Children Privacy – More Than Conquerors

Effective date: June 18, 2026

This Children’s Privacy Notice (the “Notice”) explains how Double Wing Bison Inc., a Kentucky for-profit corporation (“we,” “us,” or “our”), operator of the More Than Conquerors application (the “App”), collects, uses, and protects personal information from children under the age of 13. This Notice supplements, and should be read together with, our general Privacy Policy and Terms of Service. It is written to comply with the U.S. Children’s Online Privacy Protection Act and its implementing regulations (“COPPA”).

If anything in this Notice conflicts with the general Privacy Policy with respect to a child under 13, this Notice controls. Capitalized terms not defined here have the meaning given in the Privacy Policy or Terms of Service.

1. Our Commitment and Mixed-Audience Approach

The App is built for a mixed audience of adults (coaches, parents, and adult athletes) and minors. We are committed to protecting the privacy and safety of every child who uses the App, and we hold the personal information of children under 13 to a higher standard than any other data we handle.

Our core commitments are simple and unconditional:

We collect from a child only the limited information reasonably necessary to operate the App for that child.
We use a child’s personal information for internal operation of the App only.
We never disclose a child’s personal information to third parties for those third parties’ own purposes.
We never make a child’s personal information public, and we never use it for behavioral advertising.
A parent or legal guardian is always in control: a child under 13 cannot have a standalone account, and a verified parent or guardian may review, correct, or delete the child’s information, or withdraw consent, at any time.

Throughout this Notice, “parent” means a parent or legal guardian who provides verifiable consent on behalf of a child, and “child” means a user we have identified as being under 13 years of age.

2. Age Screening Before an Account Exists

We use a neutral age screen so that we can identify children under 13 before any account is created and before we collect personal information for an ongoing account.

At sign-up, every prospective user is asked to enter a date of birth. The request is neutral — it does not encourage a user to falsify their age, and it does not reveal the age threshold that triggers our child-protection flow.
If the date of birth indicates the user is 13 or older, the standard sign-up flow continues under our general Privacy Policy.
If the date of birth indicates the user is under 13, the user cannot create a standalone account. Instead, the App routes the sign-up into a parent/guardian consent flow described in Section 4. No child account becomes active until a parent completes that flow.

We retain the date of birth to enforce these protections, apply the correct privacy rules, and recognize the account as a child account for as long as it remains one.

3. Information We Collect From a Child

We practice data minimization for child accounts. We do not condition a child’s participation in any activity on the child disclosing more personal information than is reasonably necessary to participate in that activity.

The information we may collect in connection with a child account is limited to the following:

Child’s first name — used to personalize the child’s in-App experience. We do not require or collect a child’s last name.
Username — a display name the child or parent chooses for use within the App.
Password (stored hashed) — we store only a one-way cryptographic hash of the password, never the password itself.
Date of birth — collected at the neutral age screen (see Section 2) and retained to apply the correct privacy protections.
Parent/guardian email address, and an optional backup parent/guardian email address — used to obtain consent, send required notices, and allow a parent to manage the account.
App activity — limited usage data such as drill and scripture completion, streaks, and progress within the App.
Push notification token — collected only if notifications are enabled for the account, and used solely to deliver App notifications.

We do not collect a profile photo or avatar for a child account. We do not knowingly collect precise geolocation, contact lists, or any persistent identifier from a child beyond what is listed above and what is reasonably necessary to operate the App internally.

4. How We Obtain Verifiable Parental Consent

Before we collect, use, or disclose personal information from a child to activate a child account, we obtain a parent’s verifiable consent using the COPPA “email plus” method. We do not require a government-issued ID from the parent. Because we use a child’s information for internal purposes only and never disclose it to third parties for their own use, the “email plus” method is the appropriate and permitted method of consent.

Consent works as follows:

Parent email required. When a sign-up indicates the user is under 13, the App requires a parent or guardian email address before any child account can be created.
Email verification code. We send a one-time verification code to that parent email address. The parent must enter the code in the App to demonstrate control of the email inbox.
Review and affirmative consent. Before consent is recorded, the parent is presented with this Notice and the Terms of Service, and must affirm in the App that (a) they are an adult and the child’s parent or legal guardian, and (b) they consent to our collection and use of the child’s information as described in this Notice.
Confirmation email (the “plus” step). After consent is recorded, we send a confirmation email to the parent email address. This confirmation lets a parent who did not authorize the account learn that an account was created and revoke consent. Revocation instructions are included in the confirmation email and are also available in the App and through Support.

Until a parent completes steps 1 through 3, the child account is not active, and we do not use the child’s information for any purpose other than completing (or declining) the consent process.

5. Direct Notice to Parents

Before obtaining consent, and through this Notice, we directly inform parents of the following:

That we have collected the parent’s email address (and the child’s first name and date of birth from the neutral age screen) in order to obtain consent.
The specific categories of information we intend to collect from the child, listed in Section 3.
That we use the child’s information for internal operation of the App only, as described in Section 6.
That we do not disclose the child’s information to third parties for their own purposes, do not make it public, and do not use it for advertising.
That the parent’s consent is required for us to activate and operate the child account.
That the parent may review the child’s information, refuse to permit further collection or use of it, and revoke consent and have the child’s account and information deleted at any time.
How the parent may contact us to exercise these rights (see Section 10).

If we ever materially change the categories of information we collect or how we use a child’s information, we will provide a new direct notice and, where required, obtain new consent (see Section 12).

