KinderLearner Privacy Policy

1. Who we are

KinderLearner is operated by:

Big Apple Digital LLC
Email: hello@bigappledigital.nyc

This Privacy Policy explains how KinderLearner handles information in the KinderLearner iPhone and iPad app, optional parent accounts and cloud synchronization, parent support, and the KinderLearner marketing pages.

KinderLearner's child-facing app and the broader NYC Schools Ratings service are separate experiences. NYC Schools Ratings accounts, family-calendar features and subscriptions are covered by the separate NYC Schools Ratings Privacy Policy.

2. Privacy at a glance

KinderLearner is designed so a child can use the app without creating an online account.

In Guest Mode:

• the child's learning profile and activity history stay on the device;
• the child does not need an email address or online account;
• no advertising is displayed;
• KinderLearner does not use third-party behavioral advertising or third-party analytics in the child-facing app; and
• the child's learning records are not uploaded to KinderLearner's cloud service unless a parent chooses to enable cloud sync.

A parent may optionally create a parent account and enable cloud sync. Before child learning information is uploaded, the parent is shown a separate notice explaining what will be collected, why it is collected, and how the parent can provide or withdraw authorization.

3. Guest play and information stored on the device

A parent may start using KinderLearner without creating an online account.

In Guest Mode, KinderLearner may store the following information locally on the device:

• a child nickname;
• selected avatar;
• activity attempts and answers;
• learning progress and skill evidence;
• saved and completed quests;
• stars; and
• virtual treasures.

Guest Mode records are not uploaded to KinderLearner's account or synchronization service unless a parent enters Parent Mode, chooses to connect the child's profile to a parent account, completes the required authorization process, and enables cloud sync.

We recommend using a nickname rather than a child's full legal name.

KinderLearner does not ask a child to provide:

• an email address;
• telephone number;
• home address;
• exact location;
• photograph;
• date of birth; or
• password.

Information stored locally may also be included in device backups depending on the parent's Apple and device-backup settings. Apple controls those backup services under Apple's own terms and privacy policies.

4. Children's information when cloud sync is enabled

Cloud sync is optional.

When a parent authorizes cloud sync for a child's profile, KinderLearner may upload and maintain:

• child nickname;
• selected avatar;
• exercise answers;
• activity and attempt history;
• dates and times associated with learning activity;
• skill evidence and learning progress;
• saved and completed quests;
• stars; and
• virtual treasures.

KinderLearner uses this information to:

• synchronize learning progress across authorized devices;
• restore the child's learning profile;
• choose appropriate learning activities;
• maintain learning progress;
• provide parent-facing learning guidance; and
• operate and secure the service.

KinderLearner does not make children's profiles public and does not provide child-to-child messaging.

5. Parent accounts

Parent accounts are intended for a parent or legal guardian.

To create or use a parent account, KinderLearner may collect:

• parent email address;
• verified account identifier;
• authentication and session information;
• IP address;
• request and device information used for security and abuse prevention; and
• records of consent or account choices where required.

Parent accounts use an email verification process. There is no child email login or child password.

Parent contact information used to obtain any required parental authorization will not be used for unrelated marketing unless the parent separately chooses to receive such communications.

6. Parental authorization for cloud sync

KinderLearner does not upload a Guest Mode child's learning profile to the cloud merely because a parent creates an account.

Before cloud sync for a child is enabled, the parent is provided a separate notice describing:

• the children's information KinderLearner proposes to collect;
• why that information is collected;
• how it is used;
• the service providers involved in operating the service;
• how the parent may provide authorization;
• how the parent may later stop further collection; and
• how the parent may review or delete the child's cloud information.

KinderLearner will not begin uploading the child's cloud-sync information until the required parental authorization process has been completed.

A parent may later turn off cloud sync and may request deletion of information already stored in the cloud as described below.

7. Turning off cloud sync

A parent may turn off cloud sync from Parent Mode.

