Privacy Policy

Dear Parents,

Like you, I've clicked "I agree" on countless privacy policies without reading them. But most of us agree that privacy is important to our families.

That's why I wanted to write to you directly about how we handle your family's information in plain language.

We're committed to complying with the law in protecting your data - and below, we've outlined how we comply with privacy laws in the United States and Canada, including COPPA (the Children's Online Privacy Protection Act) for children under 13.

The formal policy is below, but here are the main things to understand:

1. We Only Collect What's Necessary - We ask for the minimum information needed to run your account and provide the service. No unnecessary personal details.
2. We Don't Sell Your Data. Ever. - We don't sell or rent your information to anyone. Your data stays with us.
3. No Ads or Tracking - We don't show ads, and we don't let third parties track you or your kids.
4. Strong Security - Your family's information is protected with encryption, access controls, and regular security reviews.
5. You're in Control - You can review, update, or delete your information at any time by contacting us.
6. We Don't Keep Data Forever - If you cancel, your information is deleted or anonymized within a reasonable period.
7. Transparent About Kids' Data - For children under 13, we follow strict COPPA requirements. Parents create and manage all accounts, and we only use kids' information to help them learn - never for advertising.

And as always, if you have any questions, please email us at hello@buildlegends.com.

Thanks for your interest,

Sonny Caberwal
CEO, Legends

‍

Legends Privacy Policy‍

Last Updated: February 4, 2026
‍

Gen Alpha Ventures, LLC, doing business as "Legends" ("Legends," "we," "us," or "our"), respects your family's privacy and is committed to protecting personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website and mobile web application (collectively, the "Services").

Legends provides educational and developmental programs designed for children ages 7 to 11. Our Services are designed for use through parent-managed accounts and for joint parent-child participation.

This Privacy Policy applies to parents and other adult users. Information collected from or about children under 13 is governed primarily by our Children's Online Privacy Protection Policy ("COPPA Policy"). If there is any conflict between this Privacy Policy and the COPPA Policy regarding children under 13, the COPPA Policy controls.

Coverage (United States + Canada). Legends is based in Texas (United States) and offers the Services to families in the United States and Canada. We are committed to complying with applicable U.S. privacy laws (including COPPA for children under 13) and applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, substantially similar provincial privacy laws. Under PIPEDA and applicable Canadian law, we collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, and we obtain meaningful consent for such collection, use, and disclosure.

1. Parent-Managed Accounts

Legends is a parent-managed service.

• Accounts are created and controlled by parents or legal guardians.
• Children do not create independent accounts.
• Login credentials are issued to parents.
• Children are not permitted to use Legends without parental involvement.
• All personal information about children is provided and managed through a parent account.

2. Information We Collect

We collect only the information reasonably necessary to operate Legends and provide our Services.

Information from Parents

We may collect:

• Name
• Email address
• Phone number (if provided)
• Account login credentials
• Subscription and billing status
• Customer support communications

Information About Children (Through Parent Accounts)

With verified parental consent, parents may provide:

• Child's first name or nickname
• Age or grade level
• Optional gender
• Program progress and completion records
• Responses to activities
• Interests and learning preferences

Payment Information

Payments are processed by secure third-party payment processors (such as Stripe). Legends does not store full credit card numbers.

Automatically Collected Technical Information

When you use our Services, we may automatically collect limited technical data, including:

• IP address
• Device and browser type
• Operating system
• Login timestamps
• Session activity
• Security and error logs

This information is used solely for internal operations, security, analytics, and service improvement.

3. How We Use Information

We use personal information to:

• Create and manage accounts
• Provide Legends programs
• Personalize learning experiences
• Track progress
• Process payments
• Provide customer support
• Send service-related communications
• Improve content and functionality
• Maintain safety and security
• Prevent fraud and abuse
• Comply with legal obligations

We do not use children's personal information for advertising or marketing purposes.

4. Cookies and Similar Technologies

We may use limited first-party cookies or similar technologies that are necessary to operate our Services, including to:

• Keep you signed in
• Remember preferences
• Maintain security
• Prevent fraud
• Improve performance

We do not use cookies or similar technologies for behavioral advertising, and we do not allow third-party ad networks to track users across other websites or services.

