Privacy Policy

When a parent, guardian or teacher creates an account, we collect the following information:

When a parent creates an account for their child, or a teacher creates one for a student, we collect the following information:

We automatically collect the following data as students use the platform:

• Lesson Progress: Tracking educational advancement
• Answers to Questions: Educational assessment and content improvement
• Experience Points (XP): Gamification tracking
• Level and Badges: Achievement tracking
• Streak Data: Engagement tracking (current and longest streaks)
• Daily Quest Completions: Wellness activity tracking
• Last Active Date: Activity monitoring

To provide personalization features, we collect:

• Gender selection for avatar appearance (stored as part of avatar data, not student account profile)
• Customization choices (skin color, hair color, hair style)
• Equipped items (clothes, accessories, effects)
• Inventory of owned virtual items

To run your subscription, we store:

• Stripe Customer ID (reference for payment processing)
• Stripe Subscription ID (subscription management)
• Your package, billing period (monthly or yearly), price, billing currency, subscription status and trial end date (access control and billing)
• Your renewal date, any package change waiting for renewal, and the date a cancellation takes effect
• Your seats, and which child or student holds each one
• The last 4 digits of your card, or the fact that you pay with Link
• Records of each checkout: what you chose, whether it finished, the amount and tax charged, any promotion code used, and the referral ID if you arrived through a partner link
• Records of payments, refunds and disputes, and the reason and comment you give if you cancel

We never see or store your full card details. You enter them on Stripe's own checkout page, and Stripe, our PCI-compliant payment processor, stores them.

When you use our Service, we may automatically collect:

• Device information (browser type, operating system)
• IP address (for security and localization)
• Usage patterns and interactions with the platform
• Error logs and diagnostic data (for service improvement)
• Request metadata including IP address, user-agent, request identifiers, and diagnostic correlation IDs (for abuse prevention, debugging, and service reliability)
• The date and time a parent last used the Service, recorded at most once per session so we can tell an active account from a dormant one and decide whether to message it
• Product analytics events and session recordings used to understand and improve our Service. Session recordings are captured with sensitive form inputs masked, and error replays may be captured when our Service encounters an error. These recordings are not used for advertising and are described further in Section 4 (Third-Party Services).

When students use the AI chatbot assistant, we collect:

• Chat messages sent to and received from the chatbot
• Chatbot session identifiers and conversation history
• Lesson context (lesson slug, step, language, and school year) sent to the chatbot for relevant responses
• Response metadata including sources and safety-filtering indicators

Chatbot conversation sessions are temporarily cached in our chatbot service with an auto-expiring time-to-live of approximately 15 minutes; once the window expires, the session and message history are removed from the cache. Chatbot data is used solely for providing educational assistance, and all responses are passed through age-appropriate safety filters before being returned to the student.

To provide personalized audio greetings, we process:

• Student first name
• Language
• Voice preference selection
• Generated audio greeting files

Voice greetings are generated through a third-party voice synthesis service (ElevenLabs) and stored on our infrastructure for playback. Greetings may be regenerated when a student's name is changed, and the corresponding audio files are deleted when the student account is deleted.

When you contact us through our support system, we collect:

• Email address
• Message content
• Language
• Ticket status (open/closed) and timestamps

Support data is used for responding to your inquiries and follow-up communications. Confirmation and closure emails are sent to the provided email address.

Our platform includes a virtual coin economy. We track:

• Coin balance
• Coin transaction history (earned, spent, and refunded coins)
• Virtual item purchases

Transaction history is pruned by an automated daily task to retain only the most recent 100 transactions per student.

