Last updated: June 17, 2026
The short version: We do not sell your data. We do not show ads to children. We are COPPA compliant. Your child's information is private and protected.
GabbyBattles LLC ("GabbyBattles," "we," "us," or "our") operates the GabbyBattles mobile application and website located at gabbybattles.com. We are committed to protecting the privacy of children and families who use our service.
GabbyBattles is designed for children under 13 and is fully compliant with the Children's Online Privacy Protection Act (COPPA). We do not collect personal information from children under 13 without verifiable parental consent. Parents and guardians have the right to review, delete, or refuse further collection of their child's personal information at any time.
From children (under 13): We collect only the minimum information necessary to operate the app: a username (which does not need to be a real name), grade level, and in-app activity data (lessons completed, battles played, XP earned). We do not collect email addresses, phone numbers, or real names from children.
From parents and guardians: We collect your email address and payment information (processed securely by Stripe — we never store card numbers). We use your email to send account notifications and weekly progress reports.
From grandparents: We collect only the phone number you provide to receive text message progress reports. We do not share this number with any third party.
From schools: We collect school name, teacher name, and work email address. Student data collected in a school context is governed by FERPA and our School Data Processing Agreement.
We use the information we collect solely to: (a) operate and improve the GabbyBattles app; (b) send progress reports to parents and grandparents; (c) process subscription payments; and (d) provide customer support. We do not use children's data for advertising, profiling, or any commercial purpose beyond operating the app.
We do not: sell any user data to third parties; show advertisements to children; use children's data to build advertising profiles; collect location data; collect biometric data; or share personal information with any party except as required by law or as necessary to operate the service (e.g., payment processing).
We use industry-standard encryption (TLS 1.3) for all data in transit and AES-256 encryption for data at rest. Access to user data is restricted to authorized personnel on a need-to-know basis. We conduct regular security reviews and promptly address any vulnerabilities.
We retain account data for as long as your account is active. If you delete your account, we delete all associated personal data within 30 days, except where retention is required by law. In-app activity data (lesson completions, battle history) is retained for 12 months to support progress tracking, then automatically deleted.
Parents and guardians may at any time: review the personal information we have collected about their child; request deletion of their child's account and all associated data; refuse further collection of their child's information; and withdraw consent for our use of their child's data. To exercise these rights, contact us at privacy@gabbybattles.com.
GabbyBattles uses the following third-party services, each of which has its own privacy policy: Stripe (payment processing); Firebase (app infrastructure); and Amazon Web Services (data storage). We do not use third-party advertising networks, analytics services that track children, or social media plugins within the children's app experience.
We will notify parents and guardians of any material changes to this Privacy Policy by email at least 30 days before the changes take effect. Continued use of the app after that date constitutes acceptance of the updated policy.
For privacy-related questions or to exercise your parental rights, contact us at:
Email: privacy@gabbybattles.com
Website: gabbybattles.com
Mailing Address: GabbyBattles LLC, [Address to be added upon formation]