Privacy Policy

Last updated: June 2026

Sinau ("we", "our", or "us") is a learning app designed for children aged 4–12. We take the privacy of children seriously and comply with the Children's Online Privacy Protection Act (COPPA) and applicable data protection laws.

1. Information we collect

• Child profile data — name, age, and avatar chosen by the parent. Stored locally on the device. If a parent signs in, this data is synced to a secure database to allow access across devices.
• Screen time data — daily usage minutes per child, and the daily screen time limit set by the parent. Synced to our database when a parent account is signed in.
• Parent account data — name and email address from Google Sign-In, used only to authenticate the parent and link child profiles.
• Voice data — when a child uses the "Talk with Kisha" feature, the child's voice is transmitted in real time to ElevenLabs for AI response generation. Voice audio is not stored by Sinau after the conversation ends. ElevenLabs processes voice data as described in their privacy policy.

We do not collect advertising identifiers, precise location, photos, contacts, or any other data not listed above.

2. How we use the information

• To personalise the learning experience for each child profile.
• To enforce the daily screen time limits set by the parent.
• To generate spoken AI responses from Kisha via ElevenLabs.
• To sync parent-controlled settings across devices when a parent is signed in.

We do not use any data for advertising or sell data to third parties.

3. Parental consent

We require a parent or guardian to create an account and provide consent before a child can access the AI voice feature. Parents can withdraw consent at any time by signing out, which disables voice chat for the child.

4. Third-party services

• Supabase — cloud database and authentication provider. Data is stored on Supabase servers. See Supabase Privacy Policy.
• ElevenLabs — AI voice generation for the Kisha character. Real-time voice is processed by ElevenLabs. See ElevenLabs Privacy Policy.
• Google Sign-In — used for parent authentication only. See Google Privacy Policy.

5. Data retention and deletion

Child profile data stored locally is deleted when the app is uninstalled. Data synced to our database is retained until the parent deletes their account. To request deletion of all data associated with your account, email us at [email protected].

6. Children's privacy (COPPA)

We do not knowingly collect personal information directly from children. All account creation and consent is handled by a parent or guardian. If you believe a child has provided personal information without parental consent, please contact us immediately at [email protected].

7. Security

All data in transit is encrypted using HTTPS/TLS. Database access is protected by row-level security so each parent can only access their own children's data.

8. Changes to this policy

We may update this policy as the app evolves. The "Last updated" date at the top will always reflect the most recent revision. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact us

Questions about this privacy policy or your data:
[email protected]