Privacy, in plain language

Anyone can read lessons and use activities without signing in. We don’t use advertising trackers, session recording or third-party analytics.

• Family accounts are by invitation only. A grown-up signs in with Google; we use the verified email only to match the invitation.
• For each child we keep a nickname, a picture choice, an age band, a language and optional interests. We never ask for a child’s surname, school, grade, email, phone, address, marks or photo.
• A child uses a separate paired browser. The child’s browser never receives the grown-up’s sign-in.

• We save what a paired learner explores, practises and bookmarks, and the topics they wish for. Reading a page is never treated as mastery.
• A child sees only their own wishes. Their grown-up can see their children’s wishes. The person who builds the library sees the question text without the child’s name or family.
• Before a wish is used to plan a lesson, personal details are removed. Only that cleaned question is given to the AI writing assistant on the owner’s computer — never names, emails, family details or learning history. Note that the AI service processes what it is given; it is not fully on-device.

Detailed activity records are kept about 90 days; summaries and bookmarks while the profile exists; answered or withdrawn wishes about 180 days; read notifications 90 days. A grown-up can export the family’s data or delete the family from Family settings. Deleting first disconnects every learning device.

Signing out of Curiosity doesn’t sign your browser out of Google. On a shared computer, also sign out of Google, or use a separate browser profile for your child.