Privacy Policy

Last Updated: March 2, 2026

1. Introduction

KidsEnglish ("we", "our", or "us") operates the KidsEnglish mobile application and website (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal information when you use our Service.

We comply with applicable privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Children's Online Privacy Protection Act (COPPA).

2. Information We Collect

2.1 Information You Provide

When you create an account or use our Service, you may provide us with:

• Account Information: Email address, password (encrypted), and display name
• Profile Information: Child's name or nickname, avatar selection
• Authentication Data: Information from third-party login services (Google, Apple) if you choose to use them

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Learning Progress: Completed lessons, quiz scores, badges earned, and study statistics
• Usage Data: Features used, time spent learning, and interaction patterns
• Device Information: Device type, operating system, and app version
• Audio Data: Voice recordings for pronunciation practice (processed locally, not stored on servers)

2.3 Information We Do NOT Collect

We do not collect:

• Precise location data
• Contact lists or address books
• Photos or videos (except avatar selections)
• Social media information beyond login credentials
• Financial information (payments are processed by app stores)

3. How We Use Your Information

We use the collected information for the following purposes:

Purpose	Data Used
Provide the Service	Account info, learning progress
Personalize learning experience	Progress data, usage patterns
Sync progress across devices	Learning data, device info
Improve our Service	Aggregated usage statistics
Communicate with you	Email address
Ensure security	Account info, device info

4. Children's Privacy (COPPA Compliance)

4.1 Parental Consent

For users under 13 years of age:

• A parent or guardian must create and manage the account
• We require verifiable parental consent before collecting personal information
• Parents can review, modify, or delete their child's information at any time

4.2 Limited Data Collection

For child accounts, we limit data collection to only what is necessary to provide the educational service:

• Display name (can be a nickname)
• Learning progress and achievements
• Parent's email for account management

4.3 No Behavioral Advertising

We do not use children's data for behavioral advertising or share it with third parties for marketing purposes.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information only in the following circumstances:

• Service Providers: With trusted partners who assist in operating our Service (cloud hosting, email delivery), bound by confidentiality agreements
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger or acquisition (with prior notice)

6. Data Security

We implement robust security measures to protect your data:

• 🔐 Passwords are hashed using industry-standard algorithms
• 🔒 All data transmission is encrypted using HTTPS/TLS
• 🛡️ Regular security audits and vulnerability assessments
• 🔑 Secure authentication with JWT tokens
• 💾 Data stored in secure, access-controlled cloud infrastructure

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion:

• Personal data is deleted within 30 days
• Anonymized usage statistics may be retained for analytics
• Backup copies are purged within 90 days

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdrawal: Withdraw consent at any time

To exercise these rights, please contact us at privacy@kidsenglish.xyz.

9. Third-Party Services

Our Service may integrate with third-party services:

• Google Sign-In: For authentication (subject to Google's Privacy Policy)
• Apple Sign-In: For authentication (subject to Apple's Privacy Policy)
• Cloudflare: For content delivery and security
• Resend: For transactional emails

We encourage you to review the privacy policies of these third-party services.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

11. Cookies and Tracking

Our web application may use cookies and similar technologies to:

• Maintain your session and preferences
• Analyze usage patterns to improve the Service
• Ensure security

You can control cookies through your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending an email notification for material changes