Sign in

Privacy Policy

Who We Are

Play and Learn with David is a children's educational platform offering language learning games, math adventures, printable worksheets, stories, typing practice, and coding activities. Our platform is designed for children aged 3–12, accessed through parent-managed accounts.

What We Collect

We collect only what is necessary to provide the service:

  • Parent account: email address, hashed password, country (optional).
  • Child profile: first name or nickname, age or birth year, chosen avatar, language pair preference, and learning progress (lesson completions, game scores, badges earned, points balance).
  • Chat messages: messages sent between approved friends and within group chats are stored to deliver the service and allow parents to review activity.
  • Session data: a session cookie keeps you logged in during your visit.
  • Payment records: when you purchase points via Stripe or PayPal, we store the transaction reference, amount, and date. We never store card numbers or full payment details — these are handled entirely by the payment processor.
  • Technical logs: IP address and basic server logs are retained for security and abuse prevention.

How We Use Your Information

  • To provide and improve the learning platform.
  • To track a child's learning progress and award badges and points.
  • To send transactional emails: account confirmation, password reset, purchase receipts.
  • To process payments and handle refund requests.
  • To respond to support and contact enquiries.

What We Do Not Do

  • We do not use Google Analytics or any third-party analytics service.
  • We do not place advertising or marketing trackers on our site.
  • We do not sell, rent, or share personal data with third parties for commercial purposes.
  • We do not use social login (no Google, Facebook, or Apple sign-in).
  • We do not serve advertisements to children or adults on this platform.

Children's Data (COPPA Compliance)

We are committed to complying with the Children's Online Privacy Protection Act (COPPA). Children under 13 may only use Play and Learn with David through a parent or legal guardian's account. We do not knowingly collect personal information directly from children. All child profile data is linked to and controlled by the parent account.

Parents may at any time:

  • Review the information stored in a child profile from Account Settings.
  • Edit or delete a child profile from Account Settings.
  • Request deletion of all account data — see our Data Deletion page.

Third-Party Services

We use a small number of third-party services, each with a specific and limited role:

No other third parties have access to your personal data.

Cookies

We use only essential cookies. See our Cookie Policy for full details.

Data Retention

Your data is retained for as long as your account is active. When you delete your parent account, all associated child profiles, progress data, chat history, and personal information are anonymised immediately and fully deleted within 30 days. Payment transaction references may be retained for up to 7 years to comply with financial record-keeping requirements, but these records are not linked to identifiable personal data after account deletion.

Security

We protect your data using industry-standard measures including:

  • HTTPS encryption for all data in transit.
  • Bcrypt-hashed passwords — we never store plain-text passwords.
  • No storage of card numbers or payment credentials — all card processing is handled by Stripe and PayPal on their secure infrastructure.
  • Access to production data is restricted to authorised administrators.

Your Rights

Depending on your location, you may have the right to:

  • Access a copy of the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data (right to erasure / right to be forgotten).
  • Restrict or object to certain processing.
  • Data portability.

GDPR (EEA/UK residents): You have full rights under the General Data Protection Regulation. To exercise any right, contact us via the Contact page and select the Privacy & Safety department.

LGPD (Brazilian residents): You have rights under Brazil's Lei Geral de Proteção de Dados, including access, correction, deletion, and portability of your data.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered parents by email of any material changes. Continued use of the platform after changes are posted constitutes acceptance of the revised policy.

Last reviewed: 2025