Children's privacy notice
Heads up: Draft for review
For parents and guardians of children under 13. What Sixly collects from a child, why, who receives it, how long it's kept, and your rights.
Accounts for children under 13 aren't open yet. Sixly will open them only after a lawyer has reviewed this notice and how we verify consent.
Who runs Sixly
Sixly is run by IvyPath LLC, doing business as Sixly.
- Address: [mailing address to add]
- Phone: [phone number to add]
- Email: privacy@sixly.ai
For review, needs a lawyer: 312.4(d)(1) needs the operator's name, address, phone and email. IvyPath LLC until Sixly, Inc. exists (D-009). A change of operator is a material change: every child's account pauses until the parent consents again (see Changes). docs/legal/operator-entity-timing.md recommends no under-13 accounts until Sixly, Inc. is the operator, so consent is collected once.
How a child joins
- You join Sixly yourself with an invite, and verify your email and your mobile number.
- You add your child: a first name or nickname, and their birth month and year.
- We show you this notice, and email it to you.
- You fill in the consent form in the app and sign it by typing your name.
- You print the form (it has your child's name and a short form code on it), sign and date it by hand, and send a photo or scan of it from your phone through a link made only for that form.
- Sixly checks it automatically and, if it passes, opens your child's account. If a check fails, a person at Sixly looks at it. Nobody needs to call you.
- Your child has no email or password; you start each practice session on your device.
Sixly collects nothing from your child until the verification is done.
What Sixly collects from a child
| What | How Sixly uses it |
|---|---|
| First name or nickname (you enter it) | To show it in the app and on your parent view |
| Age group, and the months your child turns 13 and 18, worked out from the birth month and year you enter (which we then drop) | To apply the right rules for your child's age |
| Your state, which your child's account uses | State privacy laws |
| Board work: strokes with their timing and pen pressure, and erased strokes (kept, hidden) | To show your child's work and replay it for you |
| Typed steps, answers and how many tries were used | To check steps with Sixly's own math checker and grade answers |
| The checker's result on each step | To show what the checker caught |
| Hints shown | Tutoring, and so you can review them |
| Practice sessions: when each started and ended, and minutes with work | To count sessions and show practice time |
| Reports your child sends with Report a problem (fixed choices only) | To fix problems |
| A sign-in cookie for the session you start, which ends when the browser closes or after 30 idle minutes | To keep the session running |
What Sixly never collects from a child
- An email address or a phone number. Your verified phone covers your child.
- Birth month and year: you enter them once, and we drop them after working out the age group.
- Voice, audio or photos.
- Typed questions to the tutor: children can't type questions to the tutor.
- Handwriting readings: no child's handwriting is sent to Mathpix. Children type their steps to have them checked.
How Sixly uses it
- To run your child's practice: save their boards, check their typed steps, grade answers and count sessions.
- To give hints: Sixly's own written hints always; hints written by AI only if you say yes separately.
- To show you what your child did.
- To fix problems your child or you report.
- To improve Sixly's checker, only if you tick that separate box on the consent form.
Sixly shows no ads, sells nothing, and sends your child no messages.
Who receives it
| Company | What for | When |
|---|---|---|
| Supabase | Stores the account and practice | Always |
| Vercel | Runs Sixly's servers | Always |
| Resend | Sends you emails about your child | Always |
| Anthropic (Claude) | Writes hints from your child's typed steps and the checker's results, with no name. Anthropic doesn't use them to train its models and deletes them within 30 days, unless a safety review or the law needs them longer | Only if you say yes to AI hints |
You can agree to Sixly collecting and using your child's practice without agreeing to AI hints. Saying no to AI hints, or to research use, changes nothing else: your child still gets typed-step checking, grading and Sixly's written hints. Mathpix and Twilio never receive a child's information.
For review, needs a lawyer: Written assurances from Supabase, Vercel, Anthropic and Resend are needed before any child's data reaches them (312.8(c), COPPA research 7.3). Claude is now reached directly through Anthropic's API with Sixly's key (Vicente, 2026-10-26), not through Vercel's AI Gateway, so the Gateway's zero data retention no longer applies: Anthropic's default is deletion within 30 days, and zero retention needs a separate agreement with Anthropic. Whether Anthropic is support for internal operations or a third party is counsel question 4 in the New York research; the separate yes covers either reading.
Nothing a child does is public
Children can't make anything public on Sixly: there are no profiles, no chat, no sharing and no classes for children in the alpha.
