Privacy Policy — earn²keep

1. Information We Collect

You give us directly

Account info: name, email, organizer role, organization name
Participant profile info: first name, last initial, parent email, optional photo
Submission content: videos and notes participants upload demonstrating challenge completion
Payment info: processed by Stripe; we receive transaction confirmations but do not store full card numbers

We collect automatically

Usage data: pages visited, features used, timestamps
Device info: browser type, OS, IP address (for security and analytics)
Cookies: session cookies (required for login) and optionally analytics cookies (used to understand usage patterns)

2. How We Use Information

To operate the Service (host your account, store submissions, process payments)
To communicate with you (event notifications, submission reviews, support)
To improve the Service (analytics, debugging, product development)
To enforce our Terms and prevent fraud or abuse
To comply with legal obligations

We do not sell your personal information. We do not use your submission videos for advertising, marketing, or training AI models.

3. How We Share Information

Within your organization: organizer accounts see the participant profiles and submissions they manage
With service providers: Stripe (payments), Supabase (database hosting), Resend (transactional email), Vercel (web hosting). Each is contractually bound to use data only as needed to provide their service.
For legal reasons: we may disclose information if required by law, court order, or to protect rights, property, or safety
In a business transfer: if earn²keep is acquired or merged, your information may transfer to the new entity, subject to this Policy

4. AI-Assisted Verification

earn²keep uses artificial intelligence to help organizers review challenge submissions. This section explains what that means for your data.

What we send to AI

For certain challenge types (currently rep-counting challenges like push-ups, juggling, free throws, and time-based activities like plank holds), we extract approximately 10 still-image frames from submitted videos and send them to Anthropic, the maker of Claude AI. Anthropic's AI analyzes the frames and returns:

A count of repetitions performed (or seconds of activity sustained)
A confidence rating (high, medium, low, or unable-to-verify)
A brief written explanation of what the AI saw

What we don't send

The full video file (only sampled frames)
Audio from the video
The participant's name, age, school, or any other personally identifying information beyond what is visually present in the frames
Frames from non-eligible challenges (e.g., service hours, reading challenges) — these go straight to manual organizer review with no AI involvement

Anthropic's data practices

Per Anthropic's API terms in effect at the time of writing, Anthropic does not train its models on data submitted via the API, and does not retain such data after processing the request. For Anthropic's current policies, see anthropic.com/legal/privacy.

Automated approval

When an organizer has enabled the feature and the AI returns a high-confidence count that matches or exceeds what the participant claimed, the submission may be approved automatically without human review. The participant and organizer can see when this has happened (each auto-approved submission is labeled as such). Auto-approval is off by default — organizers opt in.

Opting out

Parents and guardians can opt their child out of AI verification at any time from the participant's profile page in the app (look for the "AI Verification" section). When opted out, no frames are sent to Anthropic for that participant, and all submissions go to manual organizer review.

5. Children's Privacy (COPPA)

This section applies to users under 13 years old.

The Children's Online Privacy Protection Act (COPPA) requires parental consent for online services that collect personal information from children under 13. earn²keep complies with COPPA in the following ways:

Parental consent flow. When a participant under 13 joins earn²keep, we obtain verifiable parental consent before collecting personal information. This is typically handled through the organizer's invitation flow, which sends the invitation to the parent's email address and requires the parent to acknowledge and approve the child's participation.
Limited data collection. For users under 13, we collect only the minimum necessary: first name, last initial, parent email, age/birthdate (for verification), and submission content (videos demonstrating challenge completion).
No behavioral advertising. We do not use information collected from users under 13 for advertising or marketing purposes.
Parent rights. Parents/guardians may, at any time: (a) review the personal information we have collected from their child, (b) request that we delete that information, (c) refuse further collection or use of their child's information. Email support@earn2keep.com with verification of your identity to exercise any of these rights.
No sharing with third parties for marketing. Information collected from users under 13 is not shared with third parties for marketing purposes. It is shared only with service providers necessary to operate the Service (see Section 3) and with the organizer who invited the child.

If you believe we have collected personal information from a child under 13 without proper consent, please contact us immediately at support@earn2keep.com so we can delete it.

6. Data Retention

We retain account information for as long as your account is active and for a reasonable period after closure to comply with legal obligations (e.g., tax records, fraud prevention). Submission videos are retained for the duration of the event plus 90 days, then deleted automatically unless retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Correct inaccurate information
Delete your information (subject to legal retention requirements)
Port your information to another service
Object to or restrict certain processing
Withdraw consent previously given (does not affect prior processing)
Lodge a complaint with a supervisory authority

California residents have additional rights under CCPA; EU and UK residents have additional rights under GDPR. To exercise any rights, email support@earn2keep.com with reasonable identity verification.

8. Security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS), access controls, row-level security in our database, and regular security review. No system is perfectly secure, however. You are responsible for keeping your account credentials safe.

9. International Users

earn²keep is operated from the United States. If you access the Service from outside the US, your information will be transferred to, stored, and processed in the US. By using the Service from outside the US, you consent to this transfer.

10. Cookies

We use cookies for authentication, security, and analytics. You can disable cookies in your browser settings, but the Service may not function correctly without session cookies for login.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or via the Service. The updated policy is effective as of the date listed at the top.

12. Contact Us

Questions about privacy, your data, or this Policy? Email support@earn2keep.com.