Family safety
and policies.

1. Publisher, scope, and acceptance

Convergence Quotient 45 Mission, Inc. publishes Bright Keys: Caribbean Gifts Quest, created by Dr. Sherry-Ann Brown. These Public Site Terms govern adult access to https://bright.smallkeysadventures.org, including /schools, public landing pages, sample lessons, printable materials, stories, and learning activities. Service and privacy correspondence can begin at https://bright.smallkeysadventures.org/support.

An adult accepts this edition by selecting the expressly labelled agreement checkbox and then selecting Accept and continue. The Privacy Notice and Cookies and Browser Storage Notice describe the applicable processing and are acknowledged in that action. The separate cookie acknowledgment receipt records its own purpose. A visit alone supplies no affirmative acceptance. A person who requires additional information can read the policies or contact support before accepting. Children use the learning activities with responsible adult guidance; the accepting adult acts in their own capacity. Representing a school or other organization requires a separately accepted institutional license and verified representative authority.

2. Permitted learning and school evaluation

The publisher grants a limited, nonexclusive, nontransferable permission, within the rights it holds, to view publicly offered materials for personal family learning and to use the school page sample lesson and teacher and caregiver kit for the described free seven day school evaluation. Authorized worksheets may be printed for that use. Other classroom, school, church, network, resale, redistribution, or commercial use requires the applicable written permission or license. An inquiry establishes a request for review; the written offer establishes the purchased scope, price, access, duration, renewal, delivery, and remedies after its valid acceptance.

Separate sites, vendors, family subscriptions, events, books, research, and institutional purchases retain their own applicable agreements. Public site acceptance authorizes the public uses stated here. A separately accepted agreement governs the subject matter it expressly addresses under its valid precedence clause. Draft policies labelled as proposed in the policy suite remain review materials; this Public Site Terms edition controls public site access where those drafts address the same matter.

3. Intellectual property, reverse engineering, and competitive misuse

Rights remain with the persons and entities that actually hold them. Third party software and content retain their applicable licenses. Access, evaluation, download, feedback, and acceptance convey only the stated permission. Families retain rights in their original drawings and reflections.

Except as expressly permitted by mandatory law, an applicable third party license, or specific written authorization, you shall refrain from reverse engineering, decompiling, disassembling, bypassing access restrictions, extracting protected source code or confidential materials, scraping protected collections, or copying, adapting, republishing, distributing, selling, or licensing protected program materials beyond the permission granted. You shall refrain from using protected expression, extracted source, or confidential know-how to create, commission, assist, or distribute a competing or substantially similar product. These restrictions concern misuse of protected materials and access; independent development, general knowledge, lawful competition, protected reporting, and other nonwaivable rights remain available. Security testing requires specific written permission identifying its scope except where law expressly permits the activity.

4. Adult responsibility, safe use, and education

A responsible adult supervises child use and every real world activity, adapts the materials to the child, reviews faith content and school suitability, and controls the device and account. Activities support Christian education, reflection, and kindness. Health, safety, spiritual, legal, and financial decisions require appropriate adult judgment and qualified guidance. Prepared content, including AI assisted content, may contain errors or unsuitable interpretations and should be reviewed for the intended setting.

Protect credentials and private information. Use the designated support pathway for concise adult service questions. Unauthorized access, malware, unlawful impersonation, exploitation, disclosure of another person’s information, interference with the service, and manipulation of consent, payment, or security records breach these Terms. Local child reflections and family learning records remain subject to the published Privacy Notice and caregiver controls.

5. Privacy, cookies, and acceptance evidence

The Family Privacy Notice and Cookies and Browser Storage Notice at /legal#privacy and /legal#cookies describe the current local storage, essential cookies, and server records. Optional advertising and analytics are inactive in this release. Acceptance acknowledges those notices and the currently disclosed essential storage. A later optional purpose requires its applicable notice and choice.

The permission ledger stores a random receipt identifier, pseudonymous browser identifier, account identifier when supplied by authenticated hosting, control and action, checkbox state where applicable, page path, device time, server receipt time, and an immutable snapshot and hash of the wording and policy edition presented. The essential HttpOnly cookie bk_consent_browser lasts up to one year; queued receipts use local browser storage until delivery. Restricted administrators can review the append-only history. Anonymous receipts evidence a browser action; authenticated receipts additionally identify the hosting account. The checkbox contains an adult capacity declaration, not independent age or identity verification. Receipt records are retained for service accountability and applicable legal duties subject to operator retention review and lawful rights requests through support. The Privacy Notice provides further details.

Adult public site acceptance, cookie choice, school license acceptance, payment authorization, research consent, and publicity permission have distinct purposes. Only the permissions explicitly presented and selected apply. Material revisions require prospective notice and renewed acceptance where applicable; prior wording and records remain preserved.

6. Indemnification and responsibility

Each party retains the responsibilities applicable to its own conduct. Personal family use and assistance to a child carry the liability and remedies provided by applicable law. These Public Site Terms create no contractual financial indemnity for a child, parent, caregiver, or school representative merely accessing the public pages. An organization or adult acting in an independent commercial capacity undertakes an indemnity only through a separate agreement conspicuously stating that obligation and accepted with the required capacity and authority.

Any institutional indemnity must identify its actual parties and protected beneficiaries, covered third party claims, causation, proportionate allocation, exclusions for the protected party’s own fault and nontransferable duties, notice, defense and counsel selection, conflicts, settlement consent, survival, and applicable dispute procedures. The detailed commercial cybersecurity and AI allocation in the proposed policy suite supplies review language for such a separately accepted agreement. Protected parties receive only rights validly granted to them. Provider agreements require their own valid assent.

7. Dispute resolution

Begin a service dispute through written information exchange at /support, identifying the feature or transaction, dates, issue, and requested remedy. The publisher will seek to acknowledge the notice within 15 calendar days and exchange information toward a resolution over the following 30 calendar days, subject to reasonable extensions agreed in writing. Share only necessary information and use suitable protected channels for sensitive evidence.

If discussion leaves an issue unresolved, either party may propose voluntary independent mediation. The parties must agree in writing on mediator, scope, reasonable fees, accessibility, confidentiality consistent with protected rights, and electronic participation. Each party bears its own expenses unless applicable law or a valid agreement provides otherwise. Available courts and small claims procedures remain accessible, together with urgent relief for safety, privacy, security, confidentiality, and intellectual property. Regulatory complaints, protected reports, and access to qualified advisers remain available.

