Privacy Policy

Last Updated: June 1, 2026

1. Who We Are

WiseKids ("we", "us", "our") operates the WiseKids educational platform at wisekids.app. Contact us at support@wisekids.app.

2. What Data We Collect

Parent Accounts

• Name and email address — used to identify your account and for login.
• Password — stored as a cryptographic hash; we never store your plain-text password.
• Account creation date — for administrative purposes.
• IP address — logged temporarily during login and registration for security rate-limiting. Deleted automatically after 30 days.

Child Accounts

• Name, username, and age — used to identify the child's profile.
• PIN — stored as a cryptographic hash; never stored in plain text.
• Learning activity data — quiz scores, skill progress, game levels, review schedules, and activity timestamps. Used solely to power the learning experience.
• Avatar choice — a visual emoji identifier, not personally identifiable.

What We Do NOT Collect

• No child email addresses.
• No payment card data (payments handled by third-party processors if applicable).
• No device identifiers, browser fingerprints, or behavioural tracking.
• No advertising or analytics cookies.

3. How We Use Your Data

• To provide, operate, and improve the WiseKids learning platform.
• To allow parents to monitor their children's progress.
• To implement spaced-repetition reminders and learning schedules.
• To protect accounts against brute-force login attempts (rate-limiting).
• We do not sell, rent, or share personal data with third parties for marketing.

4. Children's Privacy — COPPA Compliance (US)

WiseKids is designed for use by children under parental supervision. We comply with the Children's Online Privacy Protection Act (COPPA):

• A parent or legal guardian must create an account before any child profile can be added.
• By creating a child profile, the parent provides verifiable consent to data collection for that child.
• We do not collect email addresses or other direct contact information from children.
• Parents can review, modify, or delete their child's data at any time through the Parent Portal or by contacting us at support@wisekids.app.
• We do not condition a child's participation on the provision of more personal information than is reasonably necessary.

5. Your Rights — GDPR (EU/UK Residents)

If you are located in the European Union or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of all data we hold about you and your children via Account → Export My Data in the Parent Portal.
• Right to Erasure: Delete your account (and all associated child data) via Account → Delete Account. This is permanent and immediate.
• Right to Rectification: Update your name or email by contacting support@wisekids.app.
• Right to Portability: Your data export is provided in JSON format, a machine-readable standard.
• Right to Object: Contact us to object to any processing. As we have no marketing or profiling activity, this primarily applies to security logging (IP addresses).

Our lawful basis for processing is contract performance (providing the service you signed up for) and legitimate interests (security, fraud prevention). For child data, we rely on parental consent.

6. Your Rights — CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we collect. See Section 2 above for full details.
• Right to Delete: You may request deletion of your personal information. Use the in-app delete feature or email support@wisekids.app.
• Right to Opt-Out of Sale: We do not sell personal information. No opt-out is necessary.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

7. Cookies and Local Storage

WiseKids uses only essential cookies to maintain your login session. No advertising, analytics, or tracking cookies are used.

• Session cookie: Set when you log in; expires after 8 hours of inactivity. Secured with HTTP-only and SameSite flags.
• Cookie preference: Stored in your browser's localStorage to remember that you have acknowledged our cookie notice.

You may disable cookies in your browser settings, but this will prevent login functionality.

8. Data Retention

• Account data: Retained until you delete your account.
• Child profiles: Retained until the parent deletes the child profile or the parent account.
• Security logs (IP addresses): Automatically purged after 30 days.
• On account deletion, all data is permanently and immediately removed from our systems.

9. Data Security

We implement appropriate technical and organisational measures to protect your data:

• All passwords and PINs are hashed using industry-standard algorithms (bcrypt/scrypt).
• All data in transit is encrypted via HTTPS/TLS.
• Session cookies are HTTP-only and SameSite-restricted to prevent cross-site attacks.
• Login attempts are rate-limited to prevent brute-force attacks.

10. Third Parties

WiseKids uses the following third-party services:

• Chart.js (cdn.jsdelivr.net) — a JavaScript charting library loaded from a CDN for displaying progress charts. No personal data is sent to Chart.js or its CDN.
• Hosting infrastructure — our servers are hosted on Google Cloud Run (US). Data is stored and processed in the United States.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted with a revised "Last Updated" date. Continued use of the service after changes constitutes acceptance.

12. Contact & Data Requests

For any privacy questions, data access requests, or deletion requests not handled through the in-app tools:

Email: support@wisekids.app
Address: WiseKids, Washington, USA

We will respond to all requests within 30 days.