Privacy notice
DRAFT — not yet reviewed by a lawyer and not in force. This describes what the software does today. It must be reviewed and approved by qualified counsel, and the operator details completed, before real children’s information is collected. Nothing here is a claim of compliance with any law.
Who runs this
PAPPLE WORLD FZE LLC, RAK, UAE. Contact: support@happylearningkids.com (mailbox to be confirmed as receiving mail). Further legal details: [to be completed by the company].
Who the service is for
Happy Learning Kids is designed for children aged 3–17, used through an account held by a parent or guardian. Children do not create accounts, have no password and cannot give their own consent.
What we collect
- Parent or guardian: name, email address, a password (stored only as a one-way scrypt hash), sign-in security counters, and the time the account was made.
- Child profile (added by the parent): a first name or nickname and year of birth. We ask for nothing else — no surname, photo, address, phone number, school or precise location. Please do not use a real full name.
- Consent record: which parent consented, when, for which child, the notice version and how consent was confirmed (currently: a signed-in parent with a confirmed email address).
- Learning activity: Happy Stars earned, rewards requested, which lessons were passed and the best quiz score for each, and game results needed to award stars. Games are scored on our server. If a parent sets a daily limit on game rounds, we also keep how many rounds were started on each of the last 14 days.
- Happy Habits: the routine names a parent or guardian types in (for example “Brush teeth”) and the dates a child marked them done and a guardian confirmed them. Please keep routine names simple and free of personal details. They are deleted when a child’s data is erased and included in the data export.
- Class sharing (optional): if a parent or guardian enters a class code, we show the person who runs that class a nickname the guardian typed, the lessons the child has passed and how many game rounds they played in the last 7 days. We do not verify that the class owner is a teacher. The guardian can stop sharing at any time, and it stops automatically if consent is withdrawn or the profile is erased.
- “Something wrong?” reports: when a child taps that button on a game or lesson and picks one of five fixed reasons (for example “The answer looks wrong”), we keep which game or lesson, the reason and the date, linked to the child’s profile until a member of our team marks it as handled, at which point the link to the child is removed. There is no free-text box. A guardian can see their own child’s open reports in the family dashboard. Our team sees only counts per game or lesson and reason, not who reported. Reports still open when you erase a child are deleted, and they are included in the data export.
- “Listen” button: on lessons for younger children, if the device has an English voice built into it, the lesson text can be read aloud by that voice on the device. Nothing is recorded or sent to us or to a speech service. If the device only offers online voices, the button is not shown.
- Sign-in session: one essential cookie (
hlk_session; see the cookie notice) that keeps you or the child signed in. It is HttpOnly, SameSite=Strict, and Secure on the live site. Only a hash of its value is stored.
We do not currently use advertising, behavioural tracking, analytics or third-party trackers, and we do not sell personal information. The only outside service the software can call is an email provider, and only to send you account emails (confirm email, reset password). Those emails contain a link, never a child’s details. [If this changes, this notice must change first.]
How we use it
To run the account, check that a parent has consented, let children play and earn Happy Stars, let a parent approve rewards, keep the service secure, and answer support requests. Happy Stars are learning points: they cannot be bought, sold, transferred or cashed out.
Sharing
Not shared with advertisers or data brokers. Email is processed by the email provider chosen by the company [name to be inserted once selected]. Hosting and database providers will also process data [to be listed once chosen].
Your controls (parents and guardians)
- See and download everything held about your child: “Download data” on the family page.
- Withdraw consent: pauses the profile and ends the child’s sessions immediately.
- Erase: removes the child’s name and year of birth. A pseudonymous record of star movements and the consent record are kept so that balances and consent history stay accurate; they no longer identify the child by name. [Counsel to confirm what must be kept and for how long.]
- Delete my account: at the bottom of the family page, after you type your password again and the word DELETE. It deletes your email address, password and name and erases every child you alone look after, as in “Erase” above. The consent record and the anonymous star ledger remain, with no names. [Counsel to confirm what must be kept and for how long.]
- Reset password: from the sign-in page.
How long we keep things
Sign-in sessions expire automatically (12 hours for parents, 3 hours for children); expired sessions and used email links are purged. A full retention schedule for accounts, inactive profiles and backups has not yet been defined [to be set with counsel].
Security
Passwords are hashed, session tokens are stored hashed, sign-in is rate-limited, parents can only reach their own children, and children’s sessions cannot perform parent actions. No system is perfectly secure; the company’s incident procedure exists only as an untested draft.
Changes and questions
Changes will be published here with a new version label (current: draft-2026-10) and, where required, parents will be asked to consent again.