Privacy Policy

Plain-English privacy policy for parents.

Last updated: September 2026

What we collect

• Parent account: email address, name, hashed password, Stripe billing identifiers.
• Child profiles: a nickname or label you choose (e.g. "J — Year 6"). That's it.
• Sites: the domain names you approve for gating (e.g. youtube.com).
• Question attempts: which questions your child answered and whether they were correct.
• Unlock sessions: when a site was unlocked and when the unlock expires.

What we do NOT collect

• No date of birth, legal name, or location of any child.
• No browsing history beyond the minimum needed to operate the gate (domain name only).
• No photos, videos, or biometric data of any kind.

How we use your data

Your data is used solely to operate AndWhat Home — to gate sites, serve questions, track unlock sessions, and provide weekly summaries. We do not sell, share, or use your data for advertising, profiling, or AI model training.

Data storage

Data is stored in secure, encrypted databases hosted on international cloud infrastructure. All data is encrypted at rest and in transit (TLS).

Data retention

Your data is retained for as long as your account is active. When you delete a child profile or your account, data is removed within 30 days (a brief retention window for fraud prevention).

Your rights

• Export: download all child data as JSON from your Account page.
• Delete: delete any child profile or all child data from your Account page.
• Correct: edit child nicknames or site entries at any time.

Contact

For privacy questions, email [email protected].