Privacy Policy

ByteSprouts Academy ("we") runs this website for families. This policy explains what we collect, why, and the choices you have. Questions? Email thedgals2016@yahoo.com.

What we collect

• Parent account: your name, email address and a securely hashed password.
• Kid profiles (added by a parent): a first name or nickname, age, a username and a hashed 4-digit PIN.
• Learning progress: which lessons each kid has completed, XP earned and completion dates.
• Billing: your subscription status and a Stripe customer reference. Card details are entered on Stripe's secure checkout and never reach our servers.
• Usage statistics: anonymous page-view counts from Vercel Web Analytics, which does not use cookies.

Why we use it

• To run your account, let kids sign in and save their progress (performing our contract with you).
• To take payments and manage your subscription (contract).
• To keep the service secure, for example locking a profile after repeated wrong PINs (legitimate interests).
• To reply when you contact us.

We do not sell data, show adverts, or let kids message other users.

Children

Kid profiles can only be created by a parent or guardian, who is responsible for them. We collect the minimum needed for learning and recommend using a nickname rather than a full name. A parent can change or delete a profile at any time from the parent dashboard, and deleting a profile deletes its progress.

Cookies

We only use cookies that are strictly necessary: one keeps a parent signed in and one remembers which kid is signed in on a device. They are not used for tracking or advertising.

Who processes data for us

• Vercel (website hosting and anonymous analytics)
• Prisma Data Platform (database hosting)
• Stripe (payments and billing)

Some of these providers may process data outside the UK under appropriate safeguards.

How long we keep it

We keep account data while your account is open. Ask us to close your account and we will delete it, except records we must keep by law (for example payment records held by Stripe).

Your rights

Under UK data protection law you can ask to see, correct, export or delete your data, or object to how we use it. Email us and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).