5. Third-Party Service Providers

We use trusted third-party service providers to help operate Legends, such as providers for:

• Hosting and infrastructure
• Payment processing
• Customer support
• Internal analytics

Service Providers may access personal information only as necessary to perform services on our behalf and are contractually required to protect it and use it solely for Legends' purposes. Legends does not permit third parties to use personal information for independent advertising or marketing purposes.

6. Research and Program Improvement

We may use and share de-identified or aggregated data for research, analytics, and program improvement. This information does not include direct identifiers such as names, email addresses, or contact information, and we do not attempt to re-identify individuals.

7. Data Retention

We retain personal information only as long as reasonably necessary to:

• Provide our Services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

When information is no longer needed, we securely delete or anonymize it. Upon account closure, children's personal information is deleted or anonymized within a reasonable period unless retention is legally required.

8. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including:

• Encrypted storage
• Access controls
• Limited employee access
• Regular security reviews

No system is completely secure. We cannot guarantee absolute security, but we work continuously to protect your information.

9. Your Rights and Choices (United States and Canada)

Parents and adult users may, subject to applicable law:

• Access and review personal information we hold about you (and, through your parent-managed account, about your child)
• Request corrections or updates
• Request deletion (where applicable)
• Withdraw consent (where applicable)
• Close your account

Requests may be made by emailing: hello@buildlegends.com. We verify identity before fulfilling requests and respond within legally required timeframes.

Additional note for Canadian users: Under Canadian privacy laws (including PIPEDA and applicable provincial laws), you may also have the right to:

• Challenge our compliance with applicable privacy law and our policies
• Ask questions about our data handling practices, including cross-border processing
• Request information about where your personal information is stored and processed, and which third parties have access to it

If you are a Canadian user and have concerns that we cannot resolve, you may also have the right to contact the appropriate privacy regulator in your province/territory or the Office of the Privacy Commissioner of Canada.

10. Children's Privacy (COPPA)

Legends complies with the Children's Online Privacy Protection Act. We collect personal information from children under 13 only:

• Through parent-managed accounts; and
• After obtaining verifiable parental consent through payment verification.

For more information, please review our COPPA Policy.

11. Users in Canada and Cross-Border Data Transfers

Legends is based in Austin, Texas, United States. Personal information may be processed and stored in the United States or other locations where our service providers operate.

If you are located in Canada, your information may be transferred outside of Canada for processing (including to the United States). In such cases, your information may be subject to the laws of the jurisdiction in which it is processed (which may provide different protections than Canadian law). We take reasonable steps to require our service providers to protect personal information with appropriate safeguards.

For Canadian users: You may request information about:

• The countries or jurisdictions where your personal information may be processed or stored
• The legal frameworks governing data protection in those jurisdictions
• Our safeguards for protecting your information during cross-border transfers

By using the Services and providing information to us, you consent to this collection, use, and cross-border transfer as described in this Policy, subject to applicable law.

12. Future Educational Partnerships (FERPA)

If Legends partners with schools or educational institutions in the future and receives education records under written agreements, we will handle such records in accordance with applicable FERPA requirements. Currently, Legends operates as a direct-to-parent service.

13. Governing Law and Jurisdiction

This Privacy Policy (and any dispute, claim, or controversy arising out of or relating to this Policy or the Services) is governed by the laws of the State of Texas, without regard to its conflict-of-laws principles.

To the extent permitted by applicable law, you agree that any legal action or proceeding arising out of or relating to this Policy will be brought exclusively in the state or federal courts located in Travis County, Texas, and you consent to the personal jurisdiction of those courts.

Canadian residents: This section does not limit any rights you may have under applicable Canadian privacy laws, including any mandatory rights or remedies that cannot be waived by contract.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify parents by email or through the Services and, where required, obtain additional consent. The "Last Updated" date reflects the most recent revision.

15. Contact Information

Gen Alpha Ventures, LLC
32028 E Ben White Blvd, Ste 240-2650
Austin, TX 78741
Email: hello@buildlegends.com

Privacy Questions (U.S. and Canada): You may contact us at the email above, attention: Privacy Officer.