Privacy policy
[Company name], [address], [contact email]. Last updated [date].
Draft: this page must be reviewed by a lawyer before launch.
What we collect
From parents: an email address, a password (stored only as a secure hash), a record of consent, and purchases. From children: a nickname you choose and lesson progress. We never ask a child for an email, a real name or a birth date.
What we don't collect
No advertising, no third-party trackers and no selling of data. Visitors without an account are counted only in anonymous daily totals, with nothing that identifies a person or device.
Who processes data for us
Payments go through Stripe, which handles card details. We never see them. [List hosting and email providers.]
How long we keep it
Unconfirmed accounts are deleted after 30 days. Accounts stay until you delete them. Records of sales are kept without your account, for as long as accounting law requires.
Your rights
You can download or delete your family's data at any time from your account. [Add rights and the supervisory authority for your country.]
Cookies
We only use cookies that keep you signed in, or keep a child's device linked. They're essential, so there's no tracking and no banner.