Privacy Policy

1. Information we collect and how

• A child profile name, age, interests and preferences entered during setup. The profile name stays on the device; age and selected interests are included in AI learning requests.
• Questions, conversation context and image-generation prompts entered in the app. Conversation history and saved artwork may also be stored locally.
• Spoken questions are transcribed on the device. The resulting text, not the microphone recording, is sent for a learning answer.
• Photos deliberately captured or selected for a visual learning tool such as Plant Identifier or Dog Identifier.
• If a parent chooses Sign in with Apple, the Apple account identifier, identity credential and optional name. We do not request the parent's email.
• Message counts, session duration and progress stored locally, plus purchase identifiers and subscription status processed by Apple and RevenueCat.

2. How information is used

We use this information to personalize age-appropriate lessons, create answers, stories, pictures and spoken responses, identify a selected plant or dog photo, show progress to a parent, verify an optional parent account and unlock an Apple subscription. We do not sell, rent or trade personal data for advertising.

3. Where AI information is sent

Cloudflare Workers AI. Questions, prompts, selected scanner photos, age and selected interests are sent to Cloudflare through our authenticated Worker to generate learning answers, stories, pictures and Nova's cloud voice. Cloudflare also verifies optional Sign in with Apple credentials. Our Worker does not intentionally store prompt or photo content and returns no-store controls. Cloudflare states that Workers AI customer content is not used to train AI models or improve Cloudflare or third-party services without explicit consent. See the Cloudflare Privacy Policy.

Microsoft Azure Speech, optional. Only when an available More Voices style is selected, Nova's generated answer text may be sent through Cloudflare to Microsoft to create speech. Microsoft does not receive microphone recordings, child photos, age, interests or the local child profile in this voice request. See the Microsoft Privacy Statement.

Apple and RevenueCat. These services process purchase identifiers, subscription status and related technical information. Our app does not send child profiles, photos or conversation content to RevenueCat. See the RevenueCat Privacy Policy.

We limit each provider to the data and purpose described here and require a provider receiving personal data to protect it at least as carefully as this policy requires. If that protection cannot be maintained, we will stop the affected sharing or feature.

4. Parent permission and controls

The AI permission is off until a parent reviews the in-app disclosure and allows sharing. A parent may continue with guided lessons without allowing AI. Permission can be withdrawn or enabled again in Parent Settings under AI data permission. Parents can review local activity, manage profiles and delete app data behind the Guardian PIN.

5. Storage, safety and retention

Core child profiles, history, artwork and progress are stored locally. Our Worker does not intentionally persist AI prompts or selected photos. Service providers may retain request data under their applicable terms, including for security or abuse prevention, so we do not promise zero provider retention. Safety instructions and filters reduce risk but cannot guarantee every generated answer is appropriate or correct.

6. Deletion

Parent Settings > Delete app data removes local profiles, conversations, artwork and progress and clears parent sign-in credentials on that device. Local deletion does not cancel an Apple subscription, revoke Apple authorization or delete records a third party retains under its own policy. Subscription and Apple authorization controls are available in Apple Account settings.

7. Contact

For privacy questions or requests, email support@aiforkids.app.