Privacy for families

Plain-language summary. Have your legal counsel review before launch.

What we collect

Parent: your sign-in (email or Google account, held by Google Identity Platform, not copied into our database), consent date, settings.
Child: a nickname, a cartoon avatar, an age band, progress, stickers and daily play minutes.
We never ask for a child's real name, photo, email or location.
Only if you choose to join a daycare or preschool class: the class and daycare name, so you can see and leave it.

Only you can add your child to a class, using the code from their teacher. Staff can't add children themselves.
The teacher sees your child's nickname, avatar, age band and lesson progress. Never your email, your other children, or any AI questions.
On the class tablet, live AI features are always off, and your daily time limit still applies.
Your child's profile and progress stay in your family account. Teachers can't change or delete them.
You can take your child out of a class at any time, and the teacher loses access straight away.

Core stories are written and reviewed by people before children see them.
Optional features (Ask Tomi, Make a Story) use Google Gemini on Google Cloud Vertex AI. Google does not use these prompts to train its models.
Every AI reply passes strict safety filters. Anything blocked is replaced with a gentle message and shown to you in the parent dashboard.
You can turn live AI features off at any time.

Everything is encrypted in transit and at rest. Blocked AI questions get an extra layer of encryption with our own key.
Blocked AI questions are deleted automatically after 90 days; daily play-time records after 30 days.
Only our server can read the data. Backups are kept for up to 14 days.