Legal
Data Protection
Last updated: October 6, 2026
Overview
This page describes the technical measures that protect PlayIQ user data, particularly the data of minors using our platform. For what we collect, who we share it with, and how deletion works, see our Privacy Policy.
Technical Security Measures
Encryption
PlayIQ's database and file storage are provided by Supabase, which documents encryption of data at rest (AES-256) and in transit (TLS). Build photos and student submissions are stored in private, access-controlled storage.
Access Controls
Authentication is handled through Supabase Auth. Role-based access control (RBAC) ensures students, parents, and administrators each have appropriately scoped permissions.
Infrastructure
PlayIQ is hosted on Google Cloud / Firebase App Hosting.
Student Data Protection
Student data, including build submissions, AI tutor designs, and mission progress, is treated with heightened sensitivity. This data is:
- Never sold to third parties
- Never used for advertising targeting
- Accessible to the student, their parent/guardian, and authorized PlayIQ staff. Discussion board posts are also visible to other signed-in PlayIQ members
- Shared only with the service providers named in our Privacy Policy, and only to run PlayIQ
Payment Security
Payment processing is handled by Stripe, a PCI-DSS Level 1 certified provider. PlayIQ does not store raw card numbers. All transactions are tokenized and processed in Stripe's secure environment.
Data Retention & Deletion
We aim to collect only the data necessary to provide PlayIQ. Parents may request deletion of their account or their child's account and associated data by contacting support@weplayiq.com. See Section 9 of our Privacy Policy for details.
Contact
For data protection inquiries or to report a security concern:
PlayIQ Learning — Data Protection
Email: support@weplayiq.com