Last updated: [date this is published] · Draft for legal review — see note at the bottom.
MemWise Learning is directed at children ages 2–7. This policy explains what we collect from parents and children, why, and what rights parents have — consistent with the Children's Online Privacy Protection Act (COPPA).
From the parent, when creating an account: email address, full name, phone number, birthdate, and gender.
From the parent, about each child, when creating a profile: the child's first name (not last name), birth month and year (not full birthdate), a chosen cartoon avatar, and a reading level.
Generated by using the app: which stories a child has read and how far, quiz answers, and sight-words practiced — used only to personalize lessons and show a parent their child's progress.
About how the app is working: so we can fix problems and make the app run well on the devices families use, the app sends a small anonymous report when it opens or when something goes wrong. It contains the type of device (tablet, phone or computer), the browser and operating system version, whether the app was installed, the app version, the name of any error and a short, scrubbed description of it, and which general screen it happened on. It does not contain a name, a child's activity or answers, an email address, an IP address or a link. It is tied to an anonymous code, not to your account, and is deleted after 30 days.
About visits to this website: like most websites, our hosting records each page request (the date and time, the page requested, and your IP address and browser type) in a server log. We use it only to count how many people visit this website. The raw log is kept for 35 days and then deleted automatically, and we do not use it to identify or follow individual visitors.
Your grown-ups PIN: to keep children out of the parent areas (the Parent Dashboard, subscription and adding a child), you choose a 4-digit PIN when you first set up the app. It belongs to your parent account, not to any child profile. We never store the PIN itself: we store only a one-way scrambled (salted and hashed) version, and we check it on our servers, so it is not saved on your device or in your child’s data. We also keep a count of wrong tries and a lock time, so the PIN can’t be guessed. If you forget it, you can set a new one after signing in with your account password again. We use it only to unlock these areas, we never show it to anyone, and it is deleted if you delete your account (or after about 2 years of inactivity).
Feedback you choose to send: from the grown-ups area, a parent can send us a note about a story idea, a feature or a problem. It contains what you write, a category, an optional 1–5 rating, the type of device and the app version. If you leave “You can email me about this” ticked, it also includes your account email so we can reply; untick it and we do not keep your email with the note. Only a parent can send feedback, and it is never shown to children. We keep it for up to 2 years, use it only to improve MemWise, and delete it if you delete your account.
We do not knowingly collect a photo, video, audio recording, or precise location from a child.
The parent's account, and the small MemWise team that runs the service, who look at progress and usage (such as a child's first name and which stories were read) only to operate, support and improve the app, and never to advertise. We do not sell personal information, and we do not share it with third parties for advertising or marketing. The data is stored using Amazon Web Services (AWS), which processes it on our behalf under a data processing agreement — AWS does not use it for its own purposes.
We keep account and profile data for as long as the account is active. Data that hasn't been touched in an extended period is automatically deleted. A parent can delete a single child's profile, or their entire account and all associated data, at any time from within the app (Settings → My Data & Privacy).
As a parent or legal guardian, you can at any time:
You can also reach us directly at privacy@memwiselearning.com with any question or request.
Access to stored data is limited to what each part of our system needs to function, encrypted both in transit (HTTPS) and at rest, and never made publicly accessible.
If this policy changes in a way that affects what we collect or how we use it, we'll update the date above and, where required, ask for consent again.
[Company legal name]
privacy@memwiselearning.com
This page was drafted to accurately reflect the current MemWise Learning technical architecture, as a starting point for legal review — it is not yet a reviewed or finalized legal document. Replace the bracketed placeholders and confirm all statements with counsel before treating this as your published policy.