Legal

Privacy Policy

Last updated: August 2026

Note: This policy describes how PARP is built and what it collects. It is a working draft prepared by the product team and must be reviewed by qualified legal counsel (including for GDPR/UK GDPR and children's-privacy requirements such as COPPA and the ICO Children's Code) before commercial launch.

The short version

Children never have accounts, logins or public profiles on PARP.
We collect the minimum needed to personalize: your account details, a child nickname, birth date, interests, goals and the activity history you record.
We do not collect child photographs, legal names, location or health information.
We do not sell personal data, and we use first-party analytics only.

What we collect

Account data (about you, the adult): name, email address, and a securely hashed password. We never store plain-text passwords.

Child profile data (entered by you): a nickname or first name of your choosing, date of birth (used to compute age for recommendations), an avatar choice, interests, learning goals, learning preferences, and the activity outcomes and observations you record.

Usage data: first-party product events (e.g. “activity completed”) linked to internal identifiers, stored in our own database and used to improve the product. We do not send child-identifying data to third-party analytics platforms.

How we use it

To operate your account and family space.
To generate age-appropriate, personalized activity recommendations and weekly plans.
To show you progress summaries and reports.
To keep the service secure (rate limiting, session management, audit logs of administrative actions).

Who can see child data

Only members of your family account. Child profiles have no public URLs. PARP administrators can access data only for support and moderation purposes, and sensitive administrative actions are audit-logged.

Storage and security

Data is stored in a managed PostgreSQL database with encrypted connections. Passwords are hashed with bcrypt. Sessions use secure, httpOnly cookies. Access follows least-privilege principles.

Your rights

You can update your child's profile at any time from Settings. You may request export or deletion of your family's data by contacting us; deletion removes the family, child profiles and history, subject to legal retention requirements.

Contact

Privacy questions: contact the PARP team via your account's support channel.