Privacy Policy

1. Introduction

Welcome to Capital City! We are a Canadian company committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial literacy game and educational platform.

Important: Capital City is designed for children ages 6-15. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and take special care to protect children's privacy.

2. Information We Collect

2.1 Information from Children

From children under 13, we only collect information necessary to provide the service:

• Username: A child-chosen username (not real names)
• Parent Email: To obtain parental consent and communicate about the account
• Game Progress: Coins earned, Financial IQ score, districts completed, quiz answers
• Avatar Choice: Selected character avatar
• Login Information: Session data to keep the child logged in

2.2 Information from Parents/Guardians

• Email Address: For account management and communication
• Payment Information: Processed securely by Stripe (we do not store full credit card numbers)
• Account Preferences: Subscription type, notification preferences

2.3 Automatically Collected Information

• Device Information: Browser type, device type, screen size (for optimal display)
• Usage Data: Which districts visited, time spent playing, features used
• Cookies: Essential cookies to maintain login sessions and save preferences

3. How We Use Information

We use the collected information to:

• Provide and maintain the Capital City game experience
• Track learning progress and achievements
• Save game state (coins, IQ points, district completion)
• Communicate with parents about account status and learning progress
• Process subscription payments securely
• Improve the game based on how it's used
• Provide customer support
• Comply with legal obligations under PIPEDA and provincial laws

4. How We Share Information

We do not sell, rent, or share children's personal information with third parties for marketing purposes.

We only share information in these limited circumstances:

• Payment Processing: Stripe processes payments securely (they never see full card numbers)
• Service Providers: Trusted Canadian hosting services that help us operate the platform (all under strict confidentiality agreements)
• Legal Requirements: If required by Canadian law, court order, or to protect safety
• With Parent Consent: Only with explicit parental permission

5. Parental Rights (PIPEDA Compliance)

Under Canadian privacy law, parents and guardians have the following rights regarding their child's information:

• Access: Request to review the personal information collected from your child
• Correction: Request corrections to any inaccurate information
• Delete: Request deletion of your child's personal information
• Withdrawal of Consent: Withdraw consent at any time
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, please contact us at [email protected]

6. Data Security

We implement robust security measures to protect your information:

• Encryption: All data transmitted using SSL/TLS encryption (HTTPS)
• Password Protection: Passwords are hashed using industry-standard bcrypt
• Secure Servers: Data stored on secure, monitored servers in Canada
• Access Controls: Limited access to personal information by authorized personnel only
• Regular Security Audits: Ongoing security assessments and updates

However, no method of transmission over the internet is 100% secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security.

7. Data Retention

We retain information only as long as necessary to provide services and as required by Canadian law:

• Active Accounts: Game progress and account data retained while account is active
• Deleted Accounts: Most data deleted within 30 days of account deletion
• Legal Requirements: Some data may be retained longer if required by law
• Backups: Backup copies deleted within 90 days

8. Cookies and Tracking

We use cookies and similar technologies:

• Essential Cookies: Required for login and game functionality (cannot be disabled)
• Preference Cookies: Remember settings like avatar choice and theme
• Analytics Cookies: Help us understand how the game is used (no personal identification)

You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

9. Third-Party Links

Capital City may contain links to third-party websites for educational purposes. We are not responsible for the privacy practices of these external sites. We encourage parents to review the privacy policies of any third-party sites their children visit.

10. International Users and Data Transfer

Capital City is operated in Canada. Your information is stored and processed on secure servers located in Canada. If you are accessing from outside Canada, your information will be transferred to and processed in Canada. By using our service, you consent to this transfer.

We ensure that any international data transfers comply with PIPEDA and applicable privacy laws.

11. Anti-Spam Compliance (CASL)

We comply with Canada's Anti-Spam Legislation (CASL). We will only send commercial electronic messages (emails) with your express or implied consent, and you may withdraw consent at any time by:

• Clicking the unsubscribe link in any email
• Contacting us at [email protected]
• Updating preferences in your account settings

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify parents via email if changes affect children's privacy
• Obtain new parental consent if required by law

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your child's information:

14. Privacy Commissioner

If you have concerns about how we handle your personal information, you may contact: