Privacy Policy

We follow data minimisation: we never collect a child's real name, birthday, school, photos, location or contacts.

1. What we collect

• Account: the guardian's email address (used for sign-up, sign-in, email verification and password reset) and account status.
• When you use Sign in with Apple: a stable user identifier from Apple (so we can recognise the same account), plus the name and email address you agreed to share on first authorisation (which may be Apple's private relay address). We never receive your Apple ID password.
• Child profile: nickname and grade only.
• Learning data: part progress, quiz records, growth points, collections and achievements.
• Transactions: membership subscription records (no card numbers — Apple handles payment).
• Diagnostics: device model, OS version, crash and performance metrics.

2. How we use it

• To run the core experience: disassembly lessons, quizzes, collections, achievements and reports.
• To send email verification codes for sign-up verification and password reset.
• To sync progress and growth points across devices.
• For support and after-sales, such as order lookup and refunds.

3. What we do not do

• No personalised advertising and no marketing shown to children.
• No audio recording: voices are played, never recorded or uploaded.
• No social features, user uploads, location or contacts.
• We never sell personal information.

4. Sharing with third parties

• Apple: when you use Sign in with Apple or buy a subscription, the necessary identifiers and transaction data are processed by Apple under Apple's privacy policy.
• Email delivery service: to deliver verification codes and reset emails we provide the recipient address and the message content — nothing else.
• Beyond those cases and legal requirements, we do not share personal information with anyone.

5. Local and cloud

3D models and audio stay on the device; progress and growth points sync to the cloud for multi-device restore. Offline records are queued and uploaded when back online.

6. Your rights

Guardians can export or delete a child profile at any time, and can request account deletion in the parent area. Deletion requires one identity verification (an email code or a fresh Apple authorisation), then a 7-day cooling-off period (cancellable with a code sent to the registered email). Afterwards personal information is deleted or anonymised, while order and transaction records are kept de-identified as required by law.

7. Children's privacy

Registration requires guardian consent and an explicit guardian confirmation (accounts are created with the guardian's email). Where we publish in other regions we will layer on the local requirements (COPPA in the US, GDPR-K in the EU).

8. Policy updates

We will notify you in the app when this policy changes, and record the version and time you agreed to.

9. Contact

For questions about this policy or to exercise these rights, contact us from “Support & Help” in the parent area.