Privacy Policy.
Last updated: 12 August 2026
How we handle your family’s data — written to be read, not skimmed.
1. The short version
- We collect what we need to run your child's membership — and no more.
- Children never see ads here. We never sell personal data. We never profile children for marketing.
- AI missions are guided, logged, and recapped to you after every session.
- You can see, correct, export, or delete your family's data — or withdraw consent — at any time.
- Questions, anytime: [email protected].
2. Who we are
Start Young CEO ("SYC", "we") is operated by Start Young CEO Inc., a Delaware corporation, 111 NE 1st St, 8th Floor, Suite #89118, Miami, FL 33132, USA. We are the controller of the personal data described in this policy. Contact: [email protected].
3. Who this policy covers
- Parents and guardians — you hold the account and make every decision.
- Children aged 9–15 — they use the program under your consent and supervision.
- Website visitors and the school, centre, and company contacts we work with.
4. What we collect
About you (the parent): your name, email, billing country, and payment method — payments are processed by Stripe and we never see or store full card numbers; your messages to us; your consent records.
About your child: first name, age and stage, cohort, the work they create on the Campus (venture name, missions, pitches, their showcase page), progress and certificates, transcripts of guided AI missions, and attendance at live sessions.
Automatically: basic technical logs from our hosting provider (such as IP address and pages requested), used for security and to keep the site working. We do not run advertising trackers or third-party ad cookies.
5. Children's data — the special-care rules
- We collect the minimum needed to run the program: a first name and an age is enough to place a child in the right cohort.
- No advertising to children. No sale of personal data. No behavioural profiling of children. Ever.
- My AI Co-Founder works in guided missions only — there is no open chat. Sessions are logged so that you receive a recap email and so we can keep the tool safe and improve the missions. Missions are processed by Anthropic (the Claude API) as our AI provider, under an agreement that prohibits using these inputs to train their models.
- Showing a child's work beyond their own cohort — a public showcase page, event photos — happens only with your separate, optional consent on the Parental Consent form.
6. Why we use data
- To deliver the membership you bought (performance of our contract with you).
- With your consent — your child's participation, the AI missions, and the optional showcase and media permissions. You can withdraw consent at any time.
- To keep the service safe and secure, prevent abuse, and meet legal obligations.
7. Who we share data with
Service providers who help us run SYC, under contracts that limit what they can do with your data:
- Stripe — payments
- Anthropic — AI missions
- Cloudflare — website hosting and security
- Acadle — the course academy
- Our self-hosted Campus (Nextcloud on Cloudron, including email) — on our own server in the United States. We don't use a third-party email provider; recap and progress emails are sent from the same self-hosted server.
If your family joined through a school, activity centre, or company partner: the partner is told that your family enrolled using its code — so it can organise the cohort and account for its documented partnership fee. Partners do not receive your child's work, progress, or transcripts.
We never sell personal data. We disclose data only where the law genuinely requires it.
8. Where data lives
Our providers process data in the United States — our own server (self-hosted Nextcloud/Cloudron) and our processors Stripe, Anthropic, and Cloudflare are all US-based. Where data crosses borders, we rely on the transfer safeguards recognised in your jurisdiction.
9. How long we keep it
- Account and membership records: while the membership is active, then up to 24 months.
- Your child's Campus work: while active; on cancellation you can export it, and we delete it after 90 days unless you ask us sooner.
- AI mission transcripts: 12 months, then deleted.
- Payment and tax records: as long as financial law requires.
10. Your rights
You can ask to see, correct, export, or delete your family's data; to restrict or object to processing; and to withdraw any consent — without affecting the rest of the membership where possible. As a parent you may review your child's data, ask us to delete it, and refuse further collection. Write to [email protected]; we respond within 30 days. You can also complain to your local data-protection authority.
11. Security
Data moves over encrypted connections; access is limited to the people who need it to run the program; the Campus runs on our own managed servers. No system is perfectly secure — if a breach ever affects your family's data, we will tell you and the authorities as the law requires.
12. Changes
If we change this policy in a way that matters, we will email you before it takes effect. The current version always lives at startyoung.ceo/legal.