We store push subscription data on two separate tracks. On the parent track, when a parent allows notifications in their own browser so we can tell them about their family's progress. On the student track, when a parent has allowed learning reminders and the student then turns notifications on for their device. For each subscribing device we collect and store:

• The push subscription the browser creates for that device (a unique endpoint address and the encryption keys the browser generates for it)
• The device's browser user-agent string, to identify the subscribing device
• Whether the one-time notification reward has already been granted to the student (student track only)

This information exists only to deliver notifications to that specific device. The two tracks are stored separately, so a parent and a student can use the same physical device without one affecting the other. Notification contents are encrypted in transit, and the push delivery services that relay them (see Section 4) cannot read them. The student track is off by default, a parent can withdraw it at any time, and turning notifications off on either track deletes the stored subscription for that device.

We occasionally ask how things are going. Answering is always optional and skipping it changes nothing about the Service. We store:

• A parent's rating, given by tapping one of a few options in a message we send or a prompt in the app
• A student's rating of how they are finding their lessons, given by tapping one of three faces in the app
• The account the rating came from and the date it was given

Neither prompt accepts free text, so a child cannot type anything into it and nothing a child writes is collected here. A parent's rating may be attached to their contact record in our CRM (see Section 4.8) so that support can follow up. A student's rating stays within the Service and is never shared with the CRM or any advertising system. A parent can ask us to delete either at any time under Section 6.

When a child signs in, we store what is needed to keep them signed in and to let a parent see and control it:

• For each device a child is signed in on, a device label taken from the browser (for example "Windows, Chrome"), when the session started and when it was last used. Parents can see this list.
• Sign-in requests a child sends to a parent, QR pairing codes, and whether a parent chose to trust a device. Requests and codes expire after two minutes.
• The daily session length and break length a parent sets, and when the current session or break ends.

• Providing access to educational content and features
• Personalizing learning experiences based on age and school year
• Tracking progress and achievements
• Enabling avatar customization and gamification features

• Creating and maintaining user accounts
• Processing authentication and authorization
• Managing subscriptions and billing
• Communicating important account-related information

We send messages to parent accounts for the purposes below. These are delivered by email for email-based accounts, and over WhatsApp (with SMS as a fallback) for phone-based accounts. We never send messages of any kind to a student account:

• Account activation and verification
• One-time login and verification codes. For phone-based accounts these are delivered over WhatsApp with SMS as a fallback, and message and data rates may apply.
• Password reset requests (email-based accounts)
• Password change notifications (email-based accounts)
• Account deletion confirmations
• Billing notices: checkout confirmations, receipts, trial reminders, a reminder before each renewal, notices about package changes, failed payments and unfinished checkouts
• Sign-in requests when your child asks to sign in on a device, delivered in the app, as a push notification, and over WhatsApp for phone-based accounts
• Messages about getting started and your family's use of the Service, such as a message each day in your first week reporting what your children did, reminders to choose a package if you have not yet, a note when a seat on your package has no child on it, notices before a discount ends, a weekly digest for teacher accounts, prompts to come back after a period of inactivity, and a welcome-back offer after you cancel. These are timed to your local morning and evening and refer to your own children's or students' activity.
• Progress digests, homework summaries, and product updates

The first seven categories above are transactional and always reach you, because they concern the security, access and billing of your account. The last two are engagement messages. You can turn any category off, and turn off a whole channel (email or WhatsApp), from Communication Preferences in your account settings, and every message carries an unsubscribe route. Turning everything off does not affect the security and billing notices.

• Analyzing usage patterns to improve content and features
• Identifying and fixing technical issues
• Developing new educational content

• Protecting against unauthorized access
• Detecting and preventing fraud
• Enforcing our Terms of Service

To a parent, once they allow notifications in their own browser, we may send updates about their family's learning, such as a lesson finished or a badge earned, and requests from a child asking to sign in on a device. To a student, with a parent's opt-in consent and only after the student turns notifications on, we may send occasional reminders that support their learning, such as a nudge to continue a lesson or pick up where they left off.

These notifications are educational or informational in purpose and are not advertising. The student track is off by default, limited in how often it is sent, respects quiet hours, and can be turned off at any time by the parent in Settings or by the student on their device. A parent can turn their own notifications off in their browser's site settings at any time.

