Privacy Policy

This Privacy Policy (“Policy”) covers www.thelittlestudent.com, our mobile applications, and any services that link to it (the “Platform”). It applies to interactions online, by email, in-app, or by phone.

The Platform offers educational and developmental activities for young learners and is used by parents/guardians, teachers, and schools on behalf of children. We require verifiable parental/guardian consent—or a school’s confirmation of authority—before processing child data. Little Student is not a medical device or healthcare service.

• Personal Information: data that identifies or relates to an identifiable person.
• Sensitive Personal Information: e.g., passwords, payment card data (via our provider), health-related info you choose to share, gaze/motion metrics, and other data defined as sensitive by law.
• Child/Student Data: personal information for users under 18 provided by a parent/guardian or school/teacher, or collected with appropriate consent.

A) Information You Provide

• Account & Profile: parent/guardian/teacher name, email, phone, child’s first name or nickname, age range, class/school, settings.
• Learning Use Data: activity selections, difficulty, progress logs, rewards, notes/comments.
• Support/Comms: messages, feedback, surveys, support content.
• Payments: handled by third-party processors; we receive limited billing metadata and do not store full card numbers.

B) Information Collected Automatically

• Device & usage data (IP, device/OS, app version, language, time zone, crash logs, performance, pages/screens viewed, session timestamps).
• Cookies/SDKs/Pixels for sign-in, preferences, analytics, and security (some features may not work if disabled).

C) AI & Sensor-Related Data (Feature-Dependent)

• Microphone audio for speech recognition/activities.
• Front-facing camera for gaze/attention estimation (no identity recognition).
• Motion data for motor/gesture activities.

By default, we aim to process these signals on-device and avoid storing raw audio/video unless you (or your school) enable a training or review feature. We may store derived, non-raw metrics for progress tracking.

• Provide and operate the Platform (accounts, authentication, activities, progress).
• Personalize activities and recommendations.
• Generate reports for parents/guardians/teachers.
• Send service messages and respond to support requests.
• Improve safety and integrity (fraud prevention, abuse detection, logging, debugging, security).
• Analytics and product improvement (aggregated trends).
• Marketing to adults only; opt-out available.

Legal bases include consent (especially for child data and sensors), contract performance, legitimate interests, and compliance with law.

Children do not create independent accounts. Accounts are created by a parent/guardian or a school/teacher. If we learn child data was provided without necessary authorization, we will delete it. Parents/guardians can view, correct, download, delete child data, and withdraw consent. Where we act for a school, we process student data only per the school’s instructions and our agreement.

We do not sell Personal Information. We may share with:

• Service providers/processors (hosting, analytics, payments, support, messaging, error monitoring).
• Schools/teachers for school-managed accounts.
• Legal/safety authorities when required.
• Business transfer recipients (who must honor this Policy).
• Others at your direction/consent (e.g., exporting a report).

We do not publish children’s user-generated content publicly.

We may process or store data on secure servers outside your country with appropriate safeguards as required. By using the Platform, you consent to such transfers.

We retain Personal Information only as long as necessary for the Platform and legitimate business needs (security, legal, accounting). If you delete your account or withdraw consent, we will delete or de-identify data within a reasonable period, subject to legal requirements.

We use industry-standard administrative, technical, and organizational measures (encryption in transit, access controls, monitoring, secure development). No system is completely secure. You are responsible for protecting your credentials and device permissions.

• Permissions: disable camera/microphone/motion at any time (some features may not function).
• Marketing: opt-out of promotional emails; service emails may still be sent.
• Access/Correction/Deletion: contact us to exercise these rights (including child data).
• Withdraw Consent: you can withdraw consent going forward.
• School Accounts: contact the school to exercise rights; we will assist as required.

We use cookies/SDKs for authentication, preferences, analytics, and security. You can manage cookies in your browser and limit some SDKs via device settings; some features may not work without them.

Third-party websites/apps are governed by their own policies. Review those policies before sharing information.

• Service notices (account, features, security).
• Marketing to adults only, with consent or as permitted by law—opt-out anytime.
• Support responses to your requests.

• Contact info for accounts & support.
• Identifiers/device info for functionality, security, analytics.
• Usage data and diagnostics for improvement.
• Audio/video via sensors only with permission; we aim not to store raw media.
• Child progress data for reports visible to parent/teacher/school.

We do not use child data for tracking or third-party advertising.

This Policy reflects practices aligned with UAE requirements for reasonable security and privacy. Where other laws apply based on your location, we will comply as applicable.

We may update this Policy periodically and post the updated version with a revised “Last updated” date. Material changes may be notified by email or in-app.

Grievance/Data Protection Contact: community@cognitivebotics.com. We aim to acknowledge privacy inquiries within 48 business hours and resolve them within a reasonable timeframe.

General Contact: support@thelittlestudent.com or visit our Contact page.