Privacy Policy

ilyKIN is a learning companion for children, used by a parent or guardian on a child's behalf. Children do not have accounts. This page explains what we collect, why, who handles it, and the choices you have. We wrote it to be read.

Who we are

ilyKIN is run by [Your name or business name], British Columbia, Canada. Questions or requests about privacy: hello@ilykin.com.

What we collect

About you (the parent or guardian): your email address to sign you in, an optional password (kept only by our sign-in provider, never by us), a parent PIN (stored only as a one-way scrambled value), and a record that you agreed to this policy and the Terms.

About each child you add: a nickname and a grade. We do not ask for a full name or a birthdate.

What a child does in the app: practice levels and daily totals, how many minutes a day she spends actively learning in ilyKIN (for the optional attendance log; never which pages or what she did), word-jar words, word-of-the-day sentences and meanings, the shop item she is saving for, characters and clothes she bought for her picture, which Future Lab lessons she finished and any short feedback she leaves on them (the code she types in its practice editor stays on her device), cheers a grown-up sends (fixed words like “Great job!”), speaking-challenge notes, Gratitude jar notes (and your replies), an outside-learning log (what an app, lesson or club was, how long, an optional subject and note; ilyKIN never connects to those apps), quiz results, mission and guided-session progress and reflections, weekly reports, to-dos, calendar events, journal and portfolio items (including photos and PDFs you or your child upload), points and badges, and a few choices such as her avatar. Photos have their location data removed in the browser before they are uploaded.

What a grown-up types: notes, comments, teacher check-in notes, quiz topics, an optional attendance and hours log, problem reports you choose to send us.

The weekly plan: each week the app puts together a plan for each child from what is already saved (their learning path, the calendar and last week): practice topics, to-dos and a lesson and a mission. No AI is used to make it. You can approve, change or decline it; if nobody does by Monday night, the practice, to-dos and lessons from Ily's library start by themselves (a brand-new lesson from Ily always waits for you).

Notifications: an inbox of short messages for you (for example that your child bought something in the shop or handed in a report, or that the week's plan is ready), and your choices about them. They contain a child's nickname and a short line, never what a child typed. If you switch on email notifications, we send the same short message to your email address through our email provider. One email is on unless you switch it off: the Sunday email with each child's plan for the coming week (you can untick it when you first agree to this policy, or any time in Notifications). You can switch each kind off at any time.

On the device: a few small cookies and browser storage entries that keep you signed in, remember which child a tablet is set to, your time zone, a child's look, which celebrations have been shown, and whether “Let's learn more” is open on the Homebase view. We do not use advertising or analytics trackers.

Reading aloud and listening: “Read to me” and Early reader use the voice built into your child's device; nothing is recorded or sent. If you switch on “Let Ily listen for spoken answers”, your child can answer out loud, but only on a device that can understand speech by itself: the microphone is used only while the “Say it” button is listening, the voice is never recorded, saved or sent to us or anyone else, and only the words heard are used, on the device, to pick an answer. We store only your choice of these settings. A device may download its speech pack from the browser maker the first time; that download contains nothing about your child.

Why we use it

• To run the app: show a child her own page and progress, and give you the parent view.
• To keep you in control: you can see everything about a child.
• To keep the service working and safe: fix problems you report, prevent abuse and limit how often features are used.

We do not sell personal information or use it for advertising.

The AI helpers

Some helpers use an outside AI service. They only run when a grown-up asks for something or switches a feature on for a child:

