Privacy Policy

1. Who We Are

KindLearn is operated by KCF LLC (Kindness Community Foundation), a mission-driven organisation dedicated to free, accessible education. You can reach us at contact@kindnesscommunityfoundation.com.

KindLearn is available at kindlearn.ai and as a Progressive Web App.

2. Information We Collect

Account information: When you register, we collect your email address. We use magic-link authentication — we never store your password.

Learning data: Lesson progress, XP, streaks, badges, flashcard reviews, vocabulary scores, and diagnostic quiz results. This data powers your personalised learning experience.

Usage data: We run no analytics. There is no Google Analytics, Plausible, PostHog, Segment or Mixpanel tag on any page, and nothing records the pages you visit, how long you stay or what device you are on. Our server keeps ordinary request logs, and we count your AI practice messages against your daily allowance — that is all.

Kids Zone data: For users of the Kids Zone (ages 4–12), we collect only the minimum data needed to run the feature: progress data linked to a parent's account. Kids Zone progress is stored on the account of the adult who set it up. We ask that children under 13 use KindLearn only through a parent or guardian's account. We should be straight with you: sign-up asks for a name and an email address and nothing else, so we have no technical age check that would stop a child registering on their own.

Communications: If you contact support, we retain the content of your message to resolve your query.

We do not collect payment information. KindLearn is free.

3. How We Use Your Information

We use your information to:

• Provide, personalise, and improve the KindLearn service • Send progress reminders and learning streak notifications (only if you opt in) • Respond to support queries • Detect and prevent abuse or fraud • Comply with legal obligations

We do not sell your personal data. We do not use your data for advertising.

4. Children's Privacy (COPPA & GDPR-K)

KindLearn's Kids Zone is designed for children aged 4–12. We take children's privacy very seriously and comply with the Children's Online Privacy Protection Act (COPPA) and GDPR provisions for child data.

Parental consent: Children under 13 access the Kids Zone through a parent or guardian's account. The parent/guardian provides consent by creating the account and enabling Kids Zone access.

Data minimisation: We collect only the data strictly necessary to deliver age-appropriate lessons and track progress. We do not serve behavioural advertising to children. We do not share children's data with third parties except as required to operate the service (e.g. our hosting provider, Netlify).

Parental rights: Parents and guardians may review, correct, or delete their child's data at any time by contacting us at contact@kindnesscommunityfoundation.com. We will respond within 30 days.

No direct marketing to children: We do not contact children directly for marketing purposes.

5. Legal Bases for Processing (GDPR)

If you are in the European Economic Area or UK, our legal bases for processing your personal data are:

• Contract performance — processing your account and learning data to deliver the service you signed up for. • Legitimate interests — improving the app, preventing fraud, and ensuring security, where our interests are not overridden by your rights. • Consent — sending optional notifications (you may withdraw consent at any time via app settings). • Legal obligation — retaining data where required by law.

6. Data Sharing & Third Parties

We share data with the following categories of third-party service providers, under data processing agreements:

• Netlify (hosting and edge functions) — servers your requests and hosts the application • MongoDB Atlas (database) — stores your account and learning data securely • Resend (transactional email) — delivers magic-link authentication emails and optional notifications • Anthropic (Claude) — powers AI conversation practice; the text you submit is sent to Anthropic to generate responses, processed under its own terms and not used to train its models

We do not share your data with data brokers, advertisers, or analytics companies beyond anonymous, aggregated usage metrics.

We may disclose data if required by law or to protect the rights, safety, or property of KindLearn, our users, or the public.

7. Data Retention

We retain your account and learning data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it for longer.

You may request deletion of your account and data at any time by emailing contact@kindnesscommunityfoundation.com.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you • Correction — request correction of inaccurate data • Deletion — request deletion of your data ("right to be forgotten") • Portability — receive your data in a machine-readable format • Objection — object to processing based on legitimate interests • Restriction — request that we limit how we use your data • Withdrawal of consent — for any processing based on consent

To exercise any of these rights, email contact@kindnesscommunityfoundation.com. We will respond within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

9. Cookies & Tracking

KindLearn sets no cookies at all. Your sign-in state, your theme and your interface language are kept in your browser's local storage, which never leaves your device except when your sign-in token is sent to our API to prove who you are. We use no advertising or tracking cookies because we use no cookies.

For full details, see our Cookie Policy at kindlearn.ai/cookies.

10. Security

We use industry-standard security practices including HTTPS encryption, magic-link authentication (no passwords stored), and access controls on our database. While we take reasonable steps to protect your data, no system is 100% secure and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify registered users by email or via an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of KindLearn after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

KCF LLC — Kindness Community Foundation Email: contact@kindnesscommunityfoundation.com Website: kindlearn.ai