Last updated: 16 June 2026. LearnPlay ("we", "us") is an educational games service for children, operated for parents. We take children's privacy seriously and aim to comply with applicable laws including COPPA (US) and GDPR-K (EU).
1. Who creates accounts
Only a parent or guardian creates an account, using their email and a password. Children do not provide an email; a parent sets up each child profile.
2. What we collect
- Parent: email address, a hashed password, and (if you subscribe) billing information handled by our payment processor (Stripe) — we never store card numbers.
- Child profile (set by the parent): a first name (or nickname), an avatar, a 4‑digit PIN (stored hashed), a year of birth (used to group players by age), and a voice preference for read‑aloud.
- Gameplay: scores, stars, time played, and answers to questions (including mistakes) so parents can see progress. This data is tied to the child profile, not to any external identity.
We do not collect a child's real full name, home address, phone number, photos, or precise location. There is no chat or messaging anywhere in the product, including multiplayer.
3. How we use data
To run the games, save progress, enforce parent‑set play‑time limits, match players of a similar age in multiplayer, and (for Premium) process subscriptions. We use the parent's email to verify the account, send password resets, and notify them when their child signs in.
4. Sharing
We do not sell personal data. We share only with service providers needed to run the service — currently our payment processor (Stripe) and our email provider — under their respective privacy terms. We may disclose information if required by law.
5. Advertising
The free tier may show ads in clearly marked slots. Where ads are served to children, we aim to use non‑personalized, family‑friendly advertising. Premium removes ads entirely.
6. Parental rights & control
A parent can, from the Parent Dashboard, view a child's progress and mistakes, change or delete a child profile, set or remove play‑time limits, disable game categories, and disconnect a child's session. Deleting a child profile removes its associated gameplay data. To delete your parent account and all associated data, contact us (below).
7. Data retention & security
Passwords and PINs are stored hashed (bcrypt). We retain data while your account is active and delete it on request. We use reasonable technical measures to protect data, but no method of transmission or storage is 100% secure.
8. Children under 13 / 16
Accounts are created and consented to by a parent or guardian. If you believe a child has provided us personal information without parental consent, contact us and we will delete it.
9. Changes
We may update this policy; significant changes will be reflected by the "last updated" date.
10. Contact
Questions or data requests: privacy@learnplay.net.