Privacy policy

• Accounts belong to adults. Children do not have logins, passwords or messaging.
• We record what was watched, because that is what makes resume and an honest progress bar work.
• We do not sell your data, and there is no advertising anywhere on the platform.
• You can export or delete your account and its data at any time.

The rest of this page is the detail behind those four lines.

Account details. Your name, email address, a hashed password, and your language and currency preferences. We never store your password itself.

Child profiles. A display name and, optionally, an age. These exist so a parent can tell two children's progress apart. We ask for nothing else about a child, and a child profile has no login of its own.

Learning activity. Which lessons were opened, which segments of a video were genuinely watched, quiz answers, notes you write, and questions you ask an educator.

Purchases. Order history, invoices, and the last four digits and method of the payment instrument. Full card numbers never reach our servers — they go directly to our payment provider.

Technical data. IP address, browser and device type, and the sessions on your account so that you can see and revoke them.

What you post. Reviews, course questions, and responses on blog articles, together with the likes you leave.

• To run the service — signing you in, unlocking what you have bought, resuming a lesson where it was left, issuing certificates.
• To take payment — processing orders, refunds and educator payouts, and meeting the tax and accounting rules that apply to them.
• To keep the platform safe — detecting a stolen session, rate-limiting abuse, moderating content.
• To improve courses — educators see aggregated figures for their own courses, such as where in a lesson students commonly stop. They never see an individual child's viewing history.
• To contact you — receipts and account notices always; marketing email only if you opted in, with an unsubscribe in every message.

LearningKid is bought and managed by adults. We do not knowingly create an account for anyone under 18, and children cannot sign up on their own.

A child profile holds a display name and an optional age, nothing more. Children cannot post reviews, questions or responses, cannot message anyone, and are never shown advertising or content recommendations from outside the course they are watching.

If you believe a child has created an account, tell us at the address below and we will delete it and its data.

We do not sell personal data. We share it only with:

• Payment providers, to take payment and issue refunds.
• Hosting and storage providers, who store the platform's data and video on our instructions.
• Email delivery providers, for receipts and account notices.
• Educators — only the name and email of learners enrolled in their own course, so they can offer support. Never the wider user list.
• Authorities, where the law requires it.

• Account and learning data — while your account is open, then deleted within 30 days of you closing it.
• Orders and invoices — kept for as long as tax and accounting law requires, even after an account is closed.
• Raw analytics events — 180 days, after which only aggregated daily figures remain, and those identify nobody.
• Sessions — a refresh token expires on its own schedule and is deleted when you sign out or revoke the session.

You can, at any time:

• see and correct your details from your profile page;
• see every active session on your account and revoke any of them;
• turn marketing email off without affecting receipts and account notices;
• ask for a copy of your data, or ask us to delete your account entirely.

Write to the address below for an export or a deletion, and we will complete it within 30 days. Deleting your account removes your learning history and profiles; it does not remove the invoices we are required to keep.

Passwords are hashed, never stored. Sessions use short-lived access tokens with rotating refresh tokens, and reusing a rotated token revokes the whole session family — which is what limits the damage from a stolen token. Traffic is encrypted in transit.

No system is perfect. If a breach ever affects your data, we will tell you and the relevant authority without undue delay.

We use a small number of strictly necessary cookies and browser storage entries: an httpOnly refresh-token cookie that keeps you signed in, and a per-module session record in local storage that lets you be signed into Learn, Studio and Admin at the same time without them interfering.

We do not use advertising or cross-site tracking cookies.

When this policy changes materially we will tell you by email or in the app before it takes effect, and the date at the top of this page will change. The terms and conditions cover the rest of your relationship with us.