These Public Site Terms preserve court, jury, and collective rights available under applicable law. Arbitration or additional dispute waivers require a separately accepted, complete agreement containing the applicable rules, forum, costs, procedures, remedies, and legally required disclosures and protections. Applicable conflict of laws and jurisdiction rules determine governing law and venue absent a valid separate selection. Support, negotiation, and mediation requests leave filing deadlines governed by applicable law unless a valid tolling agreement or other legal basis applies.

8. Availability, remedies, changes, and continuing provisions

Public educational materials are supplied as available, subject to express commitments and mandatory rights. Browser limits, interruption, or device loss can affect local saving. Adults can keep their authorized backups. The publisher may make proportionate service changes or restrict access for safety, security, unlawful activity, or material breach. Paid commitments and mandatory consumer remedies remain governed by the applicable accepted agreement and law.

Every disclaimer and restriction applies within lawful limits. Mandatory consumer, privacy, child protection, accessibility, and other nonwaivable rights remain available. This edition establishes no monetary liability cap. A court may sever an invalid provision to the extent permitted while preserving the lawful remainder. Delay in enforcement supplies no general waiver. Intellectual property, accrued duties, and dispute provisions survive only as their nature and law support. Changes to these Terms are dated and versioned; material changes require renewed affirmative acceptance where applicable. The publisher preserves prior presented editions for evidence. This edition is effective November 1, 2026 and applies prospectively upon the adult acceptance described in section 1.

1. Service and responsible parties

Bright Keys is a caregiver guided Christian educational experience published by Convergence Quotient 45 Mission, Inc. Dr. Sherry-Ann Brown is its creator and author. The Site credits Convergence Quotient 45 Mission, Inc. with program ownership. Exact rights allocation, operator contact address, and merchant of record require reconciliation before this proposed contractual edition becomes effective. COIM Inc. supplies the drafting standard; that role alone creates no contracting or payment relationship with a visitor.

These proposed Terms describe the Bright Keys service at https://bright.smallkeysadventures.org. OpenAI Sites supplies hosting and access capabilities. A technology reference identifies its actual role and establishes no additional endorsement or undertaking. Separate third party destinations retain their own terms and account requirements.

2. Caregiver guided eligibility

The intended learning audience is children approximately ages 5–10 participating beside a responsible adult, with spoken instructions and picture choices supporting early readers. A parent or legal guardian manages purchases and any contractual assent in their own adult capacity. A child participates through the caregiver guided activity pathway. The responsible adult reviews activities, decides permissions, supervises real world actions, and adapts the experience to the child.

The learning pages are publicly accessible under the current Site audience. Account based adult services and restricted administrative records retain their own authentication and authorization requirements. The responsible adult manages any required hosting account and complies with the provider’s applicable account eligibility rules. Caregiver guidance recorded in the browser establishes the stated supervision choice; any required verifiable parental consent needs its own appropriate method.

3. Free and premium scope

The six core islands, original gifts quest, glossary, caregiver dashboard, separate local sibling journeys, local backup and restoration, core printables, and personalized core journey book are complimentary subject to the applicable Site audience. Existing complimentary features remain available through their preserved routes.

The proposed Bright Keys premium collection adds six original stories, six corresponding creative exercises, six service missions, and their expanded printable story collection. Bright Keys pricing is USD $5 per month or $50 per year. Small Keys premium pricing is USD $5 per month or $50 per year; the proposed combined subscription is USD $8 per month or $80 per year. The Small Keys and combined benefit scope and access delivery require confirmation in the separate destination before those offers activate.

Purchases open only when the merchant, recurring price, included benefits, applicable taxes, refund handling, legal adoption, subscription portal, and access delivery have been verified. Billing details and the total appear before payment. The Subscription Terms provide the proposed renewal and cancellation rules.

4. Personal license and family contributions

The Platform License Agreement defines the permitted personal family use of materials. Rights remain with their actual rights holders. Family members retain rights they hold in their original reflections and drawings. Local journal entry supplies permission for the requested browser operation only. Publication, research, publicity, and unrelated model development require their applicable separate permissions.

5. Safe conduct and account protection

Use the supplied controls within their permissions. Keep the adult account and device under responsible control. Protect credentials and recovery methods. Respect other people, their boundaries, intellectual property, and private information. Restrict inputs to the activity purpose; use the designated support pathway for an adult technical question.

Malicious interference, unlawful impersonation, exploitation, unauthorized access, extraction of another person’s information, circumvention, malware, and manipulation of consent or payment evidence violate the permitted purpose. Legally protected reporting and activity remain governed by applicable law. Written testing permission must identify the resources and techniques within scope.

6. Educational character and human judgment

Stories and reflection themes support Christian family education. Gift themes are invitations to explore and practice over time. They provide conversation clues and depend on context, development, Scripture, community, and caregiver guidance. Material health, safety, spiritual, legal, and financial decisions remain with the responsible adults and qualified professionals as appropriate.

The educational experience creates no clinical, therapeutic, legal, financial, employment, agency, or fiduciary relationship. AI assisted content can contain inaccuracies or unsuitable interpretations. Read material passages and questions together and use independent judgment.

7. Availability, changes, and termination

The service is provided as available, subject to mandatory consumer rights and any express purchase commitment. Interruptions, browser storage limits, provider changes, and device loss can affect availability and local saving. Caregivers can export backups. A paid feature change affecting an existing purchase requires appropriate notice, remedies, and handling under applicable law.

Access may be limited or suspended for proportionate security or safety reasons, misuse, unlawful activity, or material agreement violations. Any lawful termination preserves applicable access, refund, privacy, and consumer rights. The termination of a learning account and cancellation of recurring billing are separate actions; use the subscription management pathway to stop future renewals.

8. Liability and mandatory rights

Any disclaimer or limitation applies only to the extent permitted by the law governing the particular relationship. Mandatory consumer, privacy, child protection, and other nonwaivable rights remain available. Liability for conduct whose exclusion applicable law prohibits remains subject to that law. This review edition states no unverified monetary liability cap.

Personal family users, children, and caregivers assisting children have no cybersecurity or AI indemnity under the proposed personal use edition. A commercial organization requires a separately reviewed agreement identifying its parties, authority, beneficiaries, covered claims, causation, allocation, defense, settlement, and exclusions. The COIM cybersecurity provisions below preserve those distinctions.

9. Dispute resolution and governing procedures

This section sets out the proposed resolution process for a Bright Keys service dispute. The parties are the adult or organization actually contracting for the service and the responsible operator identified in section 1. Children participate in learning through a caregiver; a child’s play, story choice, or cookie acknowledgment supplies no dispute agreement. These proposed contractual provisions retain the counsel review and adoption status displayed with this edition.

