Privacy & Legal Notice

1. What we store

About you (the parent): your name, your email address, your password (stored only as a bcrypt hash — we never see or store the password itself), a record of the permission you gave and when, and any short notes you choose to write about your child.

About your child: the display name you or they enter, an optional PIN (also stored only as a hash), the age stage you pick, and — as they play — each answer, whether it was correct, whether a hint was used, how difficult the question was, and the time it was answered. From those we calculate skill levels. Anything your child writes or makes in Create is stored too.

Automatically: short-lived server logs (page, time, response status, duration) and two cookies — one to keep you signed in, one to protect against forged requests. Both are strictly necessary. There are no advertising cookies, no analytics, and no third-party trackers.

2. What we do with it

Only to run Pebblemind: adapt the activities to your child, show you their progress, keep your account secure, and check text for harmful content before it is saved.

We do not sell, rent or trade any of it. We do not show advertising. We do not use your child's data to train AI models.

3. Who else touches it

Three suppliers, each acting only on our instructions, purely to run the service:

Fly.io — hosting and database (United States) · Resend (via AWS SES) — account emails such as password resets (United States) · OpenAI — automatically checks text for harmful content before it is saved (United States).

Because our servers are in the United States, data is transferred there. Formal transfer agreements (SCCs / UK IDTA) and data-processing agreements with these suppliers are not yet in place — so while we put them in place, please use a nickname for your child rather than their real name.

4. Your child's work is private

Creations are visible only to the child who made them, on their own profile. They are not shown to other children, there is no gallery, no sharing and no messaging — and they are deliberately not shown to the parent account either. As a parent you can see that creations exist, and delete them, but not read them.

5. How long we keep it

Activity records are automatically deleted after 24 months. An account with no activity for 24 months is deleted entirely, along with all of that family's data, after a warning email 30 days beforehand. Password-reset and email-verification links expire after 1 hour. Encrypted backups are kept 14 days and then overwritten. Nothing is kept indefinitely.

6. What you can do — all of it works today

From Privacy & data in your parent dashboard you can, at any time and free of charge: see everything we hold about your family; download it as a file; delete an individual child's profile and all their data; delete your whole account; and stop further collection without deleting what already exists. Withdrawing permission is as easy as giving it.

Prefer to ask a person? Email support@pebblemind.co and we will respond within one month.

7. Safety and AI

Some activities and content are generated by artificial intelligence, and we tell children this inside the app in words they can understand. AI-generated content can be wrong or odd.

Text is checked automatically before it is saved, by a local filter and by an external moderation service. If that service cannot be reached, content is refused rather than allowed through unchecked. Automated checks are imperfect — they can refuse harmless text or miss something they should catch, and they do not replace your supervision.

8. Security

Passwords and PINs are stored only as bcrypt hashes and cannot be recovered by anyone, including us. Traffic is encrypted with HTTPS, and the database is encrypted at rest. A formal written children's data security programme has not yet been produced.

9. What is not in place yet — please read

We would rather tell you this plainly than imply otherwise:

• We do not yet have verifiable parental consent. Signing up asks you to confirm you are the parent, but a tick-box is not the verified consent that US children's privacy law (COPPA) requires. The mechanism is built but not yet switched on.

• These policies have not been reviewed by a lawyer, and we do not claim to be COPPA, GDPR/GDPR-K or UK Children's Code compliant.

• A data protection impact assessment, a written security programme, and supplier data-processing agreements are still outstanding.

Because of this, Pebblemind is in early access: it is free, it is still being built, and it should not be used with a real child's identifying details. Use a nickname only. We will replace this notice with a full, lawyer-reviewed policy as the service matures.

10. Not an assessment

Pebblemind is not an educational, psychological, developmental or diagnostic assessment tool. Levels, stages and scores are indicative only, describe performance inside our own activities, and carry no certified or official meaning. Please don't rely on them for decisions about your child's education. The service is provided "as is", and nothing here limits any liability that cannot lawfully be limited, including your rights as a consumer.