Children's Privacy Notice — WhiteKnight Academy
Scope — where this applies. This document covers WhiteKnight Academy as a whole: both the public website at whiteknight.academy and the learning platform at analytics.whiteknight.academy. Where it refers to "the Site", "the Service", or "the Platform", it means both unless a specific one is named.
Effective date: 2026-07-02 Language: English (master). Polish and French (Quebec) translations to follow.
Part A — For parents and guardians
A1. What this page is
Your child is signing up to use WhiteKnight Academy, an online chess school with a public site at https://whiteknight.academy and a learning platform at https://analytics.whiteknight.academy. This notice tells you, in plain language, what personal information we collect about your child, why, who sees it, how long we keep it, and what you can do about it at any time.
Our full legal disclosures are in the Privacy Policy. This notice is the short version, written so you do not need to read the whole policy to give informed consent.
We are TheBroda sp. z o.o., a Polish company (KRS 0000677402, NIP 5242831345, ul. Wierna 12, Warszawa). All email about privacy goes to privacy@whiteknight.academy.
A2. What we collect about your child
| Category | What | Who gave it to us |
|---|---|---|
| Account basics | Your child's first name or nickname, avatar, age range, language | You fill this in at sign-up |
| Your contact | Your email address and your relationship to the child | You at sign-up |
| Chess activity | Games your child plays through our site, puzzles they solve, their playing patterns, and chess-engine evaluations of their games | Generated as your child uses the platform |
| Linked chess accounts | If you choose to connect your child's Chess.com or Lichess username, we read their public game archive from those sites | You, optionally |
| Communication | Text messages between your child and their coach on our site; the coach's notes about your child | Generated during coaching |
| Lesson video / audio | Only when someone explicitly presses "Start recording" during a live lesson. Not recorded by default. See § A5. | Only if you allow recording at sign-up and someone presses record |
| Site usage | Anonymised events like "opened homework page" or "clicked this button" — no IP address is stored with these | Generated automatically |
We do not knowingly collect: your child's full name (beyond first name/nickname), home address, phone number, photographs outside lessons, location, special-category data (religion, health, ethnicity), card details (those go straight to Stripe), or any content outside what's needed to run the chess school.
A3. Why we collect it
- To create the account and let your child log in.
- To provide chess-teaching features: puzzles, lessons, homework, rating tracking, AI-generated tips based on their games.
- To let the linked coach teach your child and track progress.
- To send you and your child transactional emails (homework assigned, lesson starts soon, password reset).
- To fix bugs and improve the platform.
- To keep the platform safe — identifying misuse, abuse, or safety incidents.
We do not use your child's information for advertising, for profiling to change what they see based on behaviour, or for any purpose you did not consent to. We do not sell or rent it. (Legally: no "sale" or "share" under CCPA §1798.120; no targeted advertising under CPRA §1798.121; no profiling producing significant effects under GDPR Art 22.)
A4. Who has access
Your child's information is seen by:
- Your child — obviously.
- You — the parent/guardian who signed the child up.
- The coach(es) linked to your child — and only those.
- Our administrative staff — on a need-to-know basis, for example to respond to a safety report or technical issue. Every admin access is logged.
It is stored and processed by a handful of service providers ("sub-processors") who help us run the platform — a database (Supabase, US), a video-call provider (Daily.co, US), a payment processor (Stripe), and a few others. The current list is published at https://whiteknight.academy/legal/subprocessors. Each of them is contractually limited to processing data on our instructions and cannot use it for their own purposes.
We do not use AI-model providers that train on your child's data. We call OpenAI's API directly (no aggregator); OpenAI's API terms forbid training on content you send. We do not use any other LLM provider.
A5. Live lessons and recording
Live lessons use a video service called Daily.co. By default no recording is made.
If you want recordings enabled for your child — for example so your child can re-watch a lesson — you must tick the "allow recording" box at sign-up (it is off by default). Even with that setting on, a recording is made only when a coach or student explicitly clicks "Start recording" in the lesson, and the session shows a red "REC" indicator to everyone.
- Recordings are stored by Daily.co in the United States.
- They are automatically deleted 30 days after the lesson.
- They can be watched only by your child, you, and the coach who led the lesson. Our administrative staff may access a recording for a safeguarding investigation if one is opened; every such access is logged.
- We never use recordings for AI training, marketing, or any purpose outside the ones above.