Written notice and information exchange. An adult can begin by selecting a suitable topic at https://bright.smallkeysadventures.org/support and providing the affected feature or transaction, relevant dates, a concise description, and the remedy requested. The authenticated support pathway provides a receipt. Share only the information needed to evaluate the matter. Sensitive evidence can be requested through a suitable protected channel. An account access problem can be raised through the available Site or hosting support route; access to a particular account form is not a condition for exercising a legal right.

Good faith negotiation. The receiving party should acknowledge a written notice within 15 calendar days and exchange relevant information electronically. The parties should allow up to 30 calendar days after receipt to explore a practical resolution unless they agree to a different period. Written correspondence is the preferred initial method. A signed or otherwise validly accepted written resolution records any agreed payment, correction, access change, deadline, and scope of release.

Voluntary mediation. If negotiation leaves a dispute unresolved, either party may propose an independent mediator. Mediation proceeds when the parties agree in writing to the mediator, scope, scheduling, confidentiality protections, and fees. Electronic or asynchronous information exchange may be used when appropriate. A family may participate remotely and request reasonable accessibility arrangements. Mediation is voluntary and supplies a settlement only when the parties validly accept that settlement.

Costs and participation. Before mediation begins, the parties must agree how mediator charges will be paid. A consumer retains any more protective fee rules supplied by applicable law. Each party bears its own legal expenses unless an applicable statute, valid agreement, or authorized decision provides otherwise. A proposed mediation procedure must preserve an accessible means to pursue an eligible claim.

Courts, small claims, and urgent protection. A party may use an available small claims procedure or a court with lawful jurisdiction. Legally available urgent or provisional relief concerning safety, security, privacy, confidentiality, or intellectual property remains available. A person may contact regulators, law enforcement, qualified advisers, or another protected reporting channel. Negotiation and mediation requests do not restrict those actions.

Arbitration requires a separate complete agreement. This review edition imposes no mandatory arbitration, jury waiver, or class or representative action waiver through browsing, cookie acknowledgment, or child participation. If the parties later choose arbitration, their separately accepted written agreement must identify the parties, covered disputes, administrator and rules or an agreed appointment process, seat and applicable law, arbitrator authority, filing and hearing procedures, allocation of fees, access and accessibility arrangements, available remedies, court review and enforcement, and all required consumer disclosures and safeguards. Any opt out or withdrawal rights required by law must be stated and honored. A distinct affirmative action must establish acceptance of that agreement.

Applicable law and venue. Mandatory consumer, privacy, child protection, and other nonwaivable protections apply according to their actual scope. In the absence of a valid, separately accepted governing law and venue clause, the applicable conflict of laws and jurisdiction rules determine governing law and the proper court. The drafting source’s choice of law for COIM Inc. establishes no automatic choice of law for Convergence Quotient 45 Mission, Inc. An adopted transaction specific agreement may address those matters subject to mandatory protections.

Confidentiality and deadlines. The parties may agree to protect settlement communications and appropriate confidential evidence, subject to legally required disclosures, protected complaints, applicable evidentiary rules, and communications with advisers. Initiating support, negotiation, or mediation does not by itself extend a statutory filing deadline. A legally effective tolling agreement requires the parties’ express agreement or another applicable legal basis. Each party remains responsible for preserving its available claims and defenses.

10. General provisions and electronic records

An adopted edition and expressly incorporated license and subscription provisions form the agreement for their respective subject matter, subject to mandatory law and valid precedence in any signed agreement. A signed agreement governs only the subject matter that its valid precedence clause addresses. Operational notices describe actual processing and retain their own legal function.

Material amendments apply prospectively through lawful notice and renewed affirmative assent when required. The operator must preserve the edition actually presented and the acceptance evidence appropriate to that transaction. A general statement that a website may change does not establish acceptance of a new financial obligation or a new dispute waiver. The displayed version date identifies the prepared edition; effective adoption and individual acceptance require their own evidence.

Invalid provisions are severable to the extent law permits, while preserving the intended lawful operation of the remaining agreement. A delay in enforcement supplies no general waiver. Any assignment or transfer must preserve applicable consumer rights, privacy commitments, paid access obligations, and lawful duties. Events beyond reasonable control excuse performance only within lawful limits and preserve any required notice, refund, or other consumer remedy.

Lawful export and sanctions requirements apply to relevant transactions and services. Accrued payment duties, properly applicable license limits, confidentiality, validly accepted indemnification, and dispute duties survive only to the extent their nature, adopted text, and law support survival. Headings aid navigation. Electronic notices and signatures require evidence appropriate to their purpose. For the present release, use the adult support pathway to request service or privacy information; an adopted commercial agreement must supply its verified formal notice addresses.

10A.1 Scope and responsible entity

This section applies to the website, application, program, and associated digital services identified in the applicable Terms of Use, including any artificial intelligence features and connected tools offered through them. “Site Operator” means the specific legal entity identified in those Terms as responsible for the relevant service. “AI feature” includes a system that generates, analyzes, classifies, retrieves, recommends, or acts on information using artificial intelligence. “Connected tool” includes an integration through which an AI feature or authorized user can retrieve information or perform an action in another system.

The Site Operator retains its applicable legal responsibilities for its own activities. Separate entities, independent collaborators, clinicians, research sponsors, payment recipients, hosting providers, AI providers, and other service providers retain the roles established by their actual activities, applicable agreements, and law. Use of a common technical platform or common legal standard alone does not combine those roles or establish a joint enterprise. References to OpenAI, ChatGPT, or another provider identify an applicable technology or service relationship only; any representation of endorsement or additional responsibility requires a documented basis.

10A.2 Authorized use and account protection

Use the service within the access permissions and purposes granted to you. Protect account credentials, authentication factors, recovery methods, and devices used for access. Complete identity verification and additional authentication reasonably required for the relevant function. Maintain accurate account contact information and promptly report suspected compromise through the reporting method identified in the applicable Privacy Policy or contact page.

Access to an account, document, dataset, administrative interface, or AI feature does not authorize access to another account or an additional data source. Automated access and delegated actions remain subject to the same permissions and legal obligations that apply to the person or organization directing them.

10A.3 Permitted information and confidential inputs

Submit only information that you are authorized to provide for the stated function, and limit the submission to what that function requires. Use the designated collection or upload pathway for sensitive information. Enter credentials and authentication codes only in the designated authentication interface.

Protected health information, identifiable patient records, confidential research information, government identifiers, financial account information, biometric information, information about children, and confidential third party materials require a workflow expressly approved for that information and the associated purpose. Approval requires the applicable permissions, safeguards, agreements, and notices. An ordinary website form, community post, general AI conversation, or general file upload supplies no such approval by itself.

