Privacy at Curious Python
The short version for kids
Your account saves your code, progress, display name, and avatar. Your grown-up separately chooses whether the AI coach may receive your work and whether detailed AI conversations may be saved. A parent or guardian email is used for signing in. Do not put your real name, school, address, phone number, photos, or other private information in your code or AI questions.
You and your grown-up can download or delete the account from the account panel.
Information we store
Accounts store a parent or guardian email address, display name, optional age, avatar choice, project code, run history, reflections, and progress evidence. A new account requires an emailed code and the adult's consent confirmation, followed by an account-created notice. When detailed AI logging is enabled in the account panel, AI prompts, project context, and responses are also stored. Uploaded sound files stay in the browser on the device and are not uploaded to the account.
Why we use it
We use this information to sign learners in, sync work between devices, restore earlier code, show learning progress, limit AI costs and abuse, and give project-aware hints.
Service providers
Cloudflare hosts the site, database, and account service. Only after a parent or guardian enables AI processing, configured OpenAI or Anthropic models may process AI coach requests, relevant code, recent attempts, age, and learning progress. The service removes email addresses, phone numbers, account identifiers, and common self-introduced personal details before sending or logging this context, but families should still avoid entering private information. The email delivery provider sends one-time sign-in codes and the account-created notice.
Retention
Detailed AI interaction logs can be turned off and expire after 90 days when enabled. Aggregate usage totals remain so the service can enforce cost limits. Older code-run checkpoints expire after 180 days, while the latest checkpoint for each project is retained. Sign-in abuse records, including short-lived IP-address records, are removed after 24 hours. Device sessions expire after 14 days and can be revoked by signing out. Active account projects and progress remain until the account is deleted.
Choices and contact
Signed-in users can download their data or permanently delete the account from the account panel. A parent or guardian can request access, correction, or deletion by contacting the site operator, Frédo Durand, at fredo@csail.mit.edu.
Current launch status: this service is intended for a small supervised pilot. Email verification plus an adult consent statement may not satisfy every jurisdiction's definition of verifiable parental consent. The account and notice should be reviewed by qualified counsel before a broad public or school launch.
Last updated September 16, 2026. This page describes the current implementation and is not legal advice.