You can turn recording off again at any time in your child's account settings. You can also ask us to delete existing recordings before the 30-day window.
A6. How long we keep things
| Type | How long |
|---|---|
| Account data, chess history, homework | While the account is active. When you delete it, we erase it within 30 days. |
| Lesson recordings | 30 days from the lesson, then automatically deleted |
| Coach–student messages | 2 years rolling, or until you ask us to delete them |
| Your parental consent record | 10 years — legally required so we can prove we had your consent |
| Billing invoices (paid plans) | 5 years — Polish accounting law (Ustawa o rachunkowości, Art 74) |
A7. Your rights as the parent
Under COPPA (16 CFR §312.6), GDPR (Arts 15–22), and local laws in your jurisdiction, at any time you may:
- See what we hold about your child — export a full copy.
- Correct anything wrong.
- Delete your child's account and data. We'll do this within 30 days (or 10 business days for a COPPA deletion request).
- Refuse further collection — you can stop us from gathering new information while keeping existing data, or withdraw consent entirely (which deletes the account).
- Withdraw recording consent without deleting the account.
- Complain to a privacy authority — full list at Privacy Policy § 17.
How to exercise any of these:
- In-app:
https://analytics.whiteknight.academy/dashboard/settings/privacy(self-service export/delete) - Email: privacy@whiteknight.academy
- Post: TheBroda sp. z o.o., ul. Wierna 12, Warszawa, Poland (attn. "Privacy")
We verify it is really you via the email on the account. No cost for reasonable requests.
A8. International transfers
Your child's data may be stored or processed in the United States (Supabase, Stripe, Daily.co, Google, OpenAI) and in Lithuania/EU (our Hostinger VPS and static hosting). EU–US transfers are made under the European Commission's Standard Contractual Clauses (Commission Implementing Decision 2021/914); we also run a Transfer Impact Assessment, held internally and available to supervisory authorities on request.
A9. When we update this notice
If we change how we handle your child's data in a way that materially expands what we do (COPPA §312.5(a)(2)), we will obtain fresh parental consent. Smaller changes: we email you at least 15 days before they take effect.
A10. Questions?
Write to privacy@whiteknight.academy. We answer within 30 days (often within a few business days). Your questions are welcome — you are the one giving consent on your child's behalf, and we want you to feel confident about what you are consenting to.
Part B — For you, the kid using WhiteKnight
(Hi! This part is written for you. Ask a grown-up if anything doesn't make sense.)
B1. What is this page?
This page tells you what we do with the stuff you type, click, or say on WhiteKnight Academy. You don't have to read all of it — your parent or guardian has already read it for you and said it's okay.
B2. What we know about you
- Your first name or nickname, your avatar picture, and roughly how old you are.
- The chess games and puzzles you play here, and how well you do.
- The messages you send to your coach and that they send to you.
- When you are using the site (so we know it's working properly).
We do not know: your last name, your home address, your phone number, or your photo outside of video lessons.
B3. Who sees your stuff?
- You.
- Your parent or whoever signed you up.
- Your coach — and only your coach.
- A very small team who runs WhiteKnight, but only if something goes wrong or someone says there's a safety problem.
Nobody else sees it. Your chess results will not be shown to strangers on the internet.
B4. Video lessons
When you have a live lesson, your coach joins a video call with you. Usually, nothing is recorded.
If you or your coach press "Start recording", you will see a big red "REC" sign on the screen. That means it is being recorded. Recordings are deleted after 30 days. Only you, your parent, and your coach can watch them.
If you ever feel uncomfortable being recorded, tell your coach or your parent right away. You can also press "Stop recording" yourself.
B5. What we will never do
- We will never show ads to you.
- We will never sell or give away what we know about you.
- We will never use your games to train a computer to be you.
- We will never tell you to share more information than you need to.
B6. Your rights
You can always ask a parent or guardian to:
- See everything we have about you,
- Fix anything that is wrong,
- Delete your account and everything in it.
That's your right. No questions asked, no penalty.
B7. If something feels wrong
If someone on WhiteKnight makes you feel uncomfortable, scared, or asks you things you don't want to answer — tell a grown-up you trust right away.
You or your parent can also email us at contact@whiteknight.academy. We take this seriously.
If you are in danger, please tell a parent, teacher, or call the emergency number in your country (112 in Europe, 911 in the US).