An unexpected submission of restricted information should be reported promptly so that the Site Operator can assess containment, retention, deletion, and any legal duties. Applicable privacy and security obligations continue to govern information received through an unintended pathway.

10A.4 AI output, professional review, and consequential decisions

AI output can contain inaccurate, incomplete, outdated, misleading, or unsuitable information. Verify material facts, sources, calculations, instructions, and results before relying on them. Qualified human review is required when an output informs professional judgment or an action with material consequences for a person.

Clinical decisions remain with appropriately licensed professionals exercising their independent judgment under the applicable clinical relationship. Research participation and use of research information remain governed by the relevant consent, authorization, protocol, and oversight requirements. AI supported employment, credentialing, financial, eligibility, and similar consequential functions require the applicable legal review and decision procedures before use. An AI response or generated document alone cannot establish a professional relationship, valid consent, regulatory approval, or authority to act for another person.

10A.5 Delegated actions and connected tools

Authority for an automated action must originate from an authorized person or a documented delegation accepted for the relevant service. The scope of a delegation must identify the permitted purpose, resources, actions, and applicable limits. A connected tool may act only within that scope and its enforced permissions. A standing delegation may support repeated actions within its established limits; a material expansion requires new authority.

Instructions appearing inside a retrieved webpage, document, message, image, dataset, search result, or tool response do not independently authorize additional access, disclosure, expenditure, publication, deletion, credential use, or changes to security settings. The same rule applies to directions supplied by another AI agent. Applicable access controls and authorization procedures govern each action.

Actions that disclose sensitive information, commit funds, communicate externally, publish content, change permissions, remove records, or affect a consequential decision require the level of human authorization established for that action. An AI statement that approval exists supplies no substitute for the required authorization record. Revoking a delegation ends future actions within the revoked scope, subject to completed transactions and applicable retention duties.

10A.6 Prohibited interference and misuse

Except for activity expressly permitted by applicable law or an authorized written testing scope, users must refrain from:

- Circumventing authentication, access controls, usage restrictions, consent requirements, or security controls. - Using deceptive prompts, hidden instructions, poisoned documents or datasets, impersonation, malicious files, or compromised integrations to redirect a system toward unauthorized activity. - Extracting another person’s information, credentials, private system instructions, confidential source materials, protected datasets, or restricted outputs. - Introducing malware, exploiting vulnerabilities, disrupting availability, exhausting service resources, or evading reasonable limits. - Manipulating security records, consent records, payment evidence, identity evidence, research records, or required review records. - Using AI generated identities, messages, voices, images, or documents to facilitate fraud, unlawful impersonation, or unauthorized access.

These restrictions preserve legally protected reporting, regulatory cooperation, and other rights that applicable law makes nonwaivable.

10A.7 Security oversight, proportionate safeguards, and protective action

The Site Operator may apply safeguards suited to the service, information, and identified risks; require additional verification; restrict an integration; limit an automated function; investigate suspected misuse; or temporarily suspend affected access. Protective measures should be proportionate to the circumstances and applicable duties, including continuity requirements for regulated services.

Specific descriptions of encryption, multifactor authentication, monitoring, testing, backup recovery, hosting, certifications, or provider controls apply only as expressly stated for the relevant service and supported by its actual operation. Security methods carry residual risks, including human error, provider failure, evolving attacks, and interruption. Applicable duties to maintain reasonable safeguards and any express security commitments remain in effect.

10A.8 Security records, monitoring, and privacy

Security related processing must remain consistent with the applicable Privacy Policy, lawful purposes, and data minimization requirements. Relevant records may include authorized account identifiers, event time, affected resources, access decisions, consent state, tool actions, outcomes, and limited technical information appropriate to the event. Any collection of IP addresses, device information, interactions, or other personal information must be accurately disclosed and supported by the applicable legal basis.

Routine security event records must exclude passwords, authentication secrets, complete payment credentials, and unnecessary message bodies, prompts, uploads, patient details, or other sensitive field values. Any exceptional preservation of sensitive content for a specific incident must have a documented purpose, restricted access, and appropriate retention controls. Access, storage duration, legal holds, deletion, and rights requests follow the applicable record category and legal requirements.

Characterizing a technology or record as security related does not itself establish an exemption from consent, transparency, minimization, or other privacy requirements. Optional analytics, advertising, profiling, and similar purposes remain governed by their applicable controls and choices.

10A.9 Providers, model use, and changes in purpose

The applicable Privacy Policy and Data and AI Policy must describe relevant information categories, processing purposes, recipients, retention criteria, and available rights. Provider processing depends on the particular product, agreement, configuration, and data flow used for the service.

Submission of information for service delivery does not, by itself, authorize unrelated model training, model fine tuning, research, advertising, publication, or cross entity disclosure. Each additional use requires an applicable legal basis and the disclosures, agreements, permissions, and choices required for that use. Separate research consent and health information authorization requirements continue to apply where relevant. Model evaluation, abuse monitoring, service improvement, and model training must be described according to their actual operations.

Material changes in purpose, providers, sensitive information handling, automated authority, or individual rights require review and updated notice or consent where applicable before the changed activity begins.

10A.10 Security reports and incident response

Report suspected account compromise, unexpected disclosure, harmful automated action, or a security vulnerability using the verified reporting method identified for the service. Include the affected address or feature, a concise description, approximate discovery time, and sufficient information for investigation. Share sensitive evidence through a reporting method appropriate for that evidence. Avoid including passwords, active authentication tokens, patient records, or unnecessary personal information in an initial message.

The Site Operator will assess reports, take appropriate protective action, and satisfy applicable investigation, documentation, contractual reporting, and breach notification duties. Notifications will follow the recipients, timing, content, and delivery methods required by the laws and agreements applicable to the incident. Required notice will not be conditioned on completion of every aspect of an investigation. A report may require staged updates as material facts become available.

Users may communicate with regulators, law enforcement, counsel, and other recipients as protected or required by law. This section creates no restriction on those communications.

10A.11 Coordinated vulnerability disclosure

Use the designated reporting route to provide good faith observations about possible vulnerabilities. Active testing requires an applicable published authorization or a separate written authorization that identifies the systems, techniques, dates, data handling, and limits within scope. Permission from one Site Operator extends only to resources that it is authorized to place within that scope.

During authorized testing, minimize access to information, preserve service availability, stop activity that could materially harm people or systems, and promptly report unexpected access to sensitive information. Any promised safe harbor, recognition, compensation, or disclosure timeline must be expressly documented by the party authorized to provide it. Legally protected activity remains governed by applicable law.

