LearnQuest Privacy Policy & Child Data Protection
LearnQuest is designed with parental-consent and child-privacy controls supporting applicable obligations under the Children's Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), and global child privacy regulations.
This document represents a beta platform privacy policy draft reflecting implemented technical controls. It requires formal legal counsel review prior to public production distribution.
Zero Third-Party Ads
We never display advertisements, run commercial trackers, or monetize learner attention.
Minimal Data Collection
Learners use avatars and first names. We do not collect biometric data, real photos, or GPS locations.
Parental Sovereign Control
Parents maintain complete authority to view, export (JSON), or permanently delete all learner records at any time.
1. Information We Collect
A. Parent & Educator Accounts: When an adult registers an account, we collect an email address, password hash (salted using bcrypt with 12 rounds), account username, and optional display name. In school settings, educator professional email addresses and institutional affiliation are retained.
B. Student Learner Profiles: Child accounts are strictly provisioned under verified adult parent or educator accounts. We collect:
- Chosen display first name or pseudonym
- Grade level (Grades 3–5) and language preference (English or Bengali)
- Avatar styling configurations (non-photographic cartoon assets)
- Educational telemetry: mission completion status, question responses, diagnostic test answers, and mastery scoring matrices
C. Technical & Diagnostic Logs: For beta stability, our game client collects anonymous crash traces (e.g. Unity stack traces, device model, operating system version, and client timestamp). Diagnostic reports contain zero personally identifiable student inputs.
2. How We Use Data
Personal and learning data are exclusively utilized to:
- Power the adaptive learning engine to adjust curriculum difficulty and recommend spaced review exercises.
- Provide parents and classroom teachers with progress reporting and diagnostic assessment mastery scores.
- Enable Nova tutoring scaffolding to present conversational hints and feedback during gameplay.
- Maintain operational reliability, detect application errors, and prevent malicious access.
✓ We do NOT sell, rent, or trade student personal data to any third party for commercial or advertising purposes.
3. Security Architecture & Encryption
LearnQuest applies industry-standard technical and organizational security controls:
- Transport Security: All web and mobile communication is encrypted in transit using TLS 1.3 with HTTP Strict Transport Security (HSTS).
- Authentication Safeguards: Web sessions utilize HttpOnly, SameSite=Lax secure cookies with Double-Submit CSRF token validation. Mobile sessions use student-scoped bearer tokens with cryptographic refresh-token rotation.
- Database Isolation: Production databases employ AES-256 storage encryption and multi-tenant schema isolation between school districts.
4. Parental Rights: Review, Export & Deletion
Under COPPA and applicable privacy statutes, parents have continuous sovereign control over their child's records. You can exercise these rights directly through the Parent Portal:
Self-Service Data Export
Download a machine-readable JSON file of all family records, learner skill masteries, and diagnostic transcripts at any time.
Go to Export Tool →Permanent Account Deletion
Submit an account deletion request to purge parent credentials and child profiles in accordance with configured retention policies and applicable law.
Request Account Deletion →5. Data Protection & Safety Office
If you have questions regarding this Privacy Policy, wish to revoke consent, or have an inquiry about student records, please contact our Data Protection Officer: