply safety controls, and troubleshoot the Services; copies held in PixelOS safety and observability systems are deleted within 30 days and are not retained by PixelOS for AI training; AI providers may temporarily retain inputs and outputs under their applicable API terms
• Closed accounts and deletion requests: a verified request creates a durable deletion job that removes published games, private creations, databases, stored objects, sandboxes, analytics records, and PixelOS-controlled observability records before deleting the active account record; where a provider completes deletion asynchronously, the job first submits an accepted deletion request; failed provider requests are retried from a retained deletion manifest; remaining backup copies age out under provider backup and object-version lifecycles of no more than 30 days; an AI provider may temporarily retain service data under its API terms as described above
• Safety and observability records: retained for no longer than 30 days, unless a specific record must be preserved to investigate an active safety or security incident or comply with law
• Raw microphone audio: not retained by PixelOS after transcription
• Transaction and legal records: retained only for the period required for payment reconciliation, tax, fraud prevention, chargebacks, dispute resolution, or another legal obligation; child creative content is not retained merely because a transaction record must be kept

When information is no longer reasonably necessary for the stated purpose, we delete it or de-identify it so it is no longer reasonably linked to a child or account. We periodically review this retention schedule and our deletion practices.

9. Data Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information. These measures include access controls, authentication protections, scoped child workspaces, safety monitoring, provider review, and procedures for identifying and responding to security incidents.

No online service can guarantee absolute security. Parents should protect their credentials and notify us promptly about suspected unauthorized access.

10. United States Service

PixelOS currently offers the Services in the United States. Our systems and service providers may process information in the United States and other locations where they operate, subject to the protections described in this Policy and applicable law.

11. Privacy Requests

Subject to applicable law, an adult account holder may request access, correction, deletion, or a portable copy of eligible personal information. Parents may also exercise the child-specific rights described in Section 4.

Email [email protected]. We may ask the requester to authenticate the parent account, confirm the verified email address, or provide other information reasonably necessary to verify authority. We will not discriminate against a user for exercising a privacy right.

12. Changes to This Policy

We may update this Policy as the Services or legal requirements change. We will update the date above and provide additional notice when a change is material. If a change affects information previously collected from a child in a way that requires new parental consent, we will obtain that consent before applying the new practice.

13. Contact Us

PixelOS App, Inc.
2503 7th Street
Santa Monica, CA 90405
United States
[email protected]