Privacy notice

Who we are

Learn with Zidni is operated by [LEGAL ENTITY NAME], [COMPANY / REGISTRATION NUMBER], registered in [PLACE OF REGISTRATION]. Registered office: [REGISTERED ADDRESS]. Trading address: [TRADING ADDRESS]. VAT: [VAT / TAX ID].

Contact: [CONTACT EMAIL]. Privacy contact: [PRIVACY CONTACT / DPO / PRIVACY OFFICER]. UK ICO registration: [ICO REGISTRATION NUMBER]. EU representative: [EU REPRESENTATIVE].

The product is aimed at families in the United Kingdom, and is also written so it can be used from the EU/EEA and the United States. Canada and Australia are not target markets of this build.

What the product actually collects

An adult account holds:

• Email address and a password, stored by Supabase Auth.
• Role, locale, timezone, dark-mode preference, and the time onboarding finished.
• A hash of the parent PIN, plus lockout counters. The hash is not readable with the account's own login token.
• The time the adult accepted the terms, and which version they accepted.

A learner profile holds a first name, an avatar key and an age band. A child profile has no email, no login and no date of birth.

If the adult sets them, we also store a daily time limit and whether read-aloud should play by default.

Learning records, once play is in use, are progress, scores, an XP ledger, streaks, badges and certificates. Youth and adult journals are private to that profile. A parent login cannot read journal text.

A privacy request stores the email address you type, the kind of request, and the message. We do not collect a payment card. There is no marketing list, no analytics profile and no advertising identifier.

Using the service is religious education. We do not store a separate religion field, and we do not send learning activity to an ad platform. Some US state laws treat a child's religious information as sensitive. [LAWYER: confirm how that is described.]

Why we collect it

• To create the adult account and keep it signed in.
• To show the right age band of lessons to the active profile.
• To keep the parent area behind a PIN.
• To record that the adult accepted the terms.
• To answer a privacy request or a complaint.

[LAWYER: state the legal basis for each purpose under UK GDPR and EU GDPR, and the equivalent description required by US state laws.]

Who receives it

• Supabase. Account authentication, database, and private file storage when certificates are added. Data: Adult email address, authentication secrets, learner profiles, learning records, privacy requests. Region: [SUPABASE PROJECT REGION].

Hosting of the website itself is [HOSTING PROVIDER]. No analytics, advertising, session-replay or email-sending service is connected in this build. Stripe is not connected. Nothing is sold, and nothing is shared for cross-context behavioural advertising.

[LAWYER: confirm the transfer tool for each processor outside the user's country — UK adequacy, the EU-US Data Privacy Framework, or SCCs plus the UK addendum.]

How long we keep it

• Adult account and learner profiles. [RETENTION PERIODS]. Deleted when the account holder deletes the account.
• Learning records (progress, XP ledger, streaks, badges). [RETENTION PERIODS]. Removed with the account, because they cascade from the learner profile.
• Journal entries. [RETENTION PERIODS]. Removed with the learner profile. Not included in the parent data export.
• Privacy requests. [RETENTION PERIODS]. The account link is cleared if the account is deleted. The request row itself is kept so the response deadline can still be met.
• Terms acceptance. [RETENTION PERIODS]. Stored on the account as a timestamp and the terms version string.

A scheduled deletion job for expired rows is not built yet. Account deletion removes the account and the learner profiles immediately.

Your rights

You can ask for a copy, a correction, or deletion, and you can complain. Signed-in adults can download a copy and delete the account from the parent area, behind the PIN. Anyone can send a request without an account. We record the request and aim to answer within 30 days, which is the shorter of the UK acknowledgement window and the usual US 45-day window.

The download does not include journal text. That is a product rule: a youth journal is closed even to the parent. [LAWYER: confirm this against access rights.]

We do not sell or share personal information. The privacy choices page explains that, and honours Global Privacy Control.

Several US states also expect an appeal if a request is refused. [LAWYER: write the appeal steps.] There is no automated decision that produces a legal or similarly significant effect.

Children

Children do not create accounts. An adult confirms they are 18 or over, then adds a child by first name and age band. The age bands include children under 13, so the service is child-directed.

A verifiable parental-consent method, beyond the adult account and the 18-or-over checkbox, is not built. [LAWYER: choose the COPPA method before launch. Email-plus is only available where the child's information stays inside the service.]

More of the design is on the Children's Code page and the safety page.

Complaints

Write to [PRIVACY CONTACT / DPO / PRIVACY OFFICER]. In the UK you can also complain to the Information Commissioner's Office (ico.org.uk). In the EU/EEA you can complain to the supervisory authority where you live. In the US, state attorneys general enforce the state privacy laws.

UK law expects a complaint to be acknowledged within 30 days. The request form stores a due date 30 days out. An acknowledgement email is not sent yet, because no email provider is connected. The confirmation on screen is the acknowledgement until that exists.