We advertise to adults on Facebook, Instagram and Google. To see whether those adverts work, our website and the parent and teacher pages of our app use the Meta Pixel and Google Ads conversion tracking. The Meta Pixel tells Meta when a visitor views a page, signs up, verifies their account, starts a trial, goes to checkout or subscribes, with the plan price and currency for a purchase. It also reports some button clicks and page details on its own. Google Ads conversion tracking tells Google when a visitor who followed one of our Google adverts verifies a new account.

Meta and Google may link these events to a Facebook, Instagram or Google account on the same browser and use them to measure and improve the delivery of our adverts. Neither is loaded on pages children use, and we never use them to advertise to children. You can block them with your browser's settings or an ad blocker, and you can manage how Meta and Google use this data in your Facebook, Instagram or Google ad settings.

• Purpose: Taking payment on Stripe's hosted checkout page, billing subscriptions, working out tax, issuing invoices, and preventing fraud
• Data Shared: Your name and email address (where available; phone-only accounts may not have an email, in which case receipts may be issued without one), your account ID, the package, plan, subject and currency you chose, and a referral ID if you arrived through a partner link
• Data Processed by Stripe: Card details or Link account details, billing address, an optional tax ID for teacher accounts, the result of any 3D Secure check with your bank, and device, browser and IP address information that Stripe Radar uses to detect fraud. You enter card details on Stripe's page, and they never reach our servers.
• Compliance: PCI DSS Level 1. For Link and for fraud prevention, Stripe also acts as an independent controller under its own privacy policy.
• Privacy Policy: https://stripe.com/privacy

• Purpose: File storage and content delivery
• Data Stored: Avatar images, educational content (videos, audio), badge images
• Privacy Policy: https://aws.amazon.com/privacy/

• Purpose: Transactional email delivery (account verification, password reset, deletion confirmation, subscription notices, and support replies)
• Data Processed: Parent email addresses and the contents of the transactional emails we send to them
• Privacy Policy: https://postmarkapp.com/eu-privacy

• Purpose: Generating personalized audio greetings for students
• Data Shared: Student first name, language, and voice preference
• Data Processed: Text-to-speech synthesis of greeting audio

Generated audio files are stored on our infrastructure. The voice generation service processes the student's first name only for the purpose of creating a personalized greeting.

• Purpose: Providing AI-powered educational assistance to students
• Data Shared: User identifier, lesson context (slug, step, language, school year), and chat messages
• Data Processed: Conversational responses, session management, and source references

Chat sessions are held in temporary cached memory with an auto-expiring time-to-live of approximately 15 minutes; once expired, the session and message history are removed. All chatbot responses are passed through age-appropriate safety filters before being returned to the student.

• Purpose: Capturing application errors, performance traces, and limited session replay on errors so we can diagnose and fix issues affecting our users
• Data Shared: Error and exception details, stack traces, browser and device metadata, request identifiers, user role (parent or student), and a pseudonymous user identifier
• Data Processed: Aggregated error reports, performance metrics, and short error-only session replays. We do not transmit passwords or full personal profiles to Sentry.
• Privacy Policy: https://sentry.io/privacy/

• Purpose: Understanding how parents and students use our Service so we can improve features, measure adoption, and operate feature flags
• Data Shared: Pseudonymous user identifiers (parent or student ID), navigation and interaction events, device and browser metadata, and session recordings
• Data Processed: Product analytics events and session recordings in which every form input is masked at the source before transmission. Card details are entered on Stripe's checkout page, outside our Service, and are never recorded.
• Privacy Policy: https://posthog.com/privacy

PostHog is used solely for product analytics and reliability, never for behavioral advertising. Session recording can be disabled at any time by Elysian Minds for any user or population.

