Data Collection Policy

This Policy explains our data collection, storage, and management practices across the Little Student platform for all user types, with an emphasis on transparency and compliance.

A) User & Account Data

• Parent/guardian/teacher name, email, phone number.
• Child’s first name or nickname, age range, and learning profile.
• School/class affiliation (if applicable).

B) Learning & Progress Data

• Activities attempted and completed.
• Scores, progress reports, time spent on tasks.
• Educator/parent notes and feedback.

C) Sensor & Device Data (with permission)

• Speech recognition: voice samples processed for activity scoring (raw audio processed on-device; derived metrics may be stored).
• Eye gaze/attention tracking: engagement metrics (no permanent video storage).
• Motion data: accelerometer/gyroscope signals for motor skill activities.
• Device information (model, OS version, crash/error logs).

D) System & Technical Data

• IP address, browser/device type, session activity.
• Cookies/SDKs for login persistence, preferences, analytics, and security.

We do not knowingly collect full biometric identifiers, health records, or unrelated personal data.

• Direct input during registration, subscription, or profile setup.
• App usage events and progress logs generated during use.
• Device sensors (camera/microphone/motion) when explicitly enabled.
• Automated logs via cookies, analytics SDKs, and crash/error reports.

Parental/guardian consent is required before collecting or processing any child-related data.

All data is securely stored in Amazon Web Services (AWS) servers located in the United Arab Emirates (UAE). AWS provides security and compliance frameworks (e.g., ISO 27001, SOC 2, GDPR, HIPAA-ready). Data is not transferred outside the UAE unless explicitly required for support, analytics, or lawful purposes, and only with appropriate safeguards.

• Provide, personalize, and improve learning activities.
• Generate progress reports for parents/teachers.
• Support schools with class-wide learning management.
• Ensure safety, detect abuse, and maintain system integrity.
• Conduct aggregated, non-identifiable analytics to improve content.
• Send service-related notifications (e.g., updates, receipts).

We do not sell personal or child data.

Access is strictly limited to:

• Authorized Little Student staff (need-to-know basis, under confidentiality agreements).
• Parents/guardians (for child data linked to their account).
• Schools/teachers (for student accounts managed by a school).
• Third-party service providers (hosting, payments, analytics, support) under data processing agreements.
• Authorities: only when legally required under UAE law.

Personal and child data is retained only as long as necessary to provide the service, fulfill legal obligations, or resolve disputes. If an account is deleted, all associated child data is permanently deleted from our active systems within 30 days, with backups purged within 90 days.

Parents/guardians may request deletion of child data at any time by contacting support@thelittlestudent.com.

• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Role-based access controls.
• Continuous monitoring, intrusion detection, and security audits.
• Alignment with ISO 27001 standards; we aim to comply with HIPAA safeguards where applicable to child/sensitive data.

Parents, guardians, and school administrators have the right to:

• Access and review child data.
• Request corrections to inaccurate data.
• Request deletion of personal or child data.
• Withdraw consent for future data collection.

Requests can be submitted to community@cognitivebotics.com.

We may update this Policy periodically. Updates will be posted on www.thelittlestudent.com with a new effective date. Material changes will be communicated via email or in-app notification.

If you have questions, concerns, or complaints about this Policy, please contact community@cognitivebotics.com.

For general enquiries, visit our Contact page.