10A.12 Relationship to the coordinated legal suite

This section supplements the applicable Terms of Use, Platform License Agreement, Privacy Policy, Data and AI Policy, participation agreements, and service specific terms. Mandatory law and any more protective obligations imposed by applicable health, research, consumer, employment, or privacy requirements continue to govern. A signed agreement governs the subject matter it expressly addresses according to its valid precedence terms.

Section 10A.13 supplies the specific indemnity rules for cybersecurity and AI matters when validly adopted for the applicable user category. Its express exclusions and allocation rules govern any overlapping general indemnity on that subject, including Platform Terms section 8 and the adopted Bright Keys contractual suite. The patient, research participant, and minor exclusion and the limits of the applicable business provision or personal-use exclusion control each such overlap. The remaining provisions do not expand an existing liability limitation, arbitration provision, or waiver, and preserve rights and remedies that applicable law makes nonwaivable. Existing entity specific governing law and venue terms remain subject to applicable law and counsel review. The Site Operator must maintain the effective date, version, and required acceptance or notice records for an adopted revision. The written testing authorization and mandatory law exceptions in Sections 10A.6 and 10A.11 govern any inconsistent extraction, reverse engineering, or security testing restriction in Platform Terms section 5 or Platform License Agreement section 2, solely within the authorization or legally protected scope.

10A.13 Cybersecurity and AI indemnification

Personal family users have no cybersecurity or AI indemnification obligation under this proposed family edition. No such obligation applies to a minor or to a parent, guardian, or representative solely because that person assists a minor. Each person and provider retains their own applicable duties. Mandatory consumer, privacy, patient, research participant, child protection, and other nonwaivable rights remain available.

Commercial adoption and authority. The following commercial allocation is a complete proposed procedure for a separate business agreement that expressly incorporates it after counsel review. It applies only when an organization accepts through an authorized representative, or an adult expressly accepts in an identified business or independent professional capacity. The accepting organization is the indemnifying party; an employee’s representative acceptance creates no personal guarantee. Merely visiting Bright Keys, accepting cookies, purchasing family learning, or helping a child creates no commercial indemnity.

Protected parties. The protected parties are the responsible operator expressly identified in the accepted commercial agreement and its officers, directors, employees, and authorized contractors acting within their duties for the covered service, including Dr. Sherry-Ann Brown in such a capacity. Another entity is protected only if that accepted agreement identifies it as a party or intended indemnity beneficiary and states its actual role. Reference to a technology provider or a related organization alone supplies no indemnity for it.

Covered claims and losses. To the extent permitted by applicable law, the accepting commercial party shall indemnify and hold harmless the identified protected parties against amounts awarded to an independent third party by a final judgment or binding arbitral award, a settlement approved under this procedure, and reasonable, necessary, documented expenses of defending the covered claim, but only to the extent caused by the commercial party’s material breach of accepted cybersecurity, confidentiality, authorized access, or permitted data use duties; unlawful, intentional, or reckless misuse of an AI feature, connected tool, credential, or security control; unauthorized submission or direction to process materials without the necessary intellectual property rights, privacy permissions, or confidentiality authority; or negligent breach of an expressly accepted credential protection or access administration obligation causing unauthorized access or disclosure. Covered conduct includes assigned personnel and contractors only to the extent the commercial party is legally responsible for it.

Excluded matters. A third party is a person or entity other than the indemnifying party or a protected party. The indemnifying party’s own claims, costs of pursuing an indemnity demand against it, and regulatory fines, penalties, punitive awards, or other amounts whose transfer law prohibits are excluded. Ordinary authorized use, account ownership, an AI error, or a security incident alone establishes no covered breach, misconduct, or causal responsibility. Other regulatory amounts require an express lawful agreement addressing that category.

Proportionate allocation. Responsibility is limited to the portion caused by covered conduct. Amounts attributable to a protected party’s negligence, gross negligence, willful misconduct, unlawful conduct, or contractual breach are excluded. Each protected party retains its own security, privacy, professional, and legal duties and must reasonably mitigate a covered loss. Mixed responsibility is allocated according to established contribution. The same loss may be recovered only once. Applicable insurance recovery, subrogation, and liability cap provisions require express reconciliation in the accepted commercial agreement.

Notice and defense. An affected protected party shall give reasonably prompt written notice of a third party claim alleging covered facts, provide reasonable information, and cooperate at the indemnifying party’s expense. Delayed notice reduces an obligation only to the extent the indemnifying party establishes material prejudice caused by the delay. Upon a proper tender, the indemnifying party shall provide and fund a reasonable defense of the covered portion, to the extent law permits, using qualified counsel reasonably acceptable to the affected protected party. That provisional defense obligation remains subject to allocation and reconciliation when the claim is resolved.

Defense control and conflicts. The indemnifying party may control the covered defense while meeting the accepted obligations. The protected party may participate through separate counsel at its own expense. Reasonable separate counsel expenses are recoverable only to the extent an actual conflict requires them or the indemnifying party fails to provide the required defense after a reasonable opportunity. For mixed covered and excluded allegations, the parties must agree a reasonable provisional allocation or obtain a determination through their applicable dispute process. Final allocation governs reimbursement.

Settlements. Prior written consent of the affected protected party is required for a settlement that admits fault on its behalf, imposes payment or continuing duties on it, affects its rights, or fails to give it a complete release of the covered claim. Consent to a settlement fully funded by the indemnifying party, providing that release and imposing no other burden, shall not be unreasonably withheld. A protected party seeking reimbursement for its own settlement must obtain the indemnifying party’s prior written consent, which shall not be unreasonably withheld for a reasonable settlement of a covered claim. Applicable counsel duties continue to govern.

Survival and relationship to other terms. A properly adopted commercial indemnity survives closure only for covered conduct occurring while that agreement was in effect, subject to applicable limitation periods and law. It preserves protected complaints and cooperation with authorities. Sections 10A.12 and 10A.14 govern overlap and contract formation. A provider requires its own valid agreement; publishing this procedure does not amend an OpenAI or other vendor contract. The accepted commercial agreement must identify the operative notice addresses, dispute procedure, governing law, and any reconciled insurance or liability treatment.

10A.14 Contract acceptance and provider agreements

Before relying on an indemnity, the Site Operator must present the applicable contract and its financial obligation conspicuously, identify the correct accepting person or organization, establish authority and legal capacity, and retain a record of affirmative assent and the exact version accepted. A footer link, cookie preference, Privacy Policy acknowledgment, or general browsing history alone supplies no substitute for the required contract formation evidence. Renew notice and acceptance for material amendments when required by the applicable agreement and law; apply new obligations prospectively according to valid amendment procedures.

