Last updated: 22 June 2026. LearnPlay ("we", "us") is an educational games service directed to children (primarily ages 0–12), set up and managed by a parent or guardian. We take children's privacy seriously and are built to comply with applicable laws including the U.S. Children's Online Privacy Protection Act (COPPA) and the EU GDPR, including provisions for children (GDPR‑K).
1. Who creates accounts
Only a parent or guardian creates an account, using their email and a password. Children do not provide an email; a parent sets up each child profile.
2. What we collect
- Parent: email address, a hashed password, and (if you subscribe) billing information handled by our payment processor (Stripe) — we never store card numbers.
- Child profile (set by the parent): a first name (or nickname), an avatar, a 4‑digit PIN (stored hashed), a year of birth (used to group players by age), and a voice preference for read‑aloud.
- Gameplay: scores, stars, time played, and answers to questions (including mistakes) so parents can see progress. This data is tied to the child profile, not to any external identity.
We do not collect a child's real full name, home address, phone number, photos, or precise location. There is no chat or messaging anywhere in the product, including multiplayer.
3. How we use data
To run the games, save progress, enforce parent‑set play‑time limits, match players of a similar age in multiplayer, and (for Premium) process subscriptions. We use the parent's email to verify the account, send password resets, and notify them when their child signs in.
4. Sharing
We do not sell personal data. We share only with service providers needed to run the service — currently our payment processor (Stripe) and our email provider — under their respective privacy terms. We may disclose information if required by law.
5. Advertising
The free tier may show ads in clearly marked slots, served by Google (AdMob in our mobile apps and AdSense on the web). Because LearnPlay is directed to children, every ad request is tagged for child‑directed treatment (COPPA) and under the age of consent (GDPR‑K), and we request non‑personalized, family‑friendly ads only — limited to a maximum content rating of "General". We do not use children's data to build advertising profiles or to show behavioral/interest‑based ads. Premium removes ads entirely.
6. Parental rights & control
A parent can, from the Parent Dashboard, view a child's progress and mistakes, change or delete a child profile, set or remove play‑time limits, disable game categories, and disconnect a child's session. Deleting a child profile removes its associated gameplay data. You can delete your account and all associated data at any time from the dashboard or via our account deletion page; you may also email us (below) to request access to, correction of, or deletion of your data.
7. Data retention & security
Passwords and PINs are stored hashed (bcrypt). We retain data while your account is active and delete it on request. We use reasonable technical measures to protect data, but no method of transmission or storage is 100% secure.
8. Children under 13 / 16
Accounts are created and consented to by a parent or guardian. If you believe a child has provided us personal information without parental consent, contact us and we will delete it.
9. Changes
We may update this policy; significant changes will be reflected by the "last updated" date.
10. Contact
Questions or data requests: privacy@learnplay.net.