Privacy Policy

What we store

• Parents: email address, name, password (stored hashed), parent PIN (stored hashed), and WhatsApp number if you give it to us.
• Children: nickname, age group (3–5 or 6–8 years), and an illustrated avatar. We don't ask for a child's date of birth, photo, email or password.
• Learning progress: finished lessons, answers in each activity, words learned, time spent learning, stickers, and sound settings.
• Consent: a record of the consent you give for each child, with the time and the version of this policy.
• Payments: order number, plan, amount and payment status. We never receive card or bank account details.

What we use it for

Only to run the service: creating your account, saving your child's progress, showing reports to parents, sending verification emails and plan reminders, and processing payments. Children's data is never used for ads and never sold.

Voice recordings stay on the device

In the Teach Pipi activity, your child's voice is recorded and played back only on the device they're using, then thrown away when the activity ends. Recordings are never sent to our servers. The microphone is only used if you allow it in your child's profile.

Where data is stored

Account data and children's progress are stored on servers located in Indonesia.

Who else receives data

• Our email provider receives the parent's email address to send verification emails and reminders.
• Midtrans receives the order number, plan name and amount to process payments. Anything you enter on the Midtrans payment page is covered by Midtrans's own policy.
• None of these parties ever receive children's data.

No ads or trackers in the app

The children's area and the parent area have no ads, ad SDKs or third-party analytics. On our information pages (this website, outside the app) we use Vercel Analytics to count visits anonymously, without tracking cookies.

Your rights as a parent

• Download all account and child data from the Data menu in the parent area.
• Change settings and delete a child's profile at any time.
• Delete your account and all your children's data yourself. Deletion happens right away. Past payment records (order number, plan, amount, date) are kept for bookkeeping without anything that identifies you.
• Ask about, correct, or request deletion of data using the contact below. We reply within 72 hours.

Security

Data is sent over an encrypted connection. Passwords and PINs are stored hashed. Settings, payments and data deletion are locked behind the parent PIN. If there's ever a data breach, we'll tell the affected parents within 72 hours of finding out.

Contact

For questions or requests about your data, reach us with the Ask us (WhatsApp) button on this site.