A vendor, hosting provider, AI provider, independent clinician, or other counterparty is bound only through its own applicable agreement and valid assent. Publishing a clause on a Site does not amend that provider’s contract. Obtain a negotiated provider agreement where additional indemnity or remediation rights are required.

1. Permitted family use

Subject to the adopted Terms and applicable purchase scope, the rights holder grants a personal, limited, nonexclusive, nontransferable license to view and use the supplied Bright Keys materials for private family learning. This includes printing authorized worksheets, keeping personal journey exports, and using the portable package within the stated household scope. Additional group, classroom, church, organizational, or commercial use requires the appropriate written permission.

A complimentary or premium subscription grants the stated access and permitted uses; it transfers no ownership. Gifts, feedback, participation, or demonstrations create no ownership interest in the platform.

2. Rights and restrictions

Each entity reserves only the intellectual property rights it actually owns or holds by license in software, educational content, graphics, methods, workflows, taxonomies, documentation, branding, and other protected materials. Third party components remain subject to their licenses. The exact program rights allocation requires the reconciliation recorded in Platform Terms section 1.

Redistribution, republication, unauthorized commercial copying, extraction of protected source or confidential materials, and creation of a competing product using protected expression or confidential know-how require permission or another lawful basis. Reverse engineering and testing restrictions remain subject to mandatory law, lawful rights, and a specific written testing authorization. These provisions preserve the rights applicable law makes nonwaivable.

3. Family work and downloads

The family retains rights it holds in original drawings, reflections, and other contributions. It may keep its own export and backup. Downloaded program material remains governed by its stated license. Adult privacy choices and local saving operate independently of a grant of publicity or research permission.

4. Duration and remedies

Access continues for the stated complimentary or purchased scope while the applicable agreement and service remain in effect. Retained authorized household printouts may continue to support private family learning unless their specific license lawfully provides otherwise. Suspension and termination follow the adopted Terms and mandatory rights. Intellectual property, confidentiality, and restrictions that appropriately survive remain subject to their adopted terms and applicable law. The adopted Terms govern conflicts and remedies for this license’s subject matter.

1. Family device records

The new family experience saves explorer nicknames, random local explorer identifiers, reading preferences, text and sound settings, island stages, choices, reflections, mission planning confirmation, completion and return dates, and caregiver guidance in the browser. A nickname can still reveal personal information; the caregiver chooses an appropriate nickname and controls access to the device. These family profiles and reflections are handled locally by this release.

The caregiver can export the complete local family backup as JSON, restore it on another trusted device, export a complete text journey, print a PDF, delete an explorer, or clear the new family journey. Exported files are under the caregiver’s device and backup controls. Browser data and downloaded backups require separate management. The original quest and portable journey retain their distinct earlier local storage keys; their stored content remains accessible through the preserved routes and browser storage settings.

2. Hosting and adult account information

OpenAI Sites controls platform authentication and the current Site audience. The hosting and network layers receive requests and technical information needed to deliver and secure pages. Platform processing remains subject to the applicable provider notices, agreements, and configuration. This release does not assert a verified provider retention period. Account based family billing and support use the authenticated adult’s stable Site identifier; account email is sent to the payment service when a caregiver starts a configured checkout.

New child activity audit collection is paused. The prior implementation stored session identifiers, event names, context, server and device times, IP address, user agent, and limited metadata following its earlier caregiver action. Existing ordinary audit records have the original 90 day operational retention class, and earlier consent records have the original 24 month class. The earlier request-triggered cleanup remains part of the preservation baseline; provider backup retention and legal holds require operator review. This release schedules no new optional interaction tracking.

3. Adult payment, acceptance, and support records

When a verified checkout is activated, the server records the authenticated adult identifier, claimed parent or guardian capacity, the exact presented contract snapshot and hash, affirmative action, and server time. The payment service processes the adult billing details and supplies customer and subscription identifiers, status, plan, period end, and cancellation state for access delivery and subscription management. Card details are entered in the secure payment service.

An adult support request stores the adult account identifier, selected topic, request text, receipt identifier, status, and time in the Site database. The owner dashboard provides restricted operational review. Requests should contain a brief description of the feature or issue. Keep child identities, health records, passwords, payment secrets, and detailed private family narratives in their appropriate private channels.

The proposed retention schedule for newly activated adult service records is: support requests for 90 days after resolution; contract and payment records for the period required to establish the transaction and meet applicable tax, accounting, claims, and legal duties, to be verified by the operator before payment activation. This release retains pending support requests until resolution; automatic closed-request deletion is implemented at subsequent service access. Verified requests can be used to review or remove records subject to lawful retention and holds.

4. Recipients, purposes, and choices

Local family records support only the requested family learning functions in this release. Adult service records support the requested account feature, support response, secure payment, purchase verification, access control, and legal recordkeeping. OpenAI Sites, its hosting infrastructure, and an activated Stripe account have their respective service roles. Any additional recipient or purpose requires review and updated notice or consent as applicable.

Optional advertising, marketing profiling, external activity analytics, research enrollment, child uploads, direct messaging, and public family posting are inactive in this release. The privacy choice control records its purpose specific choice on the device. A contract checkbox establishes its own action. A caregiver guidance checkbox establishes supervision choice. Each has a distinct meaning.

Applicable laws may provide rights of access, correction, deletion, restriction, objection, withdrawal, and portability. The dashboard supports local controls; account service records can be downloaded through the support page. Adult privacy requests use the restricted support pathway and require identity and scope verification. Caregivers can pause use at any time. Legal duties and holds can affect deletion of specific server records. Information processed by providers may cross borders; the operator must verify applicable transfer and regional protections before an expanded international rollout.

5. Security, incidents, and changes

The release uses platform access restrictions, authenticated account ownership checks for adult server records, same-origin checks for browser writes, bounded inputs, payment signature verification, and server entitlement checks. Local records are readable by people who can access the browser profile; the local caregiver screen supplies guidance and is not a device security lock.

Report technical security concerns through the adult support pathway with the feature, approximate time, and a brief description. The operator assesses incidents and any required notifications according to applicable duties. Provider failure, account compromise, device loss, and other risks remain possible. Material changes require an updated notice and the appropriate renewed consent or agreement action before changed processing begins.

6. Optional local voice reading

The caregiver can explicitly enable Read my entry to read selected writing with the af_heart voice on the device. Initial setup downloads voice and model resources from the Site and can use substantial data and device memory. The local voice worker receives the selected text inside the browser to produce playback. This feature supplies no microphone recording or child voice upload.

