Last Updated: March 5, 2026

1. Introduction to Privacy Architecture and Scope of Policy

1.1. Entity, Commitment, and Jurisdiction.

Prodicity operates as a forward-thinking educational venture studio deeply committed to protecting the privacy, digital security, and developmental integrity of our Users. As a California-based corporate entity providing online educational services to minors across the United States, we operate under and are subject to some of the most rigorous and comprehensive data protection frameworks globally. This Privacy Policy is meticulously designed to detail our uncompromising compliance with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the federal Children’s Online Privacy Protection Act (COPPA).

1.2. Scope of Application.

This comprehensive policy applies to all personal information, technical metadata, behavioral analytics, and forensic telemetry collected, processed, orchestrated, and stored by Prodicity. This encompasses data flowing through our primary web domains, our Firebase backend infrastructure, our third-party Large Language Model (LLM) integrations, and our auxiliary communication and code repository channels. Because our platform exclusively serves high school students aged thirteen (13) to eighteen (18), we implement heightened cryptographic security protocols and strict parental consent gateways to ensure the absolute protection of minor data.

2. Categories of Information We Collect and Process

2.1. Phased Data Collection.

We collect specific categories of personal, academic, and operational information across three distinct phases of User engagement to ensure the proper delivery of our educational services and to comply with parental consent mandates.

a. Account Creation Data: Upon initial platform registration, we collect foundational personal identifiers. This includes the User’s full legal name, date of birth, primary email address, and telephone number.

b. Application Data: To rigorously assess candidacy, align mentorship resources, and evaluate programmatic fit, the application phase requires comprehensive background information. This includes the User’s current academic institution, grade level, academic interests, recognized achievements, and extracurricular involvement. We collect detailed qualitative data regarding the User's short-term and long-term objectives, specific project passions, desired mentor expertise, past leadership experience, and stated availability. Furthermore, to satisfy our verifiable parental consent requirements, we strictly require the Parent or Legal Guardian's full name, relationship to the User, primary email address, telephone number, and preferred contact windows.

c. Mentorship and Programmatic Data: During active enrollment in the accelerator, we collect continuous operational data to facilitate the venture studio experience. This encompasses direct mentor-to-student communication logs (including text and platform messages), session transcripts and summaries captured via our AI-assisted note-taking infrastructure, dynamic roadmap progression, to-do list completion metrics, and event scheduling data.

d. Usage and Analytics Data: We passively collect standard network activity data, including cookie identifiers and platform analytics, to monitor site performance and continuously optimize the digital user experience. We secure explicit User or Parent consent for this specific data collection where legally mandated.

2.2. Statutory Categories of Personal Information.

In compliance with the CCPA framework, the specific data points collected during the phases outlined above correspond to regulated statutory categories. These include Identifiers (names, contact details), Customer Records (Parent contact and authentication data), Education Information (academic background, project portfolios), Audio/Visual and Electronic Data (AI-processed session notes and messages), Network Activity (platform analytics), and Inferences (profiles reflecting academic aptitude, mentorship needs, and venture resilience).

2.3. Forensic Tracking and Telemetry Data.

As explicitly outlined in Section 5 of our Terms of Service, Prodicity collects deep, continuous forensic tracking data. This is a specialized subset of data required to compile a "Portfolio of Evidence" proving the User performed the requisite cognitive labor. This category includes raw GitHub commit logs, code repository diffs, temporal analysis of typing cadences, document drafting chronologies, and comprehensive, unedited chat transcripts between the User and the CrewAI/AutoGen-orchestrated Synthetic Staff. This data is used solely for academic integrity auditing, programmatic assessment, and enforcement of our zero-tolerance AI plagiarism policy.

3. Children's Online Privacy Protection Act (COPPA) Compliance

3.1. Direct Notice and Application of COPPA.

COPPA mandates that commercial website operators provide direct notice to Parents and Legal Guardians regarding their practices for collecting, using, and disclosing personal information from children. Statutorily, COPPA strictly governs the data of children under the age of thirteen (13). However, because Prodicity serves an overlapping demographic of thirteen (13) to eighteen (18) year olds, and to ensure maximum legal defensibility and institutional-grade compliance, Prodicity voluntarily extends COPPA-level Verifiable Parental Consent protocols to our entire user base. This harmonizes compliance and ensures Parents maintain absolute oversight, regardless of the high school student's age, from 13 to 17.