How long Sixly keeps it
This is Sixly's written data retention policy for children's information. Nothing is kept indefinitely.
| Data | Purpose | Why we keep it | When it's deleted |
|---|---|---|---|
| Unfinished consent form and the child's details | Ask for consent | To finish the verification | 14 days after you sign, if consent isn't verified |
| A consent form that was rejected, and any uploaded copy | Ask for consent | None after rejection | 24 hours after rejection |
| Child profile: first name, age group, state, the link to you | Run the account | The account can't work without it | When you close the account or withdraw consent |
| Board work, typed steps, answers, checks, hints shown, sessions | Tutoring and your parent view | So your child can see past work and you can review it | 12 months after your child last practiced, or sooner when you delete it (proposed) |
| Reports from Report a problem | Fix problems | To find and fix the problem | When the account closes (proposed) |
| Research copies | Only with your separate opt-in | To test Sixly's checker | When you turn it off, close the account, or 24 months after last use, whichever is first |
| The consent form you signed on screen, the photo or scan of the signed page, and how it was checked | Proof of consent | To show you gave verified consent | While the account is open (proposed). The photo goes with the account |
| A short record of each consent after the account closes: what was agreed, the version of the words, how it was checked, account ids and dates; no names, no photo, no work | Proof of consent | To answer you or a regulator about what was agreed and how it was verified | 3 years after the account closes, then deleted (proposed) |
| Database backups and hosting logs | Recovery and security | To restore data after a failure | Backups after 7 days; logs after about a day |
For review, needs a lawyer: Every period marked proposed comes from the COPPA research 6.3 table and TD-182, and needs counsel and Vicente's yes. When the alpha ends, children's data is deleted unless the account continues (open question 10; proposed).
Your rights as a parent
- Review: “Review work” on your parent view shows everything Sixly collected from your child, including the hints shown and their reports.
- Delete: “Delete practice work” removes it; “Close account” deletes everything.
- Stop collection: “Withdraw consent” in Controls stops further collection and pauses the account.
- Or email privacy@sixly.ai from your account's email address. Your signed-in account, with its email and phone codes, is how we know the request is yours.
How Sixly verifies consent
After you sign the consent form in the app, you sign the same form by hand and send it back:
- Print the consent form from your Sixly account. It already has your child's first name, a short form code and a square code that tie the paper to what you signed on screen.
- Fill it in, sign it and date it by hand.
- Send a photo or scan of it from your phone, through a link that works only for this form (a code you scan on your computer, or a link we email you), and type the form code from the page.
Sixly checks it automatically: that a photo or scan of a page arrived through your link, that the square code printed on your form shows in the photo (Sixly's own server reads only that square, and no other company sees the form), that the form code you typed matches your form, and that the form is the current version. If every check passes, your child's account opens, usually within a minute, and we email you with how to review, delete and withdraw. If a check fails, we tell you why, you can send another photo, and a person at Sixly looks at it. You can also ask for help at any step.
We remove location and camera details from the photo before we store it. We keep the photo with your child's account, never share it, and record how it was checked (automatically or by a person).
For review, needs a lawyer: Signed form returned by electronic scan: 16 CFR 312.5(b)(2)(i) (D-088, 2026-10-26: no calls and no manual review as the normal path). Two points need counsel before accounts for children open: whether a phone photo counts as an electronic scan (counsel question 1 in docs/legal/under13-consent-options.md), and whether a returned form may be accepted by automatic checks with no person looking at it. Only the square code printed on the parent's copy is read, on Sixly's server (no character recognition, so no other company sees the form): a photo of anything else fails, but nothing proves who signed the page. The short video call (312.5(b)(2)(iv)) stays in the code as an optional fallback, off; a card payment at checkout (312.5(b)(2)(ii), a real charge on the statement, never a $0 check) is planned for when billing exists.
The notice we email you first
Before you give consent, Sixly shows you and emails you a notice that says:
- that Sixly needs your consent, and collects, uses and shares nothing from your child without it;
- what Sixly will collect and how it's used, as above;
- who receives it, and that you can agree without agreeing to AI hints;
- how to give consent: sign the form on screen, then sign the printed form by hand and send a photo of it, which Sixly checks automatically;
- that your child's details are deleted if consent doesn't come within 14 days;
- a link to this notice.
For review: The direct notice's exact words are W2's prompt coppa_direct_notice (16 CFR 312.4(c)); they must match this list.
Changes
Before Sixly collects something new from your child (for example voice or handwriting reading), shares it with a new company, or changes who runs Sixly, we'll send you a new notice and ask for your consent again. Until you consent:
- the changed part stays off for your child, and nothing new is collected for it;
- for a change that covers the whole account, such as a new company running Sixly, your child's account is paused;
- saying no changes nothing else, and you can review, delete or close your child's account at any time.
You consent to a change the same way as the first time: sign the change form on screen, sign it by hand, and send a photo of it.
For review, needs a lawyer: 16 CFR 312.4(b) (a new direct notice for a material change) and 312.5(a)(1) (verifiable consent to it). Built as the reconsent step in the app.