Do I create my kid's account, or do they?
You do. Drivia Kids accounts are parent-created — you set the username and password. We never ask your kid for an email address.
Preparing your workspace
Drivia is built for K-12 districts, universities, parents, and learners. This page is the short version of how we protect you — and the smaller, more important version of what you can do to protect yourself.
Effective · Version 1
Draft pending review by counsel.
You do. Drivia Kids accounts are parent-created — you set the username and password. We never ask your kid for an email address.
Their first name (you supply), their age (you supply), the username and password you set, their learning progress (lessons completed, mastery scores, XP), questions they ask the AI tutor, optional voice clips when they use voice mode, their device IP, and a persistent device ID for session continuity. That's it. We don't collect last name, home address, phone, geolocation, photos, biometrics, or government ID.
Open your parent dashboard → Kids → pick your kid → tap Export all data (JSON). You get the entire record, including the audit trail of every consent event. You can also hard-delete the whole account from the same page.
Someone tried to sign in too many times with the wrong password. We automatically pause sign-in for 30 minutes and email you. If it was your kid forgetting, sit with them and try again after 30 minutes. If you don't recognize the activity, change their password right away from the parent dashboard.
No. No ads of any kind in the kid surface, no behavioral profiling, no data sold to ad networks. Ever.
Open your parent dashboard → Kids → pick your kid → reset their password (we send the reset link to your email, not theirs). Then turn on Pause sign-in until you've confirmed the situation. If you suspect any data was accessed, email wilson@drivia.consulting — we treat parent reports as P0 incidents.
Your password and any access codes your school issued you. Drivia will never ask for your password in an email, in a chat, or over the phone — if anyone does, that's phishing. Drivia staff don't need your password to help you; we can reset it from the admin side.
A link that looks like Drivia but the URL is slightly off (drivia-login.com, drivla.consulting, etc.). A message saying your account will be deleted in 24 hours if you don't click. An attachment claiming to be a Drivia document. An email asking you to “verify” your password. Real Drivia emails come from @drivia.consulting, link only to drivia.consulting or your school's subdomain (school-name.drivia.consulting), and never ask you to type a password into an email.
Single sign-on is not offered as a standard feature. Talk to us about your identity provider. Sign in on drivialearn.com with your Drivia email and password or an email code. If a portal, a link or an email sends you to a page that asks for your Drivia password, check that the address bar reads drivialearn.com before you type, and tell your IT contact if it does not.
Open your account settings → Security. You'll see every active session and recent sign-in. Revoke any session that wasn't you, change your password, and email wilson@drivia.consulting with the details.
Every row of data in Drivia carries an organization ID, and database-level policies enforce that one organization can only read its own data. The database refuses cross-organization reads even if app code were to ask for them.
If a security incident happens, we investigate and contain it, and we notify affected organizations and people as the law and your contract require. The audit trail of admin actions is part of that investigation.
Single sign-on is not offered as a standard feature. Talk to us about your identity provider.
Drivia does not have a SOC 2 report. We answer security questionnaires directly. Send your security questionnaire to wilson@drivia.consulting.
Email wilson@drivia.consulting with the details. We treat responsible-disclosure reports as P0 and respond within one business day. We do not pay bug bounties while we are bootstrapped, but we credit researchers on this page on request.