Privacy Policy

1. Who We Are

Disrupt Labs, Inc. operates the Disrupt Kids app and website. We are a US-based company at 2750 S Alameda St, Los Angeles, CA 90058. Contact: hello@disruptlabs.xyz

2. Information We Collect

From all users:

• Display name (chosen by user — not real name required)
• Device type and operating system (for bug fixing)
• Gameplay data: scores, match history, gem balances
• App usage analytics (anonymous, aggregated)

From purchasing users (parents/guardians):

• Email address (for account verification and receipts)
• Payment information (processed by Stripe — we never store card numbers)

We do not collect real names, photos, location, school information, or social media profiles.

3. How We Use Your Information

• Operate and improve the platform and games
• Process gem purchases and subscriptions
• Maintain leaderboards and match history
• Send transactional emails (receipts, account alerts)
• Investigate and prevent cheating or abuse

We do not use children's data for targeted advertising, profiling, or any commercial purpose beyond operating the Service.

4. COPPA — Children Under 13

For users under 13, we:

• Require verifiable parental consent before account creation
• Only collect information strictly necessary to provide the Service
• Do not disclose personal information to third parties for any commercial purpose
• Provide parents the ability to review, update, or delete their child's information at any time
• Do not condition participation in activities on the collection of more information than is reasonably necessary

Parents may contact us at hello@disruptlabs.xyz to exercise any of these rights.

5. Sharing Your Information

We do not sell your data. We share data only with:

• Stripe — payment processing (PCI-DSS compliant)
• PlayFab (Microsoft) — game backend services (player accounts, leaderboards)
• Cloudflare — hosting and security infrastructure

All service providers are contractually obligated to protect your data and may not use it for their own purposes.

6. Data Security

We use industry-standard encryption (TLS/HTTPS) for all data in transit. Payment data is tokenized by Stripe and never stored on our servers. We perform regular security reviews and promptly address vulnerabilities.

7. Data Retention

We keep account data for as long as your account is active. When you delete your account, we delete your personal data within 30 days, except where we are required to retain it by law (e.g., financial records for 7 years).

8. Your Rights (GDPR)

EU/UK residents have the right to: access their data, correct inaccurate data, request deletion, restrict processing, and data portability. Contact us at hello@disruptlabs.xyz to exercise these rights.

9. Cookies

This website uses only essential cookies for session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.

10. Changes to This Policy

We will notify parents and guardians by email of material changes to this policy at least 30 days before they take effect.

11. Contact