• Quizzes, missions and guided sessions are written from what you choose: a topic you type, the checked key ideas of a learning path topic (or, for a topic check, up to four topics; for a level check, up to eighteen topics across one subject with each one's typical grade; the same text for every family), a mission's own text, for a review quiz the text Ily wrote for up to six missions and guided sessions finished in the last three weeks (never what the child wrote or answered), the text of one journal entry you pick, or the subjects and skills you select, plus the child's grade. You review missions and guided sessions before a child sees them.
• Ily's library: when you give your child a mission or guided session that was built on a learning path topic, with nothing typed by you and no notebook notes, the text Ily wrote (with the topic, the options it was made with and the grade it was written for) is kept and may be offered to other families whose child is on the same topic, so Ily doesn't have to write a new one. Nothing about your family goes with it: not your child's name, answers or reflections, and not any links you added. Likewise, a draft you get may come from the library; it says so, and a child never gets the same one twice. These texts stay in the library if you delete your account, since they hold nothing about you.
• Practice on the learning path: the first time any learner practises a topic, Ily writes practice questions from that topic's checked key ideas and its typical grade band, and a second pass checks them. Nothing about any child is sent (not even a grade), and the questions are kept and reused for every family.
• “Learn it first” lessons: the first time any learner needs a short lesson on a new topic in the weekly plan, Ily writes one from that topic's checked key ideas and its typical grade band, and a second pass checks it against those key ideas. Nothing about any child is sent, and the lesson is kept and reused for every family. A parent can read these lessons and take one out.
• Report summaries (only when you tap “Ask Ily to write a summary” on a weekly or monthly report): the report's own short lines and numbers, such as topic titles that were mastered or look tricky and how many practice answers were right, plus the grade. Never your child's name or anything your child typed. The note is saved with the report.
• Word of the day: Ily chooses words for each grade band (only the band is sent, nothing about any child) and a second pass checks them; the list is shared by every family. The sentence and meaning your child writes for a word are kept for you to read and are never sent to the AI.
• Ask Ily (off until you switch it on): the short question a child types, the quiz question or step she is looking at, her grade and, if you also switch on Ily's notebook, a few short learning notes.
• Writing helper (off until you switch it on): the piece of writing a child types or pastes and asks Ily to coach, what kind of writing it is, an optional line about what she wants help with, and her grade.

We never send a child's name, email address, photos, other work or quiz answers. Before a child's own text is sent we check it and stop it if it seems to contain names, addresses, phone numbers or links. If what a child types sounds like she may be hurt, unsafe or very upset, we do not send it to the AI at all. She sees a kind message that points her to a grown-up and a helpline, and the question or piece is saved and flagged where you can read it. AI can make mistakes, so please treat what it writes as a helper, not an expert. Every question a child asks Ily and every piece of writing she asks Ily to coach is saved where you can read and delete it.

Who else handles information

We use a small number of service providers. They handle information only to provide their service to us:

• Supabase stores the database and the private file storage. It handles: everything saved in the app: parent email, children's nicknames and grades, learning records, portfolio items and photos.
• Vercel hosts and serves the app. It handles: web requests (standard server logs such as IP address and pages visited).
• Anthropic runs the AI that writes quizzes, missions and guided sessions, answers Ask Ily questions and coaches writing. It handles: only what a grown-up chooses to send for a request: the topic or text for a quiz, mission or guided session; and, when a grown-up has switched these on, a child's short question or the piece of writing she asks Ily to coach, together with her grade. Never names, emails, photos or other records.
• Resend sends emails: a note to the team when a grown-up sends a problem report, a reset link to a parent who asks to reset their PIN, and short notifications to a parent who switched email notifications on. It handles: the report text the grown-up chose to send and, if they ticked the box, their email address; the parent's own email address and the reset link; and, for notifications, the parent's email address with a short message that includes a child's nickname.
• Google keeps a calendar in sync, only if a grown-up connects Google Calendar. It handles: the calendar events the grown-up chooses to sync, using their own Google account.

We do not share information with anyone else, except where the law requires it. Some of these providers store or process information in the United States or other countries.

Problem reports

If you send a problem report, we receive what you wrote, the page you named, the app version and, if you leave the box ticked, your email so we can reply. If you send on a question a child flagged, we also receive that question and what was answered. We do not receive a child's name or any other records.

Children

ilyKIN is meant to be used with a parent or guardian. We ask a parent or guardian to agree to this policy before they add a child, and children cannot create accounts or contact anyone through the app. There are no chat, social or sharing features for children.

How long we keep it

We keep information until you delete it. You can delete a single item, a child's whole profile, or your whole account at any time. Deleting a child or an account removes it from our live systems straight away; copies in routine backups are removed within [number of days to confirm]. Problem reports that reached us are kept until we have dealt with them, then deleted within [number of days to confirm].

Your choices and rights

• See everything about a child in the parent area.
• Download a copy of a child's information.
• Correct or delete items, a child's profile, or your account.
• Switch the AI helpers off at any time.
• Ask us a question or make a request at hello@ilykin.com. If you are not happy with how we handled it, you may contact your privacy regulator.

Security

Information is sent over encrypted connections and kept in a database where each family can reach only its own records. Photos and files are in private storage. The parent area is behind a PIN so a child using the tablet cannot get into it. No system is perfectly secure; if something happens that puts your information at risk we will tell you promptly and explain what to do.

Changes

If we change this policy in a way that matters, we will ask you to agree again before you continue.