Privacy Notice

1. Who we are

QrateKidz is operated by Keitz C. Aquino (trading as QrateKidz), the data controller for the personal data described here. Contact us about privacy at support@qratekidz.com.

2. Data we collect and why

• Account data (name, email address, login credentials or social sign-in identifiers, parent PIN hash) — to create and secure your account. Legal basis: performance of our contract with you.
• Family and learning data (explorer names, grade levels, avatars, curriculum, quests, attendance, grades, notes, uploaded photos, videos and links) — to provide the planning, tracking and portfolio features you use. Legal basis: performance of our contract.
• Support messages and feedback — to answer you and improve the product. Legal basis: contract and legitimate interests.
• Usage, device and log data (IP address, browser and device identifiers, error and sync logs, timezone) — for security, fraud prevention, debugging and product improvement. Legal basis: legitimate interests.
• Subscription status received from our Merchant of Record — to grant the right level of access. Legal basis: contract.

Children's learning records are entered by the parent or guardian who controls the account. We do not create accounts for children directly and we do not use family data for advertising or profiling.

3. Who we share data with

• Service providers / subprocessors — hosting, database, storage, email delivery and error monitoring providers who process data on our instructions.
• Lemon Squeezy, LLC — our Merchant of Record for the sale of subscriptions, secure checkout, billing, invoicing and global tax compliance. Lemon Squeezy processes payment details directly under its own privacy notice.
• People you share with — advisors or evaluators who open a portfolio share link you create, and any AI assistant you explicitly connect to your account.
• Professional advisers (legal, accounting) and authorities where required by law.

We do not sell personal data. Where data is transferred outside your country, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

4. Retention

We keep your account and family data while your account is active and for a short grace period afterwards so you can recover or export it. Deleted items are removed on their retention schedule; billing and tax records are kept for as long as the law requires. After that, data is deleted or anonymised.

5. Your rights

Subject to local law, you may request access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interests, and withdraw consent where we rely on it. Email support@qratekidz.com and we will respond within one month. If you are in the UK or EEA you may also complain to your supervisory authority.

6. Security

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls that scope data to your own account, hashed credentials and parent PINs, and least-privilege access for administrators. No system is perfectly secure, so please use a strong, unique password.

7. Cookies and local storage

We use strictly necessary cookies and browser local storage to keep you signed in and to remember settings such as theme, view preferences and offline sync data. We do not use advertising cookies. You can clear or block cookies in your browser, though sign-in and some features will stop working. Our payment provider may set its own cookies during checkout.

8. Changes

We may update this notice and will post the revised version here with a new date. See also our Terms & Conditions and Refund Policy.