Privacy policy
Last updated 1 October 2026
heykidslearn is a learning app for children aged 3 to 12, set up and controlled by a parent or guardian ("grown-up"). We collect as little as we can, we never sell or share data for advertising, and there are no ads, no trackers and no chat in the app.
Who is responsible
heykidslearn is made by the developer named on its Google Play page. Questions or requests: hello@heykidslearn.com.
What we collect
- The grown-up's account: email address and, if given, a display name. We use the email only to send sign-in codes. Sign-in codes are stored scrambled (hashed) and expire after 15 minutes.
- Child profiles, entered by the grown-up: a first name, an age range (3–5, 6–8 or 9–12), a built-in cartoon avatar and settings such as a daily play limit and quiet hours. We never ask for a child's surname, birthday, photo, school or location.
- Learning progress: quiz answers and scores, game and tracing activity, badges, stickers and minutes played, so the app can pick what to practise and show the grown-up a weekly report.
- What grown-ups create: their own lessons, quizzes and slideshows, and photos they choose to add. Photos are stored at unguessable addresses and only shown inside that family's account.
- Technical data: a random device ID created by the app, the device type and app version, and the IP address of sign-in requests, used to keep accounts secure and stop abuse (rate limits).
We do not collect location, contacts, microphone or camera recordings, advertising IDs or browsing history. The app does not include advertising or analytics software.
Children
Only a grown-up can create an account and add children; children never type in personal information. The children's area has a grown-ups lock, no links out of the app, no chat and no purchases. Children's names are never shown to other families: the optional global leaderboard is off unless a grown-up turns it on, and even then other families see only "Player" and a cartoon avatar.
Where data is kept, and who helps us
We use these service providers only to run the app, under their own security and privacy terms:
- Render (runs our server, Singapore) and Neon (database, Singapore, on Amazon Web Services)
- Upstash (temporary cache for rate limits and leaderboards)
- Backblaze (stores pictures, sounds and photos grown-ups add, United States)
- Resend (sends sign-in emails, United States)
- Cloudflare (delivers this website and the web version of the app)
All connections are encrypted (HTTPS/TLS). The app also keeps a copy of your family's data on the device so it works offline; signing out removes it from that device.
How long we keep it
We keep your data while your account exists. When you delete your account it is locked straight away and erased within 7 days, together with every child profile and everything you made. Copies in our providers' short-term backups expire within a few days after that.
Your choices and rights
- Delete your account: in the app, open Grown-ups → Settings → Delete account. Step-by-step help: heykidslearn account deletion.
- Remove a child: Grown-ups → the child → Edit → Delete profile.
- See or correct data: everything we hold about a child is visible in the app; for a copy of your data, email us.
Changes
If we change this policy we will update the date above and, for important changes, tell grown-ups in the app first.