Privacy notice

Who this notice is for

Little Learners is designed for children to use with a parent or carer. Accounts must be created and managed by an adult. Little Learners is the controller of the personal data described here. Questions can be sent through our support form.

Information we handle

• Parent account: email address, encrypted authentication credentials, confirmation status and account timestamps.
• Optional child profiles: the first name or nickname and school year entered by the parent. We do not ask for a child email, birth date, school or address.
• Printable access: the signed-in account, printable selected and weekly allowance period, used to operate the free download limit.
• Support requests: the name, parent or carer email, topic and message submitted through the support form, together with submission time and limited technical information processed by our hosting provider.
• Device-only learning progress: stars, completed games, recent activity, sound preference and the active child choice are stored in the browser and are not synced to our database.
• Optional analytics: only after permission, we record events such as pages visited, games started or completed, and printable attempts. Signed-in analytics may use a pseudonymous account identifier, not the parent email or child profile name.
• Technical records: hosting and security services may process IP address, browser information and request logs to deliver and protect the service.

Why we use it

We process account, profile and download information to provide the service requested by the parent. We use limited technical records to keep the service reliable and secure. Optional product analytics rely on consent and remain off until the visitor chooses “Allow analytics”.

Services that help us operate

We use Supabase for authentication, database and private printable delivery; our hosting provider to serve the website; Resend or another configured mail provider for account emails; and PostHog EU for optional analytics. These providers process information only for the services we configure. We do not sell personal data or use child profiles for advertising.

Retention and security

Account and child-profile data are retained while the parent account remains open or while reasonably needed to operate and protect the service. Support requests are kept only as long as reasonably needed to respond and meet related legal or security obligations. Device-only progress can be cleared through browser storage settings. Access to child profiles is restricted to the owning parent account using database row-level security. No internet service can promise absolute security, but we minimise the information collected and use access controls appropriate to it.

Your choices and rights

You may ask to access, correct, export or erase personal data, object to or restrict certain processing, or withdraw analytics consent at any time through “Analytics choices” in the footer. To request complete account deletion, use the support form with the address registered to the account. You may also contact Malta’s Information and Data Protection Commissioner.

Changes

If this notice changes materially, we will update the date above and provide an appropriate notice in the service.