Privacy, in plain words
Irenaverse is a small, invite-only space for one family and a handful of friends. Here's what we collect, why, and what you can do about it.
Last updated 24 May 2026
The short version
- You can only get in via an invite. The site isn't searchable or open.
- We collect the minimum needed to run the app: your account, the code you write, and your chats with Ren.
- Your chats with Ren go to Anthropic — the AI that powers Ren. They're contractually barred from training on them.
- No ads, no tracking pixels, no third-party analytics. No selling data. Ever.
- You (or a grown-up) can delete your account and everything in it at any time.
What we collect
- Your account
- A display name, an email address, and a password (stored hashed — we never see it in the clear). If a grown-up invited you, we record who.
- The code you write
- Every project file you save, in your account. It's yours. You can rename, delete, or export it.
- Your chats with Ren
- The conversation thread is kept in your browser. The most recent turns plus the current code are sent to Anthropic each time you press Send, so Ren has the context to help. Anthropic processes them to answer; they don't train on them and don't keep them long-term (see their privacy policy).
- Lesson progress
- Which lessons you've finished, so the right next one unlocks.
- AI usage counters
- Tokens used and approximate cost per request — visible only to the site admin, used to keep the bill in check.
- Standard server logs
- IP address, browser type, the URL you requested, the time. Kept up to 14 days for security and debugging, then rotated out.
What we don't do
- No advertising. None. No third-party ad pixels or tracking cookies.
- No analytics services (Google Analytics, etc.) — no behavioural tracking.
- No selling, renting, or sharing personal data for marketing.
- No public profiles, no discovery, no DMs. Kids on Irenaverse can't be contacted by strangers because there are no strangers.
- No biometric data, no location tracking, no microphone or camera access.
Who else sees the data
Just two third parties, both essential to running the service:
- Anthropic — processes chat messages and the code excerpts you send to Ren. Bound by their commercial terms not to train on the data.
- Our hosting provider — the server in Auckland that stores the database and runs the site. Standard hosting, no human reads the data unless we ask them to help with a specific incident.
That's it. No marketing platforms, no CRMs, no data brokers.
Cookies
One cookie, called a "session cookie", that remembers you're logged in. It's deleted when you log out or when your browser clears it. No tracking cookies; no cross-site cookies.
Kids and grown-ups
Irenaverse is built for kids around age 10–14. Because of that, we take a few extra care steps:
- An invitation has to come from a grown-up who already has an account. Kids can't sign themselves up.
- Ren is told, in her system instructions, not to ask kids for personal information and to suggest "tell a grown-up" if a kid mentions something worrying.
- Grown-ups can ask to see, correct, or delete their child's data at any time. Email and you'll get a real human (Tom) replying within a few days.
Your rights
Under the New Zealand Privacy Act 2020 (and equivalent overseas), you can:
- Access any personal data we hold about you.
- Correct anything that's wrong.
- Delete your account and everything attached to it — there's a button in your profile, or just email us.
- Export your code and lesson progress — ask and we'll send a JSON dump.
Security
The site runs over HTTPS only. Passwords are bcrypt-hashed. The database is on a managed server with daily backups. We patch dependencies regularly. If we ever discover that account data has been exposed, we'll notify affected users within 72 hours and tell you what happened, what's affected, and what to do.
Changes to this notice
If we change anything material — what we collect, who we share with, how long we keep things — we'll update this page and, for logged-in users, post a notice in the editor. The "last updated" date at the top will move.