• Purpose: Managing parent and teacher communications and account lifecycle, and delivering transactional messages to phone-based accounts, such as one-time login and verification codes, renewal reminders and other billing notices (for example, re-engagement messages, trial reminders, product updates, login or verification codes, and requests from your child to sign in, sent to parent accounts)
• Data Shared: Parent or teacher name, email address (if provided), phone number (if provided), country, timezone, account type (parent or teacher), lifecycle status (trial, active, cancelled, etc.), whether a checkout was left unfinished, whether you have chosen a package, whether a seat has no child on it, number of student profiles, student first names, summary counts of your children's recent activity used to compose a message, any one-time discount code we send you, and any rating you give us when we ask how things are going. For authentication messages, the phone number and the code being sent are processed to deliver the message. We do not share student passwords, lesson content, or detailed activity logs with the CRM.
• Data Processed: Contact records, segmentation tags, and outbound email or messaging workflows directed to parent accounts only
• Privacy Policy: https://www.gohighlevel.com/privacy-policy

GoHighLevel is never used to communicate directly with children. All marketing and lifecycle communications are sent only to parent accounts. Phone messages, including one-time codes, are delivered over WhatsApp (operated by Meta) with SMS as a fallback; message and data rates may apply.

• Purpose: Tracking affiliate referrals, attributing conversions to affiliates, and calculating commissions for our affiliate program
• Data Shared: When you arrive through a partner's link, Rewardful's script records a referral ID in a cookie on our website and app. We pass that ID to Stripe at checkout, and Rewardful reads the resulting subscription (start date, plan and amount) from Stripe to credit the partner. Personal information about the referred parent is not shared with affiliates beyond aggregate, non-identifying conversion counts.
• Data Processed: Affiliate dashboards, commission calculations, and referral cookie tracking on the affiliate's promotional links
• Privacy Policy: https://www.rewardful.com/privacy

• Purpose: Relaying push notifications to a parent's or a student's device. The delivery service is determined by the browser in use (for example, Apple for Safari, Google for Chrome, Mozilla for Firefox); we do not choose or control it.
• Data Shared: An encrypted notification addressed to the endpoint that browser provides. Because the notification is encrypted, these services cannot read its contents.

We do not maintain accounts with these services or send them identifying information about parents or students; they act only as the transport layer the browser already uses.

• Purpose: Allowing parents to sign in using their Google account, and to link a Google account to an existing Elysian Minds account
• Data Shared: When you sign in with or connect Google, we receive your name, email address, and a Google account identifier
• Data Processed: Verification of your Google sign-in and matching it to your Elysian Minds account
• Privacy Policy: https://policies.google.com/privacy

• Purpose: Allowing parents to sign in using their Facebook account, and delivering our parent messages to phone-based accounts over WhatsApp. WhatsApp carries one-time login and verification codes, requests from your child to sign in, and account, billing, trial and re-engagement messages, all sent under message templates approved by Meta.
• Data Shared: When you sign in with Facebook, we receive your name, email address, and a Facebook account identifier. For WhatsApp delivery, your phone number and the contents of the message are processed so it can reach your device. Where a message refers to your family's activity, the values filled into the template (such as a child's first name or a lesson count) are processed with it.
• Data Processed: Verification of your Facebook sign-in, and transport of our parent messages over WhatsApp with SMS as a fallback. Meta is a delivery channel only and does not use these messages to build a profile of you.
• Privacy Policy: https://www.facebook.com/privacy/policy/

• Purpose: Measuring whether our adverts on Facebook and Instagram lead to sign-ups and purchases (see Section 3.7)
• Data Shared: The page address, your browser and device details, IP address, Meta's own cookies, the events listed in Section 3.7, including the plan price and currency when you subscribe, and some button clicks and page details the Pixel records on its own
• Data Processed: Advert measurement and delivery in Meta's systems. Meta may link these events to a Facebook or Instagram account on the same browser.
• Privacy Policy: https://www.facebook.com/privacy/policy/

The Meta Pixel runs on our website and on the parent and teacher pages of our app only. It is never loaded on pages children use.

