App privacy

Who we are

quokid is operated by Chris Winfield-Blum, trading as Quokid (ABN 22 898 520 861), of 2 Fisher Place, Mawson Lakes SA 5095, Australia.

Privacy requests go to [email protected].

What this policy covers

It covers the app at app.quokid.com: accounts, child profiles, activities, reports, and payments. The same policy is published at quokid.com/app-privacy and in the app at app.quokid.com/privacy.

The website has its own privacy policy and cookies policy.

Children

A child does not create an account and does not give us information directly. You, the parent or legal guardian, add a child and use the app with them.

We collect a child's information only to run the practice you signed up for. We ask for a first name, a date of birth, and we keep the record of their practice. We do not show ads. We do not sell children's information. Children cannot post publicly or chat with other people in the app.

You can review and correct a child's details in the grown-ups area, and you can clear their progress. To delete the profile, delete the account by emailing [email protected].

Information about you

• Your name, email address, and password. The password is stored as a hash, not as the password itself.
• Your timezone, plan, trial end, and renewal date.
• A grown-up PIN, stored as a hash, so a child using the device does not open the grown-ups area.
• If you turn them on, a two-factor sign-in secret and a passkey.
• A Stripe customer ID and subscription ID. Stripe holds the card number, expiry, and security code. We do not.
• Report settings: the report email if you set a different one, whether reports are on, the send time, and the date a report was last sent.

Information about a child

• First name, date of birth, avatar, colour, and an interest used to theme some questions.
• Subjects, topics, working level, stars, streak, the last day they practised, and how many activities you set for a day.
• The questions they were given, the answers they submitted, and whether those answers were right.
• Rewards you set, including the reward name and whether you marked it delivered.

The evening report includes each child's first name, what they finished, stars, streak, scores, questions to practise, and the correct answers. It is emailed to the address you choose.

Technical information

We store an IP address and browser details with the session, so we can keep you signed in and protect the account. The app uses essential cookies for that session, for security, and to remember small interface choices. Read-aloud uses the voice on the device and is not sent to us.

If you email us, we keep that correspondence so we can reply and keep a record of the request.

Why we use it

We use it to create the account, run the activities, adapt practice, send the report you asked for, take payment, keep the service secure, and reply to you. The date of birth is used to work out an age for the level of the work. We do not use it for marketing.

We do not use this information to advertise to you or to your child, and we do not sell it.

The AI provider

Where questions are written for a child, we send a third-party AI provider the subject, an age, the topics, the wording of recent questions, and the interest theme. We do not send the child's name or date of birth in that request.

The provider returns the questions. We do not use your child's information, or their answers, to train a quokid model. We do not ask the provider to use the request for advertising.

Free accounts use prepared sets. Those sets may have been drafted with the same kind of provider, without a child's name attached.

Who we share it with

• The AI provider, limited to the fields described above.
• Stripe, to take payment.
• Our email provider, to send account email and the daily report.
• Our host, to store the account and run the app.
• People who help us support quokid, and only as far as they need to.
• A court or authority, if the law requires it.

We do not share a child's profile with other families, with a school, or with an advertiser.

How long we keep it

We keep the account and the child information while the account is open. When you ask us to delete the account, we delete the child profiles, answers, and rewards with it.

We keep payment records for as long as Australian tax law requires, generally five years. A report that has already been emailed can remain in your inbox, and in our mail provider's ordinary sending history.

Session details are kept for the life of the session and a short time after.

Your choices

You can update your name, email, PIN, children, topics, and report settings in the app. You can turn reports off. You can clear a child's progress without deleting the profile.

Email [email protected] to delete the account, to ask for a copy of what we hold, or to ask for a correction. If you are in Australia and you are not satisfied with our reply, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Security

Passwords and the PIN are hashed. The app is served over HTTPS. Access to the admin tools is limited to us. You should keep the password and PIN to yourself. The PIN stops a child opening the grown-ups area on that device. It is not a separate account.

If you are outside Australia

quokid is based in South Australia. Our host, email provider, payment provider, and AI provider may process information in Australia or in another country. When they do, we still handle it under this policy.

If you are in the EEA or the United Kingdom, you can ask for access, correction, deletion, a limit on how we use the information, or a portable copy, and you can object to some uses. You can complain to your local data protection authority. Email [email protected] first.

If you are in the United States, the account must still be created by a parent or guardian. We do not knowingly let a child under 13 create an account. We do not sell personal information. A parent can review the child's information in the app and can ask us to delete it. If you believe a child created an account, email [email protected] and we will delete it.

Changes

When this policy changes, we will change the date at the top. If a change is important, we will email the address on the account.

Contact

Email [email protected], or write to Chris Winfield-Blum trading as Quokid, ABN 22 898 520 861, 2 Fisher Place, Mawson Lakes SA 5095, Australia.