Privacy Policy

This Privacy Policy (“Policy”) explains how Little Student (“Little Student,” “we,” “us,” or “our”) collects, uses, discloses, and protects information about users of www.thelittlestudent.com, our mobile applications, and any related services that link to this Policy (collectively, the “Platform”).

This Policy applies whether you interact with us online, by email, in-app, or by phone. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the practices described here.

If you do not agree with this Policy, please do not use the Platform.

Little Student offers educational and developmental activities for young learners. The Platform is designed to be used by parents/guardians, teachers, and schools on behalf of children. Where we process child data, we require verifiable parental/guardian consent or a school’s confirmation that it has obtained such consent or has authority to share student data with us.

Little Student is not a medical device or healthcare service and does not provide medical advice. See our Terms of Use for details.

• Personal Information: Any information that identifies or relates to an identifiable individual (e.g., name, email, phone, address, date of birth).
• Sensitive Personal Information (Example): account passwords, payment card data (handled by our payment provider), health-related information (if you choose to share), biometric-adjacent signals (e.g., gaze/motion metrics), and other information defined as sensitive under applicable law.
• Child/Student Data: Personal Information relating to a user under 18 years of age that is provided by a parent/guardian or school/teacher or collected via the Platform with appropriate consent.

A) Information You Provide

• Account & Profile: parent/guardian/teacher name, email, phone, child’s first name or nickname, child’s age range, class/school, and settings.
• Learning Use Data: activity selections, difficulty settings, progress logs, rewards, and notes/comments you add.
• Support/Comms: messages, feedback, survey responses, and content shared with support.
• Payments: handled by third-party payment processors; we receive limited billing metadata (e.g., status, plan, timestamps). We do not store full card numbers.

B) Information Collected Automatically

• Device & usage data: IP address, device type, OS, app version, language, time zone, crash logs, performance data, pages and screens viewed, session timestamps.
• Cookies/SDKs/Pixels: to remember settings, keep you signed in, measure usage, improve features, and support security. You can control cookies via browser settings; some features may not work without them.

C) AI & Sensor-Related Data (Feature-Dependent)

Depending on your settings and device permissions, certain activities may process:

• Microphone audio (speech recognition for pronunciation or verbal responses).
• Front-facing camera (gaze/attention estimation; basic facial landmarking to guide engagement—not for identity recognition).
• Motion data (accelerometer/gyroscope for motor/gesture activities).

Important: By default, we aim to process these signals on-device when feasible and do not store raw audio/video. We may store derived, non-raw metrics (e.g., task completion, attention score, number of successful attempts) for progress tracking. You can manage camera/microphone permissions in your device settings at any time.

We process Personal Information to:

• Provide and operate the Platform (accounts, authentication, activities, progress tracking).
• Personalize activities, levels, and recommendations.
• Show progress to parents/guardians/teachers and generate reports.
• Communicate service messages (e.g., changes, outages, receipts) and respond to support requests.
• Improve safety & integrity (fraud prevention, abuse detection, logging, debugging, and security).
• Analytics & product improvement (aggregated usage trends to enhance content and performance).
• Marketing (adults only): send optional updates about new features or offers. You can opt-out at any time (see Your Choices).

Our legal bases (as applicable) include consent (especially for child data and sensors), contract performance, legitimate interests (e.g., service security, analytics), and compliance with law.

• Little Student does not knowingly allow children to create independent accounts. Accounts are created and managed by a parent/guardian or a school/teacher.
• If we learn that child data was provided without required parental or school authorization, we will delete it.
• Parents/guardians can: view, correct, download, and delete their child’s data, and withdraw consent (see Your Rights below).
• Schools using Little Student represent that they have authority/consent to share student data with us for educational purposes. Where we act as a processor for a school, we only process student data per the school’s instructions and our agreement with the school.

We do not sell Personal Information. We may share information with:

• Service Providers / Processors (hosting, analytics, customer support tools, payment processors, email/SMS, error monitoring). They must use it only to provide services to us and apply appropriate safeguards.
• Schools/Teachers: for school-managed accounts, relevant progress data is shared with the school/teacher tied to the account.
• Legal/Safety: when required by law, court order, or to protect rights, safety, and security of users, the public, or Little Student.
• Business Transfers: in connection with a merger, acquisition, financing, or sale of all/part of our business (we will require the recipient to honor this Policy).
• With Your Direction/Consent: e.g., exporting a progress report to a clinician or sharing with another app at your request.

We do not publish user-generated content from children publicly. Community/forum features (if enabled for adults) are optional and subject to separate guidelines.

We may process or store data on secure servers located outside your country. Where required, we implement appropriate transfer safeguards (e.g., contractual protections). By using the Platform, you consent to such transfers.

We retain Personal Information only as long as necessary to provide the Platform and for legitimate business needs (e.g., security, legal, accounting), unless a longer period is required by law. If you delete your account or withdraw consent, we will delete or de-identify associated personal data within a reasonable period, subject to legal retention requirements.

We employ industry-standard administrative, technical, and organizational measures to protect Personal Information (encryption in transit, access controls, monitoring, secure development practices). However, no system is completely secure. You are responsible for protecting your account credentials and device permissions.

• Permissions:You can disable camera/microphone/motion access in your device settings at any time (some features may not function).
• Marketing: You can opt-out of promotional emails by using the unsubscribe link or contacting us. Service/transactional emails (e.g., receipts, critical notices) may still be sent.
• Access/Correction/Deletion: You may access, correct, export, or delete Personal Information (including child data) by contacting us.
• Withdraw Consent: You may withdraw consent (e.g., for child data processing or sensors) at any time; we will stop processing going forward (this will not affect prior lawful processing).
• School Accounts: If your child’s account is managed by a school, please contact the school to exercise your rights. We will assist the school as required.

We use cookies/SDKs for authentication, preferences, analytics, and security. You can manage cookies at the browser level; app SDKs can be limited using device settings where available. Some features may not work without these technologies.

The Platform may link to third-party websites/apps. Their privacy practices are governed by their own policies. We are not responsible for third-party content or practices. Please review those policies before sharing information.

We may send:

• Service notices: important updates about your account, features, or security.
• Marketing to adults only: with your consent or as permitted by law; opt-out anytime.
• Support responses replies to your requests.

Depending on how you use the app and your settings, the following categories may be collected:

• Contact Info (e.g., email, name) – account & support.
• Identifiers/Device Info – app functionality, security, analytics.
• Usage Data – product improvement, crash diagnostics.
• Diagnostics – crash logs, performance.
• Audio/Video via Sensors (microphone/camera) – only with permission and primarily processed on-device for activities; we aim not to store raw audio/video.
• Child’s Progress Data – learning metrics and reports visible to parent/teacher/school.

We do not use child data for tracking or third-party advertising.

This Policy reflects practices aligned with UAE requirements for reasonable security and privacy. Where other laws apply based on your location (e.g., international transfer rules), we will comply as applicable.

We may update this Policy from time to time. We will post the updated version with a revised “Last updated” date. Material changes may be notified via email or in-app notice.

Grievance Officer / Data Protection Contact:
Email: community@cognitivebotics.com
We aim to acknowledge privacy inquiries within 48 business hours and resolve within a reasonable timeframe (or as required by applicable law).

General Contact:
Questions, comments, or requests regarding this Policy: support@thelittlestudent.com