Masaarat Kids Privacy Policy
26 September 2026
One policy for every Masaarat Kids family. We put the child's interests and privacy first and use the minimum data needed for parent-managed lessons. Child data processing starts after the parent account holder consents to this policy and creates a child profile.
Who manages the account?
A parent signs up with a confirmed email, declares their role, reads this policy and consents using a checkbox that starts unchecked. They then create a child profile with a chosen display name and learning level. We do not ask a child for an email address, phone number or identity document.
What data and why?
We store the parent's account, country, declaration, policy version and acceptance time, plus the child's display name, level and lesson progress. We use these to manage access, show lessons and results, save progress, protect the service and respond to family requests. We do not sell children's data or use it for targeted advertising or behavioural tracking.
Lessons, video and help
Lesson content is stored privately by the platform. Bunny delivers video through a short-lived signed link. Lesson help returns pre-authored educational answers, without needing the child's name or an open chat. Delivery providers may receive technical connection data needed to serve content, such as IP address and device information.
Who receives data?
Parents manage only their own children's profiles. Supabase provides authentication and stores profiles and progress, Bunny delivers video, and Resend may deliver operational parent notices when enabled. We do not put a child's name or progress in email. Access is restricted within the platform. Providers may process data outside the family's country, subject to the necessary legal arrangements.
Choice and rights
Children's policy consent is separate from adult plans and marketing; its version and time are recorded for the account and each child profile. A parent can review the consent record and withdraw consent for a profile in account details, which stops its lesson access, and can request access, correction or erasure using the email below. Withdrawal does not mean backup or provider records disappear immediately; erasure requests follow the approved deletion process.
Parent and Masaarat responsibilities
The parent is responsible for the truth of their guardian declaration, managing the family account and supervising the child. They may contact the competent authority in their country when needed. Masaarat remains responsible for its own data-protection, service and request-handling duties; this policy does not transfer them to the parent.
Retention and safety
We retain data only while needed for the service and related rights. After the last paid Kids plan expires, the prepared policy retains profiles and progress for 90 days, with a notice before deletion and at least 14 days after confirmed notice delivery. Automatic deletion begins only when the notice and deletion process has been enabled and verified. Never-paid free profiles are outside the paid-expiry timer and may be deleted on request.
Contact and changes
For questions or family rights, write to info@masaarat.ai from the parent's account email without sending documents or child details in the first message. If data use changes, we publish a new version and seek fresh consent when required; we do not silently rewrite an accepted notice.