Before we save a learner’s progress.

This draft is for U.S. families. Operator contact details, processors, the approved verification method, and consent-record retention must be completed before public registration.

What would be saved

A parent email and secure sign-in records; preset learner aliases, avatars and grade bands; answered question versions, correctness, assistance, practice sessions and progress summaries. Children are never asked for email, legal name, birth date or school.

Why and with whom

We use these records to resume practice and show the parent progress. The reviewed hosting, database and adult-email providers process only what their function requires. Sign-in email contains no learner names or practice history. We do not use ads, behavioral tracking or public profiles.

Your choices

Guest practice remains available without saved server history. An approved verification process must establish consent before learner profiles or saved child practice are enabled. Email verification alone is insufficient. Parents can export or delete learner history, revoke consent, or delete their account after signing in again.

Proposed retention

Raw attempts: 90 days before deletion; security logs: 14 days; inactive learner history: 12 months after parent notice; rolling encrypted backups: 30 days. These proposals require review. Deletion removes current records and progress summaries; backup copies expire within the reviewed backup window and deletions must be replayed after restoration. Consent-record retention remains unresolved.