Privacy notice

High-privacy rules for the first production release

This service is designed for parent-managed child access. We do not use analytics, behavioural profiling, or advertising tracking in the product. If essential provider-side security or operational logs are processed by the hosting or database platform, they are limited to running and securing the service. Where personal data is processed, the release is designed with data minimisation, transparency, and high-privacy defaults intended to support UK GDPR and the ICO Age Appropriate Design Code (Children's Code).

Data we use

Parent account email for secure sign-in.
Child profile details chosen by the parent: name, age, avatar, school year, login name, and a hashed PIN.
Learning progress, rewards, and game session records so parents can monitor development.

Data we do not use

No analytics, behavioural profiling, advertising identifiers, or product tracking are used in the child learning experience.
No child email address, phone number, home address, school name, or precise location.
No child-to-child messaging, public profiles, or open social features.
No sale of children's personal data and no use of children's data for targeted advertising.

Parent controls

Parents create, review, and remove child profiles.
Parents control the child login name and PIN.
Parents can request access, correction, or deletion of hosted family account data.
This summary is provided for product transparency. Formal privacy terms, retention rules, and data-rights handling should be reviewed as part of the production release process.