Privacy notice for parents
In short
- You, the parent, give consent before any child profile exists.
- Your child has no account, email or password: a nickname and an age band only.
- Voice clips are scored in memory and deleted at once. We keep only the words, as text, for 90 days.
- No ads, no third-party trackers, nothing to buy in child mode.
What we store, where, and for how long
We store data in Cloudflare’s database and storage. You can export all of it from the account page.
| Data | Why | Kept for |
|---|---|---|
| Your email and sign-in sessions | To sign you in with a code | Until you delete the account |
| Your consent record (method, date, notice version) | To prove consent, as the law asks | The life of the account, plus 3 years |
| Child profile: nickname, age band, language, picture | To run the games | Until you delete the child |
| Progress and answers (right or not, no audio) | Mastery, seeds, days practised | 12 months |
| Transcripts of what your child said, as text | The weekly report and Lúlú’s replies | 90 days, then erased |
| Weekly reports | To show progress over time | 12 months |
| Voice clips | To score the answer | Never stored: deleted when scoring ends |
Your child’s voice
Your child taps Talk to record a short clip, at most 30 seconds. The clip goes to our server only after they tap again or stop talking. We score it, then delete it. It is never written to a database, a file store, logs or an error tracker, and we never build a voiceprint.
Who processes data for us
- Cloudflare: hosting, database and file storage; AI Gateway, the one front door for every speech and language call, with logging turned off; and Workers AI, the backup when a provider below is down, which runs the open-weights Whisper speech model and the open-source Llama 3.3 language model (Meta’s licence) on our own Cloudflare account.
- Spitch: Yoruba and Igbo speech to text and text to speech. It receives the clip for scoring only.
- Sarvam: Hindi speech to text and text to speech. It receives the clip for scoring only.
- Anthropic: the replies of Lúlú, Bụmbụ and Dhinu, from Claude. It receives text only, never audio, names or ids.
- Mailysend: the sign-in code and the weekly report email, which holds a link and no child content.
Each processor works under a contract that bars training on your child’s data where the vendor offers it. We do not sell or share data for advertising. For lawyers and regulators, our risk map for counsel lists each law and each provider’s terms we have checked or still need to check.
Your rights
You can see, export and delete your child’s data and your account at any time, and withdraw consent. Withdrawal stops all speech processing at once. Depending on where you live, COPPA, the UK GDPR and the Children’s Code, the EU GDPR or PIPEDA give you these rights, and you can complain to your regulator.
Contact
Privacy questions: hello@heritage-kids.divineweb.co. We answer within 30 days, and sooner for a deletion request.