Selected writing stays within that local reading operation; the feature sends no entry text to an external speech service. Downloaded model resources may remain in browser caches under the browser’s controls. Stop cancels the reading and clears its temporary playback resources. Separately saved family reflections and exported backups retain their existing caregiver controls. Fixed recordings remain available when local entry reading is unavailable.

1. Implemented storage inventory

The essential bk_consent_browser cookie is HttpOnly, Secure, SameSite=Lax and lasts up to one year. Its hashed identifier links permission receipts to a browser. bright-keys-permission-outbox-v1 prefixed local storage entries preserve queued permission actions until server delivery. Adult Public Site Terms acceptance is saved with the cookie notice choice and public Terms version. Permission records include control, action, page, checkbox state when applicable, client and server times, optional authenticated account identity, and the content-addressed presented policy snapshot. Administrator access is restricted; anonymous browser records retain their anonymous identity status.

Bright Keys family storage key bright-keys-family-v1 contains the new local family journey and requested accessibility preferences until the caregiver clears it or the browser removes it. bright-keys-privacy-choice-v1 contains the privacy choice, cookie notice version, acknowledgment action, essential and optional category states, and time until changed or cleared. bright-keys-caregiver-guidance-2026-10-11.1 identifies the local caregiver supervision version. Legacy quest and portable journey records retain their earlier storage identities and remain part of the preserved experience.

Platform authentication may use essential cookies or comparable technologies governed by the hosting provider. Bright Keys delivers its artwork, self hosted fonts, and prepared af_heart narration recordings from the Site. Playback begins through a visitor action and provides replay and Stop controls. These prepared recordings read the supplied learning content. The family can also choose shared reading.

2. Independent choices

A compact notice at the bottom asks the grown-up to acknowledge all cookies and device storage currently used before entering the learning activities. The notice links directly to the complete Terms, Family Privacy Notice, and Cookies and Browser Storage Notice. Cookie preferences remains available from the policy pages and the Site footer. Policy and support pages remain available before acknowledgment. Acknowledgment is saved locally with its notice version, action, categories, and time; when storage is unavailable it lasts for the current visit. Optional analytics and advertising remain inactive. The notice acknowledgment records its own purpose. The separate adult agreement checkbox and Accept and continue action establish acceptance of the current Public Site Terms at /terms, including their scope and safeguards, and acknowledge the Privacy and Cookie Notices. School licenses, commercial indemnity, arbitration, publicity, research, and future optional tracking require their applicable separate agreement or permission. Cookie preferences separately provides Reject optional, Manage preferences, and Accept all cookies for the technologies available in this release.

Revisit Privacy choices at any time to change or withdraw the preference. Clearing browser storage removes the saved choice and may also remove family progress. Optional analytics or other technologies require a new accurate inventory, purpose assessment, notices, and any required consent before activation. Browser privacy signals, including Global Privacy Control, are respected by keeping optional collection inactive.

1. Educational content and permitted information

Original stories and activities in this release were prepared with AI assistance and human direction. Visitors receive prepared educational content. Family reflections are local browser records, and this release supplies no family conversational AI or automated spiritual determination. The gift themes support caregiver discussion and learning over time.

Use the local reflection space for a brief observation, question, or caregiver guided response. Drawings can be made on paper. Sensitive health information, government identifiers, payment credentials, confidential third party information, and identifying details about other children belong in appropriate private workflows.

2. Limits and human responsibility

AI assisted material can contain inaccuracies, unsuitable language, or incomplete context. Read passages in the family Bible, use qualified human guidance where relevant, and verify consequential facts. An activity or output alone establishes no diagnosis, prophetic certainty, professional relationship, legal consent, or authority to act for another person.

3. Additional data uses

Local journaling supplies the requested browser function. This release performs no server model training, fine tuning, research analysis, advertising profiling, or publication of those local reflections. An adult service request may be reviewed for its stated support purpose. Unrelated analysis, cross entity disclosure, identifiable publicity, and research require their applicable lawful basis and separate permissions.

Provider processing depends on its actual products, agreements, and settings. These notices create no provider contract amendment or guarantee. Material changes in providers, inputs, processing, automated authority, or rights require review and appropriate notice and consent before implementation. The cybersecurity section of the proposed Terms governs overlapping safeguards when validly adopted.

Family safeguarding 1. Stay beside a trusted grown-up

Choose one island together. A parent or guardian guides every real world mission, contact, visit, gift, message, and sharing decision. Choose familiar people and a safe place suited to your family.

A grown-up checks weather, water, roads, tools, food, allergies, and other practical risks before adapting an activity. A story illustration supplies an idea; the caregiver chooses the actual task.

Family safeguarding 2. Every child has a voice

Children can pause, skip a question, speak, point, or draw. Welcome a change of mind and a request for help. Keep learning gentle and free from pressure to perform or reveal a private story.

Touch, photographs, recordings, gifts, visits, and sharing require the appropriate permission. Respect the personal boundaries of every child and every person receiving a kindness mission.

Family safeguarding 3. Pause and reach a safe adult

If something feels frightening, confusing, secretive, or unsafe, stop the activity and tell a safe adult. Keep asking another safe adult when help is still needed. A child can seek help even when someone asks for secrecy.

A caregiver listens calmly, takes the concern seriously, helps the child reach safety, and contacts appropriate local protection or professional services. For immediate danger, use local emergency services. Family support records service issues for owner review; response time depends on availability.

Family safeguarding 4. Keep family stories in your care

Use an invented explorer nickname. Keep real child names, addresses, schools, contact details, photographs, health details, passwords, and payment information out of reflections and support requests.

Saved sibling journeys and reflections stay in this browser. A caregiver manages exports, restoration, deletion, and downloaded backups. A shared browser profile allows other device users to see its records; use the device account and screen lock for access protection.

Family safeguarding 5. Let gifts grow with care

Explore Scripture, notice kindness, and practise service over time. Gift themes invite conversation and learning. Welcome new interests and the freedom to question an interpretation.

Adults carry responsibility for consequential decisions. Prayer and reflection are voluntary. A child can pass on an exercise and seek the guidance of a trusted caregiver or church leader. Claims about a gift should be weighed with Scripture, context, and careful adult judgment.

Family safeguarding 6. Let the grown-up lead online steps

The adult manages sign-in, support, purchases, and external destinations. The current family experience supplies local learning activities; child chat, public posting, visitor uploads, research enrollment, advertising, and optional activity tracking remain inactive.

Read the destination and its own eligibility, privacy, and account requirements before opening another service. A caregiver supervision checkbox records the stated guidance choice. Verifiable parental consent, contractual assent, and privacy preferences each require their own appropriate process.

