Privacy notice · updated 27 July 2026

A family’s data, under the family’s control

This is the operational privacy notice for the paid pilot. Before public launch it needs a final review with Bangladesh-qualified counsel and the production processor list.

What we keep

The parent account username, a one-way hash of the password, each child profile’s nickname, age band and avatar, a hashed installation identity, parent video selections, watch summaries, content reports, entitlement and order status, payment references and security audit records. We do not want a child’s legal name, school, precise location or an advertising profile.

Why we keep it

To run login and entitlements, deliver an age-matched finite catalogue, sync daily limits and progress, resolve support and safety reports, prevent fraud and duplicate payments, and deliver signed app releases.

YouTube video

Yotube only plays reviewed or parent-approved URLs in the official privacy-enhanced embedded player. We do not download or rehost video, offer open child search, or use a YouTube Data API key. Once the player starts, YouTube and Google may process technical data under their own privacy terms.

Sharing and advertising

We do not sell children’s information and we do not run child-targeted advertising or behavioural profiling. Service providers we need for hosting, database, payment verification and error monitoring may receive limited data strictly for that work; the production vendor list must be published before launch.

Retention and security

Data is kept for as long as operational, safety, accounting and dispute-resolution needs require; the final retention schedule must be approved by the owner before production launch. Passwords are never stored in plaintext, session tokens are hashed, admin actions are audit-logged and sensitive parent actions are PIN-gated.

Your requests

You can request access to, correction of or deletion of your parent account’s data. Where an active payment or refund, a fraud case or a legal record applies, the necessary parts may be retained for a period. Do not open public sales until a production support email is configured.