6. How We Use a Child’s Information

We use a child’s personal information solely for the internal operation of the App. Specifically, we use it to:

Create, authenticate, and maintain the child’s account (first name, username, hashed password, date of birth).
Provide the App’s core experience — delivering drills and scripture content and tracking the child’s progress, completion, and streaks.
Communicate with the parent about the account, including consent confirmation, account notices, and security communications, using the parent/guardian email (and the optional backup parent email).
Send App notifications to the device only if notifications are enabled, using the push token.
Maintain the safety, security, and integrity of the App, prevent fraud and abuse, debug and fix errors, and protect the rights and safety of users.
Display a child’s participation within their own organization (for example, organization leaderboards or fundraising progress) only inside that organization — never publicly.
Comply with our legal obligations and enforce our Terms of Service.

We do not use a child’s personal information for any purpose that is not reasonably necessary to operate the App internally.

7. What We Do Not Do

For child accounts, we do not:

Use behavioral advertising. We do not serve targeted or behavioral advertising to children and do not allow third parties to do so through the App.
Disclose information to third parties for their own purposes. We never sell, rent, or share a child’s personal information with third parties for those third parties’ own marketing or other independent uses. The only third parties that touch child data are our service providers acting on our behalf and under contract (see Section 9).
Make a child’s information public. A child’s profile is limited and is never publicly exposed. Organization leaderboards or fundraising statistics that include a minor are visible only inside that organization and are never public.
Enable the AI chat assistant for child accounts. The App’s AI chat assistant is disabled for child accounts, so no child data is sent to any AI provider.
Enable voice or speech input for child accounts. Voice and speech input is disabled for child accounts (or restricted to non-personal processing that does not transmit a child’s voice or personal information to any AI provider).

These restrictions are built into the product, and we maintain them as conditions of operating child accounts under the “email plus” consent method.

8. Restricted Features for Child Accounts

To keep child data internal-use-only and to protect children’s safety, certain features behave differently for child accounts:

AI chat assistant: disabled. No AI chat is available on a child account, and no child information is sent to any AI provider.
Voice/speech input: disabled or restricted. Voice and speech input is turned off or limited to non-personal processing that does not transmit a child’s voice or personal information off-device to any AI provider.
Limited profile. A child profile uses the child’s first name only and has no public photo or avatar.
Organization-only visibility. Leaderboards and fundraising statistics that include a minor are shown only within that minor’s organization and are never published publicly or shared outside the organization.
No public exposure and no behavioral advertising. A child’s content and activity are not made public, and no behavioral advertising is delivered to a child.

9. Third Parties That Process Limited Child Information

We use a small number of trusted service providers to operate the App. These providers may process limited child information solely to perform services for us, on a service-provider basis, under contracts that restrict them to using the information only to provide their service to us and that prohibit them from using it for their own purposes. They are not permitted to disclose the information to others or to use it for advertising.

The service providers that may process limited child information are:

Cloud hosting and database infrastructure — stores and serves the App’s data, including child account data.
Email / SMTP delivery — delivers consent codes, confirmation emails, and account notices to the parent’s email address.
Push notification delivery — Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM), used to deliver App notifications when notifications are enabled.

Our AI provider does not receive any under-13 data, because AI features are gated off for child accounts (see Sections 7 and 8).

10. Parental Rights and How to Exercise Them

As the parent or legal guardian of a child who uses the App, you have the right to:

Review the personal information we have collected from your child.
Refuse to permit any further collection or use of your child’s personal information.
Revoke your consent at any time.
Delete your child’s account and the personal information associated with it.
Change the contact email or the backup parent email associated with the account.

How to exercise these rights:

In-App account recovery and management. A parent may manage the account from within the App. To protect against unauthorized changes, any change to the contact email is preceded by an in-App recovery step that sends a verification code to the parent email on file before the change takes effect.
Graduation to an adult account. If a child reaches the age at which they may hold a standalone account, graduation to an adult account requires parent approval before the account converts and before any feature restrictions are lifted.
By email. You may also contact us at support@doublewingbison.com (or through Support) to review, refuse further use of, correct, revoke consent for, or delete your child’s information.

Verification. Before we grant access to, change, or delete a child’s information in response to a request, we will take reasonable steps to verify that you are the child’s parent or guardian — for example, by confirming control of the parent email on file. We may decline a request if we cannot reasonably verify the requester’s identity and relationship to the child.

If you revoke consent, refuse further use, or request deletion, we will stop collecting, using, and maintaining the child’s personal information and will delete it as described in Section 11. This may make some or all of the child’s account unusable.

11. Data Retention and Deletion for Children

We retain a child’s personal information only for as long as reasonably necessary to operate the child account and to fulfill the purposes described in this Notice.

If a parent revokes consent, refuses further use, or requests deletion, we will delete the child’s account and associated personal information from our active systems, and we will instruct our service providers to delete it from theirs, except for records we are required to retain to comply with our legal obligations, resolve disputes, or enforce our agreements.
Any records retained for legal reasons are kept only for as long as required and are protected and access-restricted while retained.
We may retain de-identified or aggregated information that can no longer reasonably be associated with a child.

For details on how deletion works and how to request it, see Data & Account Deletion.

12. Changes to This Notice

We may update this Notice from time to time. If we make a material change to the categories of information we collect from children, how we use that information, or our parental consent practices, we will provide a new direct notice to parents and, where COPPA requires, obtain new verifiable parental consent before the change takes effect for existing child accounts. We will update the Effective date above and, when appropriate, notify parents by email. Non-material or clarifying changes take effect when posted.

13. Contact Us

If you have questions about this Notice or about your child’s information, or you wish to exercise any of the rights described above, contact us:

Email: support@doublewingbison.com
Mail: Double Wing Bison Inc., 1318 Jackson Pike, Harrodsburg, KY 40330

You may also reach us through our Support page. We will respond to verified parental requests within a reasonable time.