Children's data and privacy
This page is a plain-language summary of how the product handles a child's data. It is a required notice, not marketing copy.
What we store about a child
A display name, a login code, an age, an optional avatar image, and the record of what they answered, earned and spent. No email address, no phone number, no location.
Photographs
If you generate an avatar, the photograph you upload is stored on our own server outside the public web root, sent to our own image service, and deleted as soon as the avatar has been produced — and in any case within an hour. It is never uploaded to a CDN, never logged, and never included in an error report. Only the generated cartoon avatar is kept, and only after you have approved it.
No third-party tracking
There is no third-party analytics, advertising or tracking on any child-facing screen. The app talks to our own API and, when you add playlists, to YouTube's official player.
Your control
You can deactivate a child at any time. Deleting a child permanently also erases their ledger history, which we keep otherwise because it is the record of money genuinely owed.