New name MyDD is now RAILE (rhymes with “rail”). Same team, same mission, same login. Why the new name? →

Legal & policy

COPPA Notice & Parental Consent

Children's Online Privacy Protection Act (COPPA) Disclosure

Last Updated: October 8, 2025

About This Notice

MyDD.ai LLC, doing business as R(ai)sing Literate Explorers ("RAILE," "we," "us," or "our"), operates the RAILE website and chatbot located at chat.joinraile.ai (also reachable at chat.mydd.ai). We are committed to protecting children's privacy online. This notice explains our information practices regarding children under 13.

Operator Contact Information:
MyDD.ai LLC d/b/a R(ai)sing Literate Explorers
840 1st Ave.
Suite 200
King of Prussia, PA 19406
Email: privacy@mydd.ai
Phone: 410-231-3003

For questions about the FTC's Children's Online Privacy Protection Act (COPPA), visit:
https://www.ftc.gov/tips-advice/business-center/privacy-and-security/children%27s-privacy

Information We Collect from Children

We collect the following personal information from children under 13:

Direct Collection:

  • Child's first name or chosen nickname
  • Child's birth month and year
  • Parent's email address (for parental consent and communication)
  • Parent's phone number (for parental consent and communication)
  • Parent's address (for billing)
  • Parent's credit card (for billing)
  • Chat messages and questions submitted to our AI assistant
  • Voice recordings (if child uses voice input feature)

Automatic Collection:

  • Persistent identifiers: IP address, device identifiers, cookies, session IDs
  • Usage data: features accessed, time spent, interaction patterns
  • Technical information: browser type, operating system, device type
  • Geolocation data: General location (city/state level only, not precise GPS)

How We Use Children's Information

We use collected information only for the following purposes:

  1. Provide the Service: Deliver AI assistant responses and age-appropriate content recommendations
  2. Safety & Security: Monitor conversations for concerning content, detect violations of Terms of Service, prevent abuse
  3. Parental Communication: Send weekly activity summaries, safety alerts, and service updates to parents
  4. Internal Operations: Improve AI responses, fix technical issues, conduct safety research, maintain security
  5. Legal Compliance: Respond to law enforcement requests when legally required

We do NOT use children's information for:

  • Behavioral advertising or targeted marketing
  • Building user profiles for advertising
  • Any purpose not disclosed to parents

Information Sharing & Disclosure

We do NOT sell, rent, or share children's personal information with third parties for their marketing purposes.

We DO share information with:

1. Service Providers who help us operate the service:

  • Amazon Web Services (AWS): Data storage and hosting
  • OpenAI: AI processing (data is processed under strict data processing agreements)
  • Resend: Sending parental communications
  • Twilio: Sending parental communications
  • Stripe: Payment processing

All service providers are contractually required to protect children's information and may only use it to provide services to us.

2. Legal Requirements:

We may disclose information when required by law, court order, or to protect safety.

3. Business Transfer:

If we merge with or are acquired by another company, children's information may transfer (we will notify parents and obtain new consent if required).

Parent's Choice:
You may consent to our collection and use of your child's information WITHOUT consenting to disclosure to third parties. However, this may limit functionality since we rely on service providers (cloud hosting, AI processing) to operate the service. Contact us to discuss options.

Verifiable Parental Consent

BEFORE
we collect, use, or disclose personal information from your child, we require verifiable parental consent. Here's our process:

Step 1 - Direct Notice to Parents:

When a parent attempts to register, we collect ONLY the parent's email address and phone number. We immediately send parents direct notice via email and text explaining:

  • What information we collect from children
  • How we use and share it
  • Parental rights and options
  • How to provide consent

Step 2 - Obtain Consent:

Parents provide verifiable consent through credit card verification:

  • Credit/Debit Card Verification (a valid card on file confirms an adult is consenting; no charge to verify, and your trial stays free until day 15)

Step 3 - Confirmation:

Once verified, we send confirmation and your child's account is activated.

No Collection Before Consent:
We do NOT activate accounts or collect any information beyond the parent's email and phone number until consent is verified.

Parental Rights & Access

Parents have the following rights at any time:

  1. Review Information: Request to review all personal information we've collected from your child
  2. Delete Account: Request deletion of your child's account and all associated data
  3. Refuse Further Collection: Revoke consent and stop any further collection or use
  4. Correct Information: Update or correct any inaccurate information
  5. Receive Copy: Obtain a downloadable copy of all your child's data

To Exercise Rights:
Email: privacy@mydd.ai with subject "COPPA Parent Request"

We will respond within 10 business days. We may require identity verification to prevent unauthorized access.

Limitations:
We cannot delete information required for legal compliance, security purposes, or to complete transactions your child initiated.

Data Retention

We retain children's personal information only as long as necessary:

  • Active Accounts: Information retained while account is active
  • After Account Deletion: Most information deleted within 30 days
  • Backup Systems: Information in backups deleted within 90 days
  • Legal Requirements: Some information retained longer if legally required (e.g., chat logs with safety concerns may be retained for child protection investigations)

Anonymized/aggregated data (that cannot identify your child) may be retained indefinitely for research and improvement.

Data Security

We implement reasonable security measures including:

  • Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Access Controls: Strict employee access controls; only authorized personnel access children's data
  • Security Monitoring: 24/7 monitoring for unauthorized access or breaches
  • Regular Audits: Annual third-party security audits
  • Staff Training: All employees complete COPPA and child safety training
  • Incident Response: Documented procedures for data breaches

Despite these measures, no internet transmission is 100% secure. Parents should supervise children's online activities.

No Conditioning on Excessive Collection

We do NOT require children to provide more information than reasonably necessary to participate in our service. Children can use basic features with only a nickname and birth year.

Support for Parental Control Tools

We support common parental control software and settings. Our service is designed to work with filtering tools, and we provide guidance for parents on enabling additional protections.

Changes to This Policy

If we make material changes to how we collect, use, or share children's information, we will:

  1. Update this disclosure with the new Last Updated date
  2. Email all parents directly
  3. Obtain new verifiable parental consent if required by law

Contact Us

Questions about our COPPA practices? Contact:

Privacy Team
MyDD.ai LLC d/b/a R(ai)sing Literate Explorers
840 1st Ave.
Suite 200
King of Prussia, PA 19406
Email: privacy@mydd.ai
Phone: 410-231-3003

Chief Executive Officer:
Jacob Rozran

For general information about COPPA and children's online privacy, visit the FTC at:
https://www.ftc.gov/tips-advice/business-center/privacy-and-security/children%27s-privacy