Privacy notice

For children

Your stars, levels and game progress tell your grown-ups how you are doing. If you play with a family account, your parent or carer can see your saved progress. Authorised school staff can see records linked to their school. Ask a trusted grown-up for help, or contact hello@learnpip.com.

Playing without an account

You can play every game without signing up. Game progress, stars, stickers and the chosen character stay in your browser. Cloudflare receives connection details, including your IP address, to deliver and protect the site. We use no advertising or analytics scripts, and pages make no third-party font requests.

Family accounts

LearnPip operates family accounts. Contact our privacy and safeguarding team at hello@learnpip.com. The legal controller name and address must be confirmed before real accounts are enabled. We keep:

• your email address and a scrambled (hashed) copy of your password, so you can log in;
• for each child you add: a nickname, their school year if you choose one, and their chosen character;
• that you confirmed you are each child's parent or carer, and when;
• saved game progress, including stars, levels, best results, recent game choices and timestamps, to resume play and show progress to authorised grown-ups;
• login sessions, optional authenticator factors, invitations and security events to protect accounts.

We never ask for a child's surname, date of birth or email address. We use this only to give your family its account, and never for marketing.

School accounts

Schools control their pupil and staff records. LearnPip must agree processor terms with each school before real school data is accepted. Authorised school staff can access linked pupil profiles and progress under the access rules; a school administrator can manage its school records. School retention and rights requests must be handled with that school. Operators have restricted administrative access and their actions are audited.

Where your data is kept

• Supabase stores the database and logins.
• Cloudflare hosts the website and protects it from attacks.
• Brevo sends account emails.

Production storage locations, subprocessors, international transfers and contractual safeguards are not yet verified. The release checklist requires recorded provider evidence before real accounts are enabled.

Cookies and browser storage

We use an HttpOnly cookie for child play and browser storage for adult sessions and game saves. Adult credentials are removed when a parent hands the device to a child. Logout clears child-linked browser caches and attempts server revocation; any failure is shown. Other tabs stop syncing when child mode ends. Guest saves remain until you clear site storage. Avoid shared devices for downloaded family exports.

How long we keep it

• Sign-ups that are never confirmed: queued for deletion after 7 days.
• Sole-family children you archive: deleted after 90 days. You can delete your child link immediately from the family page. Profiles still needed by another parent or school remain under that entitlement.
• Saved progress untouched for 12 months: deleted.
• Security records of account changes: 12 months.
• Expired invitations and sent or failed email records: deleted after 30 days.
• Account deletion: queued immediately, with cleanup attempted every six hours and failed jobs retried.
• Backup expiry is not yet verified. Deletion records are retained to prevent erased accounts returning after restoration; the final period depends on the provider's recoverable backup lifetime.

Your rights

You can download family data, edit child profiles, archive children and request account deletion from the family page. A login within the last 15 minutes is required for export and deletion. For access, correction, erasure or other privacy and safeguarding requests, email hello@learnpip.com. We verify identity and authority to protect children's rights, respond without undue delay and normally within one month, and explain any lawful extension. For school-controlled records, contact your school; we can help route the request. You can complain to the Information Commissioner's Office at ico.org.uk.