Privacy policy
Last updated 29 July 2026
The short version: we hold a parent’s email address and their membership status. We do not hold anything about their children, because we never collect it in the first place.
Children’s information
Child profiles — the name and age you set for each child — are stored in your own browser’s local storage, on the device you set them up on. They are never sent to our servers. We cannot see them, we cannot recover them, and they are not in any backup of ours. Clearing your browser data deletes them permanently.
This is a deliberate design decision, not an oversight. It means there are no child accounts, no child logins, and no database of children anywhere in this service. Kid mode and the optional PINs work the same way — they are settings on the device, not identities on a server.
The service is intended to be set up and paid for by adults. We do not knowingly collect personal information from children. If you believe a child has somehow provided us personal information, write to us and we will delete it.
What we do collect
- Your email address, and a password (stored only as a cryptographic hash by our authentication provider — we never see the password itself). If you sign in with Google, we receive your email address from Google instead.
- Membership status — whether your subscription is active, which plan, and the identifiers Stripe uses to link your account to your billing.
- Basic server logs, kept by our hosting provider for security and reliability.
What we deliberately do not collect
- No analytics or tracking scripts. There is no Google Analytics on this site.
- No advertising trackers, and no selling or sharing of personal information. Ever.
- No watch history tied to a child.
- No card numbers — those go directly to Stripe and never touch our servers.
Who processes data for us
- Google Firebase — accounts, sign-in, and the database holding your email and membership status.
- Stripe— payments, billing, and card handling. Stripe’s own privacy policy governs what they hold.
- Vercel — hosting and delivery of the site.
- YouTube — videos play in an embedded YouTube player. We use the privacy-enhanced
youtube-nocookie.comhost, but once a video plays, YouTube receives the request and its own privacy policy applies to it. We have no control over that and no access to whatever it records.
How long we keep things
We keep your account information while your account exists. Delete your account and we remove your record; billing records are retained by Stripe for as long as tax and financial law requires.
Your choices
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete your account and its data. Write to hello@safelearning.academy and we will act on it. To remove child profiles, clear the site data in the browser you set them up in — that is the only place they exist.
Changes
If we change this policy in a way that materially affects you, we will tell you by email before it takes effect.