Privacy Policy
Ciady:AI Kids Academy
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Ciady: AI Kids Academy is an educational app for children aged 7–14 and the adults who guide them. It has no accounts or sign-in. The app stores lesson page positions, completed lessons and medals, activity dates, challenge answers, training experiments, selected prompt blocks, robot appearance and preferences in a local notebook on the device. An optional nickname, language, text-size and reminder preferences stay on the device. The notebook is excluded from app-managed backup. An installation secret is stored in the device Keychain when optional sync is enabled. By default, private learning data stays local. If a parent or teacher enables sync, the app sends completed lesson IDs, lesson page positions, solved challenge IDs, training counts and results, saved-prompt count, activity dates, last lesson ID, an update timestamp, and robot variant, behavior and ability selections to our server. The server stores these records with a hash of the installation secret and server timestamps. It does not store the raw secret, nickname, free-form messages or prompt text. Public daily challenge requests send the selected calendar date. Cloudflare, which proxies the public API and website, and Railway infrastructure receive ordinary connection information, such as IP address, request time and network metadata, when the app or a browser requests challenges, sync, the home page or this policy.
How we use information
Local data keeps a child's place in lessons, remembers experiments and personalization, and calculates progress from actual learning activity. Bundled lessons, simulations and prompt previews work without an online AI service. Public daily requests retrieve educational question packs, cached locally for up to seven dates. Optional sync keeps an installation-scoped copy of learning progress and robot configuration while its secret remains available. The secret authorizes access to that installation's records and deletion. Temporary rate-limit information helps prevent abuse. Optional local notifications remind the learner at 17:00; notification content is scheduled on the device and is not sent by our server. We do not use learning data for advertising, profiling for marketing, or training an external AI model.
Service providers and sharing
The backend and public web pages are hosted by Railway, which processes stored server data and operational connection information as the hosting provider. Cloudflare terminates public HTTPS and proxies API and website traffic to the same Railway service. As the edge network provider, Cloudflare processes requests, their headers and content in transit, IP addresses and other connection information, including installation authorization headers for private API requests. The application has no advertising, analytics, crash-reporting, social-login, email-delivery or external AI SDKs or integrations. We do not sell learning records or publish them to other users. Application access logging does not write request bodies, tokens, token hashes, IP addresses or URLs; Cloudflare and Railway may maintain their own infrastructure and operational logs. This policy does not promise a particular retention period for provider-managed logs. The privacy contact receives information only if you independently contact it using your own email service; there is no message form or email delivery feature in the app.
Data retention
Local notebook data remains until it is deleted using the app or removed with the app by the operating system. Local activity-date history is bounded to the most recent 366 recorded dates, and downloaded daily packs to seven dates. Server learning records and their hashed authorization identifier remain until deletion is requested with the installation secret. Uninstalling alone does not send a server deletion request. The application does not configure a provider backup schedule or a provider log-retention period. Infrastructure snapshots or backups, if maintained by the provider, may continue to contain deleted data according to the provider's actual lifecycle; we do not claim immediate physical erasure or a fixed expiration. Temporary in-process abuse counters expire as their windows pass and reset on service restart.
Deleting your information
Use Settings, Delete all my data, to clear the local notebook and request deletion of all server records accessible with this installation's secret. Server deletion removes the installation row, revokes the token and requests truncation of the SQLite write-ahead log. If the device is offline or deletion fails, the app clears local learning data and retains only the pending deletion state and secret so it can retry when opened online; a retry control is also available. The secret is erased from Keychain after the server confirms deletion or confirms it no longer recognizes the secret. Deletion cannot erase provider-managed infrastructure backups immediately. Turning sync off stops new private-data uploads but does not delete an existing server copy. If the installation secret is lost, there is no identity-based recovery or cross-device transfer, and we cannot identify its records from a name or email because neither is collected for sync. You may contact fintan.kenward@icloud.com about deletion or other privacy questions; do not send a child's secret or sensitive learning information by email.
Permissions and your choices
The only optional permission is local notifications. It is requested only after reminders are enabled in Settings. You can turn reminders off in the app or revoke notification permission in iOS Settings. Revoking permission does not prevent learning and does not delete learning records. The app does not request access to location, camera, microphone, photos, contacts, tracking or geographic maps. Network requests for public daily content and optional synchronization do not require an iOS permission prompt. You can keep private progress local by leaving sync off, and can delete existing server data separately.
Your privacy rights
A parent, guardian or learner can review local progress, change the optional local nickname and robot preferences, disable sync and reminders, and delete installation-scoped data through Settings. Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing and complain to a relevant authority. For privacy questions or to exercise rights, contact fintan.kenward@icloud.com. We may need enough non-sensitive context to understand a request, but do not ask you to email the installation secret. Because there is no account or identity directory, we cannot locate an installation's server records by a child's name or email address. This app does not promise compliance certifications or universal legal outcomes.
Security
The deployed API uses HTTPS. Public TLS terminates at Cloudflare, which forwards traffic to the pinned Railway HTTPS origin. Private routes require the unique random installation secret; no credential is shared across installations or embedded as a server credential in the app. The server stores a SHA-256 hash of the secret rather than the secret itself, validates bounded request schemas, and uses transactional SQLite writes on a persistent Railway volume. The app stores its secret in device-only Keychain storage and uses protected atomic local notebook writes. The server limits request sizes, request rates and concurrent connections. Possession of the secret grants access to its installation, so do not share it. These measures reduce risk but cannot guarantee absolute security of devices, networks, hosting or backups.
Children’s privacy
Ciady is designed for children aged 7–14 with help from parents or teachers. It opens directly into offline-capable learning without registration. Private-data sync is off by default and Settings asks a parent or teacher to decide whether to enable it; this is guidance, not a verified parental-consent system. The app does not request a child's legal name, birth date, contact details, school, location or free-form conversations. A nickname is optional and stays local. There are no advertisements, purchases, public profiles, social sharing or online AI chat. Adults should supervise use and keep sync disabled when local-only learning is preferred. If you believe personal information was provided inappropriately, contact fintan.kenward@icloud.com.
Changes to this policy
We may update this policy when the app's processing, infrastructure or applicable requirements change. The effective date on this page identifies the published version. Material changes will be reflected in the policy available from Settings and, where appropriate, in app information accompanying an update. This policy describes the implemented product and optional sync, rather than promising unimplemented services. Please review it before enabling new optional features. Questions about changes may be sent independently to fintan.kenward@icloud.com.