• Purpose: Loading measurement scripts, and measuring whether our Google adverts lead to sign-ups (see Section 3.7)
• Data Shared: The page address, your browser and device details, IP address, Google's advertising cookies, the click ID of a Google advert you followed, and a conversion event when you verify a new account
• Data Processed: Advert measurement in Google's systems. Google may link these events to a Google account on the same browser.
• Privacy Policy: https://policies.google.com/privacy

Google Tag Manager and Google Ads run on our website and on the parent and teacher pages of our app only. They are never loaded on pages children use.

• Children cannot create accounts independently
• All child accounts must be created by a verified parent/guardian
• Parents must complete registration and agree to terms on behalf of their children
• By creating a student account, parents confirm they have authority to consent on behalf of the child
• Learning reminders to a student's device are sent only with the parent's separate, opt-in consent, which is off by default and can be withdrawn at any time in Settings

Parents have full control over their children's accounts and can:

• View all student activity and progress
• Activate or deactivate student accounts
• Change student passwords
• Delete student accounts at any time
• See each device a child is signed in on, end any device session, or sign the child out everywhere
• Turn off the child's password sign-in
• Approve or deny a child's sign-in request, sign a child in with a QR code, or sign them in from the parent's own device
• Set a daily session length and a break length
• Decide when a session ends: children cannot sign themselves out, so a session ends when a parent ends it, when the device limit is reached, or when another child signs in on the same browser
• Request access to their child's personal information
• Request deletion of their child's personal information

• We collect only information necessary for educational purposes
• We do not engage in behavioral advertising to children
• We do not allow children to publicly post personal information. Within the Service, an in-app leaderboard visible only to other authenticated students displays top-ranked students' chosen display names (usernames) along with progress metrics such as experience points, current streak, badges earned, and lessons completed. The leaderboard is never made public outside of the Service.
• Children cannot access or modify other children's data (except viewing limited leaderboard information)

We do not send marketing or advertising communications to children. With a parent's opt-in consent, we may send non-marketing educational reminders as push notifications to a student's device; these are off by default and can be turned off at any time. All subscription and marketing communications are sent only to parent accounts.

• All data transmitted between your device and our servers is encrypted
• Passwords are securely stored using industry-standard hashing algorithms
• Secure authentication mechanisms to protect your account
• Protection against brute force attacks and unauthorized access attempts
• Comprehensive validation to protect against common security threats
• Strict access controls and session management
• Data is stored securely with appropriate encryption and access controls

Parent Account Deletion:

• You can request account deletion through your account settings
• A confirmation with a verification link or code is sent to the account's registered channel (by email for email-based accounts, or over WhatsApp with SMS as a fallback for phone-based accounts)
• The deletion verification link is valid for 1 hour
• One-time verification codes used during account actions expire after 5 minutes
• Upon confirmation, all data is permanently deleted, except payment and refund records we must keep by law (see Section 7.1)

What Gets Deleted:

• Parent profile data
• All associated student accounts and profiles
• All lesson progress and achievements
• Avatar configurations and inventory
• Subscription will be cancelled through Stripe

You have the right to request access to the personal information we hold about you and your children.

You can update your account information at any time through your account settings, or contact us to request corrections.

You can request deletion of your account and all associated data as described in Section 7.2.

You may object to certain processing of your data or request that we restrict processing in certain circumstances.

To exercise any of these rights, please contact us at support@elysianminds.org. We will respond to your request within 1 week.

• We do not ask for or collect account information from guests, such as your name, email address, username, or password.
• We do not save your guest lesson activity, answers, or progress to an account. Guest session state stays in your browser during the visit and is not stored on our servers.
• We do not collect payment information in guest mode.

• We collect anonymous product analytics about how guest mode is used, for example which lessons are tried, how far visitors get, and where they choose to sign up, so we can understand and improve the Service.
• This analytics data is handled by our analytics provider (PostHog) and is linked to an anonymous identifier, such as a cookie or device identifier, rather than to your real-world identity.
• As described in Section 4 (Third-Party Services) and Section 10 (Cookies and Tracking Technologies), analytics may use cookies and may include session recordings in which text you type is masked.