1. A caring learning environment

Treat family members and others with dignity, patience, honesty, and care. Welcome questions, respect the choice to pause, and keep personal stories private. A child may choose a drawing or spoken conversation. Each caregiver adapts activities to the family’s needs and boundaries.

2. Safe actions

The responsible adult guides every real world mission, contact, message, gift, visit, and sharing decision. Choose familiar people and safe tasks approved by the caregiver. Permission is specific to the action and can change. Use gentle language and respect the recipient’s response.

3. Service boundaries and reporting

This release offers private family activities. Public posting, child messaging, visitor uploads, and a moderated online child community are inactive. Harassment, threats, unlawful discrimination, exploitation, impersonation, malicious interference, and unauthorized information sharing violate the permitted purpose.

The caregiver can pause an activity, use the support pathway for an operational issue, and seek appropriate local or professional help for a safety concern. Urgent danger requires the appropriate emergency response through the responsible adult. Legally protected reporting remains available.

1. Voluntary feedback

An adult may submit a technical support issue or choose to share a product suggestion through the designated support pathway. Ordinary family play requires no research or product feedback participation. Keep the description focused on the feature and exclude unnecessary personal details.

2. Suggestion permission

If an adult intentionally provides a product suggestion, the proposed permission allows the operator to review it, combine similar suggestions, and incorporate the idea into product improvements without an obligation to pay royalties or provide ownership in those improvements, subject to the adult’s actual rights and applicable law. A private family reflection is distinct from an intentionally submitted product suggestion. This proposed license requires its appropriate notice and assent before contractual reliance.

3. Beta conditions

Experimental features may change, contain defects, or be interrupted. Maintain a local backup where saving matters. Use established caregiver and professional judgment for consequential decisions. Any paid beta offer must disclose its scope and consumer remedies before purchase. Publicity, recordings, identifiable quotes, and research analysis need their own permissions.

1. Current status

This release operates as family education. Research enrollment, study consent, and research use of local child reflections are inactive. An ordinary visit, subscription, privacy preference, or support request supplies no research consent.

2. Separate research requirements

Any later study requires its own verified sponsor, purpose, eligibility, protocol, required ethics or IRB review, data categories, risks, benefits, privacy protections, contacts, assent and caregiver permission procedures, and appropriate informed consent. Participation must be voluntary with a clear withdrawal pathway and explanation of limits for already analyzed data.

Study notices must identify retention, recipients, de-identification protections, publication handling, and any separate health information authorization. Identities, photographs, and identifiable contributions require their applicable permission. Declining research preserves ordinary family access subject to the applicable service agreement. The relevant approved research documents govern that study; this policy establishes no enrollment.

1. Current status

This release supplies caregiver guided household activities. A formal working group, volunteer placement, or institutional collaboration requires its own accepted agreement. Family participation establishes no employment, grant, partnership, agency, or ownership relationship.

2. Requirements for a later group

A future adult led group must establish the actual organizer, scope, eligibility, supervision, confidentiality, contribution ownership and licenses, conduct, recording and publicity permissions, feedback handling, permitted data, access duration, exit, and dispute provisions. Related entities and independent partners retain their verified roles. Child participation requires its own appropriate safeguarding and permission procedures.

Use contributions only within the agreed purpose. Protect confidential and personal information. Participation can end under the applicable agreement with relevant privacy, confidentiality, and rights duties preserved. Identifiable publicity, research, recordings, or commercial licenses require their expressly agreed terms.

1. Current status

Bright Keys provides self paced family learning. This release accepts no event registration, attendance fee, event recording, or child image upload. An ordinary subscription establishes only its specified digital access.

2. Requirements for an activated event

A later event must identify its actual host, dates, time zone, location or access method, age range, supervision, accessibility, capacity, price, cancellation and refund rules, schedule changes, permitted use of materials, and support contact before registration. Recording and publicity require conspicuous notice and the appropriate separate permission.

Attendee conduct, safety, privacy, and access duration must match the event’s operation. Material changes and cancellations require appropriate notice and consumer remedies. Event agreements govern the event’s actual scope and preserve mandatory rights. Child attendance and sharing need the applicable caregiver permission and safeguarding procedures.

1. Exact recurring offers

Bright Keys premium: USD $5 monthly or USD $50 annually. Small Keys premium: USD $5 monthly or USD $50 annually. Both adventures premium: USD $8 monthly or USD $80 annually. An annual term charges its full annual amount at purchase and renewal. The displayed monthly equivalent is an explanatory comparison. Applicable taxes appear in the secure checkout total.

Bright Keys premium contains six expanded original stories with six activities, six missions, six creative exercises, and an expanded printable collection. The free core retains six islands, glossary, caregiver and local saving tools, core printables, and core journey book. Small Keys premium and combined access activate after the counterpart’s benefit scope and delivery are verified. Exact product descriptions must accompany the activated offer.

2. Adult purchase and renewal consent

A parent or legal guardian uses their own adult account, reviews the presented Terms and offer, affirmatively agrees to the specific recurring plan, and enters payment information into the secure payment service. The adult’s contract action is recorded separately from privacy preferences and caregiver supervision. No child account or local reflection is required for payment.

The subscription renews at the selected monthly or annual interval until canceled through the subscription portal. The amount, interval, tax treatment, merchant, cancellation method, refund treatment, and access consequences must be displayed before the charge. Changes to recurring price or scope require the applicable notice and consent before taking effect.

3. Verified delivery

A return from checkout alone establishes no premium access. The server verifies payment evidence and the corresponding authenticated adult subscription. Premium content is delivered only to an account with a verified current Bright Keys or combined entitlement. New or renewed access follows successful payment confirmation. Provider errors or delayed confirmation show a pending state and preserve the free local family journey.

4. Cancellation, receipts, and refunds

The activated portal allows the adult purchaser to review billing, obtain available invoices and receipts, manage payment details, and cancel future renewals. Cancellation is intended to take effect at the end of the paid period, with access through that period, subject to the selected portal settings and mandatory rights. The operator must verify that behavior before activation.

Refund handling requires a verified merchant policy presented before purchase. Applicable statutory cancellation, refund, and consumer remedies remain available. Disputed or refunded payment may pause premium entitlement while the operator resolves the transaction appropriately. Deleting a local profile leaves any separate recurring subscription subject to its own cancellation. The family can keep its own local records and authorized household printouts.

5. Support and external destination

The activated merchant must provide a verified support contact and lawful billing information. The restricted adult support page can record an operational request in the Site. The external adventure has its own account identity and storage; combined access requires an implemented, tested adult entitlement handoff and corresponding revocation pathway. Purchase availability remains gated while those obligations are being prepared.