You are about to create a yeswekanban account for your child. yeswekanban is a learning-as-work platform: your kid talks to an AI agent, follows a structured week-by-week plan, logs their hours or completed tasks, and sends you invoices for the work they finish. By creating their account you confirm: 1. You are the parent or legal guardian of the kid whose account you are about to create, and you are at least 18 years old. 2. Your kid is 13 or older. yeswekanban does not support accounts for kids under 13 at this time. 3. You have explained to your kid what yeswekanban is and they want to use it. 4. You consent to the limited collection of your kid's data that the product requires to function: their name (or display name), age, the goals they set, the work they log, the conversations they have with the AI agent, and the invoices they generate. We do not sell this data. We do not use your kid's conversations to train external AI models. 5. You are responsible for the credentials you create for your kid and for any account activity on their behalf. 6. You can delete your kid's account at any time by going to Settings → Delete account. Deletion removes their profile, plans, logged work, and chat history within 30 days. 7. You can withdraw consent at any time, which will pause your kid's account and prevent further AI conversations until you re-consent or delete. THIRD PARTIES WE SHARE DATA WITH (SUB-PROCESSORS). To run the product we rely on a small set of vendors. We share only what each vendor needs to do its job, and we never sell your kid's data to anyone. - Supabase (United States) — database, authentication, and file storage. Holds your kid's profile, plans, work logs, chat history, and uploaded artifacts. - Vercel (United States) — application hosting and CDN. Serves the site and processes each request. - Stripe (United States) — payment processing and bank linking (via Plaid). Handles parent payments and payouts. - Anthropic (United States) — AI features (Kanbi planning and tutoring). User-supplied content is sent to Anthropic for inference. Anthropic does not use this content to train their models under our enterprise terms. - Resend (United States) — transactional email delivery (sign-in links, receipts, notifications). - PostHog (United States) — anonymous product analytics. Kid sessions are explicitly excluded from PostHog: we do not send kid events, session replays, or any kid personal data. Parent-side analytics are limited to product usage events with no message contents. - Cloudflare (United States) — DNS and inbound email routing. Email you send to addresses at our domain transits Cloudflare before being forwarded; the message envelope, subject, and body are visible to Cloudflare in transit. - Axiom (United States) — off-platform audit log retention. Receives a mirror of activity events (sign-ins, payment events, plan transitions, security-relevant actions) including the affected internal account / profile IDs, IP address, user agent, and event type. We use this so a successful attack on our primary database cannot also erase the forensic trail. Axiom does not receive chat content, plan goal text, kid display names, or financial details. - Web push services (Apple Push Notification Service, Google Firebase Cloud Messaging, Mozilla Push Service — depends on your browser). If you enable push notifications, the notification title and body transit your device's browser-vendor push service. We send only short status notices (e.g. "Week 1 complete") through this path — never chat content or full plan text. This consent record stores the version of this text you agreed to, the time you agreed, and your IP address. We re-prompt you if we materially update this consent text, including when we add or change a sub-processor. If anything above is not true for you, do not continue. Email us at hello@yeswekanban.app and we'll help.