How to read the labels

  • Enforced today Live in the app right now — enforced by how the product actually works, not just a written promise.
  • Built · not yet switched on Written and tested, but ships off by default — turning it on is a deployment decision.
  • Anthropic terms + data agreement Guaranteed by our AI provider’s terms and our data-processing agreement, not by our code.

Your child's data isn't used to train AI

Anthropic terms + data agreement

The bar

A child’s conversations are never used to train AI models.

Cocovox

Cocovox sends conversations to Anthropic’s Claude API. Under Anthropic’s API terms and our data-processing agreement, those inputs and outputs are not used to train models. (Under its API terms, Anthropic retains API data for a short abuse-monitoring window — up to 30 days — then deletes it.)

Verifiable parental consent — a real check, not a checkbox

Enforced today

The bar

Before collecting anything from a child under 13, get verifiable parental consent (COPPA).

Cocovox

A parent completes a card check: we place a temporary $0.50 authorization hold (never charged), cancel it immediately, and match the cardholder’s name — an FTC-recognized method of verifiable parental consent. Email- or SMS-only confirmation is recorded as “notice-only” and does not unlock a child’s account.

Consent that actually blocks access

Enforced today

The bar

A child can’t use the product until a parent has consented.

Cocovox

Until a parent grants consent, a pending-consent minor is blocked from every part of the app — they can check consent status and sign out, and nothing else. It is a locked door, not a polite request.

Voice recordings kept to the bare minimum

Enforced today

The bar

Minimize biometric data; don’t hold on to a child’s voice recordings.

Cocovox

Voice practice is turned into text — we keep the transcript and practice scores, not the recording. Audio waiting to be transcribed is held for at most three hours. Cocovox does not use voice audio to train AI; our speech-to-text provider handles audio under its own terms, listed on our Data Processors page.

Delete anytime

Enforced today

The bar

Families can delete a child’s data whenever they want.

Cocovox

Asking to delete an account in the app starts a 30-day wait. Then a daily job erases the child’s chats and the AI tutor’s copies of them, the memories added in their Memory settings, files dropped onto the chat itself, voice recordings and speech-analysis results, replaces the name and email on the account with placeholders, and switches off its login, so the old email, password and Google or Apple sign-in stop working. Links a teacher shared with a parent to follow the child’s progress stop working too. Other records stay linked to the closed account instead of being erased, including learning progress, practice scores, app activity, written notes, IEP records, a copy of any chat shared by link, files added with the chat’s Add button and some documents added to a course or uploaded to notes. The growth moments, things the child found hard and topics that Cocovox remembers about them are kept too, with notes a parent or teacher added. A parent who asked to delete a child’s account can cancel it from the child’s Privacy controls, in the parent portal, until the scheduled date. A deletion a school or an administrator asks for can’t be cancelled in the app. If the child had already asked, the request stays the child’s to cancel. Removing data from backup copies is not automated yet. Parents can download an export first.

Data isn’t kept forever

Built · not yet switched on

The bar

Student data has a retention limit, not an indefinite shelf life (a deletion SLA).

Cocovox

A 2-year automatic roll-off of chat and note history — with 30 days’ advance notice and an export path — is built and tested. It ships switched off by default; turning it on is a deliberate deployment decision, so today it is available, not yet running.

A record of who sees student records (FERPA)

Enforced today

The bar

Keep an audit trail of access to student educational records.

Cocovox

Access to some student educational records — class rosters, grades, roster imports and school-admin views — is written to a dedicated, append-only FERPA audit log on a persistent volume that survives restarts. Other record views are not logged there yet. Our retention target for this trail is at least one academic year.

Never sold, never advertised to

Enforced today

The bar

Don’t sell student data; no behavioral advertising to children.

Cocovox

We never sell user data, and Cocovox runs no ads. There is no ad SDK to sell to.

Show families how the AI is used

Enforced today

The bar

Be transparent about AI use — and let families see it, in plain language.

Cocovox

Families can see the data that shapes their child’s AI experience — IEP goals, difficulty adjustments, session history — in plain language. The AI-written summary in the weekly digest is marked as AI-written, in the app and in the email, and so are teacher grading suggestions. Our How our AI works page is the full tour.

The patient tutor every kid deserves.