When cloud sync is turned off:

• the device stops uploading new learning information for that profile to KinderLearner's cloud service; and
• information already stored in the cloud is not automatically deleted unless the parent also chooses to delete the cloud data or account.

Where available, KinderLearner will provide the parent with separate choices to:

1. turn off future synchronization;
2. delete the child's cloud learning data; or
3. delete the entire parent account and associated cloud family records.

Turning off cloud sync does not remove copies already stored locally on the parent's devices.

8. How we use information

KinderLearner uses information only as reasonably necessary to:

• provide learning activities;
• maintain and restore learning progress;
• personalize activity selection according to the child's learning history;
• provide parent guidance;
• synchronize authorized profiles across devices;
• authenticate parent accounts;
• prevent fraud, abuse and unauthorized access;
• respond to support requests; and
• comply with applicable legal obligations.

KinderLearner does not use children's learning records for behavioral advertising.

9. What KinderLearner does not do

KinderLearner does not:

• sell children's personal information;
• use children's learning records for targeted advertising;
• create advertising profiles based on children's learning activity;
• display third-party behavioral advertising in the child-facing app;
• provide public child profiles;
• provide child-to-child messaging; or
• send a child's answers to a live generative-AI chat model as part of the current learning planner.

KinderLearner does not use children's learning records to train generative AI models.

10. Narration and learning decisions

Marin and Cedar are AI-generated adult narration voices whose audio files are included with the app and play locally.

Children's information is not sent to the service that generated those voice recordings when a child listens to them.

Some older or fallback instructions may use Apple's on-device speech capabilities.

KinderLearner's current learning planner runs using curriculum, learning evidence and scheduling rules implemented by the app. It is not a live AI chat service sending a child's answers to a generative model.

Learning progress estimates are educational tools. They are not medical, psychological or developmental diagnoses.

11. Service providers

KinderLearner uses service providers to operate the optional online portions of the service.

Cloudflare

Cloudflare, Inc. provides services that may include:

• application and network infrastructure;
• database storage (Cloudflare D1);
• network and security services;
• abuse prevention; and
• request processing.

Depending on the feature being used, Cloudflare may process information such as:

• parent account identifiers;
• authorized child synchronization records;
• IP addresses;
• request information; and
• security-related information.

Cloudflare processes this information to provide services to KinderLearner and not for KinderLearner's behavioral advertising.

Verification-email delivery

Cloudflare, Inc. processes the parent's email address and information required to deliver account-verification or security messages.

We require service providers handling KinderLearner information to use that information for the services they provide to us and subject to applicable contractual and legal requirements.

12. Security

KinderLearner uses administrative, technical and organizational safeguards intended to protect information appropriate to its nature.

For example:

• app-to-service communications use authenticated encrypted connections;
• authentication credentials are stored using platform security features such as the iOS Keychain where applicable;
• access to cloud information is restricted according to service needs; and
• account verification and rate limiting are used to reduce unauthorized access and abuse.

No storage or transmission system can guarantee absolute security.

If we learn of a security event affecting personal information, we will respond in accordance with applicable law.

13. Retention

KinderLearner retains personal information only for as long as reasonably necessary for the specific purpose for which it was collected, subject to applicable legal obligations.

Guest Mode

Guest learning information remains on the device until the parent deletes the profile, deletes the app and its data, or otherwise removes the local information.

Offloading an app through Apple's device-management features may preserve local app data.

Parent account and synchronized learning information

Parent-account and synchronized learning information are retained while reasonably necessary to provide account access, synchronization, restoration and learning-history features.

If a parent account remains inactive for 24 months, KinderLearner may notify the parent and schedule the cloud account and associated synchronized learning information for deletion unless the parent returns to the service or applicable law requires longer retention.

We do not retain children's personal information indefinitely merely because an account once existed.

Authentication and security records

Verification codes expire after approximately ten minutes.

Expired verification records, session records, abuse-prevention records and similar operational information are removed according to their configured retention schedules when no longer reasonably necessary.

Recovery copies

When information is deleted from the active database, prior database states may remain temporarily recoverable through infrastructure disaster-recovery systems for a limited recovery period.

Such recovery copies may remain recoverable for up to 7 days before they expire and are not used for ordinary application purposes.

Apple-managed device backups are controlled separately through the parent's Apple settings.

14. Access, correction, deletion and stopping further collection

A parent may ask to:

• review children's personal information associated with the parent's account;
• correct that information;
• delete children's cloud information;
• delete the parent account; or
• refuse or withdraw permission for further collection or use of the child's cloud information.

Parents may use the available controls in Parent Mode or contact us at:

hello@bigappledigital.nyc

We may take reasonable steps to verify that a request comes from the relevant parent, guardian or authorized person before providing access to or deleting account information.

Please do not email identity documents unless we have specifically provided a secure method for doing so.

15. Deleting an account

A parent can request account deletion from:

Parent Mode → Parent account & sync → Delete account

The parent may be required to verify account control before deletion.

Deleting the account removes the parent account and associated active cloud family records and invalidates applicable account sessions.

Information previously synchronized to another authorized device may remain stored locally on that device until it is separately deleted there.

Deleting one parent account does not automatically delete unrelated Guest Mode profiles or records belonging to a different account.

Deleting local app data alone does not necessarily delete a cloud account. Likewise, deleting a cloud account does not automatically erase local copies stored on every other device.

For additional instructions, see: KinderLearner Data & Deletion Requests.

16. Parent support

If a parent contacts KinderLearner for support, we may process:

• email address;
• message contents;
• attachments voluntarily provided; and
• technical information reasonably necessary to investigate the request.

Please do not send children's full legal names, dates of birth, school schedules, health information, passwords, payment-card information or photographs unless specifically requested through an appropriate secure process.

17. KinderLearner website

KinderLearner's public marketing pages are intended for parents and other adults.

The website is separate from the child-facing app.

Cloudflare processes technical request information necessary to deliver and protect the website.

The KinderLearner iPhone and iPad app does not use Google Analytics. Children's learning activity from the app is not sent to Google Analytics.

Only the separate, adult-facing marketing website uses Google Analytics to understand website traffic and campaign referrals.

Website analytics may process information such as:

• browser and device information;
• approximate network-derived location;
• pages viewed;
• referring website;
• campaign parameters; and
• identifiers or browser storage used for measurement.

You can manage cookies and other website storage through your browser settings. These website settings are separate from the app's parent-account and cloud-sync choices.

The use of NYC Schools Ratings accounts, subscriptions and Family Calendar features is governed by the separate NYC Schools Ratings Privacy Policy.

18. Children's participation and public features

KinderLearner child activities do not include:

• public child profiles;
• public posting;
• child-to-child messaging; or
• a mechanism for children to contact strangers through the app.

Parent-account, cloud-sync, support, external-link and other adult-facing functions are intended for parents or guardians.

If you believe children's personal information has been collected or maintained without appropriate parental authorization, please contact us at hello@bigappledigital.nyc so we can investigate and take appropriate action.

19. Apple services

Apple may separately process information relating to:

• App Store downloads and purchases;
• TestFlight;
• Apple device backups;
• Apple ID or family features; and
• other Apple platform services.

Those services are governed by Apple's own terms and privacy practices.

20. Changes to this policy

We may update this Privacy Policy as KinderLearner changes.

The effective date at the top of the policy identifies the latest version.

If we make a material change to how children's personal information is collected, used or disclosed in a manner requiring new parental notice or authorization, we will provide the required notice and obtain any additional authorization before applying that new practice to children's information where required by law.

21. Contact us

For privacy questions or requests:

Big Apple Digital LLC
Email: hello@bigappledigital.nyc

Data and deletion requests: KinderLearner Data & Deletion Requests.