Privacy policy.

We do not:

• display third-party or behaviorally targeted advertising;
• sell or rent personal information;
• share children’s personal information with independent third parties for their own marketing;
• use children’s information to create advertising or cross-service marketing profiles;
• ask a child for a surname, email address, phone number, physical address, exact birth date, exact birth year, precise location, photo, voice recording, biometric information, or free-form public content;
• provide chat, messaging, public profiles, public user-generated content, or social posting; or
• condition participation on collecting more child information than is reasonably necessary for the activity.

We limit collection, use persistent technical identifiers only to support internal operations, protect private profile and learning records, provide parents with review and deletion controls, and obtain parental notice or consent where COPPA requires it.

Parent and Family Account

Depending on the account and subscription path, we may collect:

• a parent email address;
• a Firebase Auth user ID for the parent/family account;
• a linked Apple or Google sign-in identifier and the parent email supplied by that provider;
• account and email preferences;
• subscription status, product, store, entitlement, receipt or purchase-token, and transaction-status information;
• gift-purchase or redemption information when a gift feature is used; and
• support messages and any diagnostic information the parent chooses to send.

We do not receive or store a payment-card number from Apple, Google Play, or Amazon. If website billing through Stripe is offered, Stripe processes payment-card details and sends us the account, customer, subscription, product, payment status, and transaction information needed to provide and support the subscription.

Private Child Profile

A parent creates a private child profile using:

• a nickname;
• optionally, a broad age range when the parent selects one—not an exact age, birth year, or birthday;
• a preset character or avatar; and
• sound, narration, screen-time, and similar settings.

Please use a nickname and do not enter a surname. The profile is visible only inside the authenticated family account and is never a public screen name.

Learning and Play Records

The Services store child-linked progress needed to continue the experience and show parent reports, such as:

• books, activities, skills, or learning categories used;
• play date, time, and duration;
• completion and permitted session results; and
• progress summaries derived from those records.

These records use an internal child record ID and do not contain a child email, phone number, physical address, precise location, photo, voice, or public content.

App Analytics for Internal Operations

Firebase Analytics processes a randomly generated app-instance identifier and limited technical and usage information, such as app version, device/operating-system category, general country-level region derived from network information, session/activity timing, and low-cardinality feature or result events.

We configure Analytics for internal operations:

• no Firebase Auth UID, parent email, internal child ID, nickname, age range, profile field, free text, or child-created content is sent as an Analytics user ID or event parameter;
• advertising identifiers and advertising-personalization signals are disabled;
• the property is not intentionally linked to Google Ads or used for remarketing, behavioral advertising, or cross-service profiling;
• precise device location is not collected; and
• Analytics event-level and user-level data are each retained for two months, and the user-level retention clock does not reset when new activity is recorded. Standard aggregated reports are not governed by these detailed-data retention controls.

Google may process an IP address transiently to provide and secure the service and derive general region information. Google states that Google Analytics does not log or store individual IP addresses.

Service, Security, and Diagnostics

Our hosting, authentication, database, rate-limiting, email, job-processing, and monitoring providers may process limited information needed to operate and secure the Services, including:

• IP address and request metadata;
• app/browser version, device/operating-system category, and user agent;
• the device’s IANA time-zone identifier for account settings, report bucketing, and time-based service behavior—not GPS or coordinates;
• timestamps, route or function status, error details, and security events;
• parent/family account ID where needed to authenticate, enforce ownership, complete a requested job, or investigate an account issue; and
• support diagnostics that a parent elects to send.

We do not use this information for behavioral advertising.

We use PostHog to understand public-page visits, clicks, and performance and improve the Website. Analytics can include public page text, page URLs, referrers, and browser, device, and viewport information. We also use heatmaps and feature flags. Input values, element attributes, and sensitive email displays are masked, and authentication secrets are redacted from URLs. Public interaction tracking does not run in the parent portal or staff admin area. We do not enable PostHog person profiles.

Cookieless public-page analytics starts before you choose in the privacy banner. Accepting enables analytics cookies, browser storage, session recordings, and surveys. Rejecting continues analytics in cookieless mode, without session recordings or surveys; events still go to PostHog. You can change your choice through Privacy Settings in the page footer. Declining analytics cookies does not affect site access.

We also collect error and performance diagnostics on all pages, including the parent portal, staff admin area, and error screens. These diagnostics follow the same analytics cookie choice: cookieless before a choice or after rejection, and cookie-based after acceptance. Error reports remove original messages, stack traces, custom error types, and arbitrary properties; they retain a standard error type, handled status, technical SDK and browser information, and a page identifier. Performance diagnostics on private pages retain numeric web-vital measurements without interaction tracking.

We use c15t to store your privacy preference in a necessary cookie and browser local storage. This configuration keeps preferences in your browser and does not send them to a hosted c15t service.

Coloring artwork remains on the device. The App may ask for permission to save artwork to the device’s photo library or local storage. It does not upload the artwork, inspect the existing photo library, import photos into the child experience, or use the camera for this feature.

The App does not request precise-location permission. The App does not send push or local notifications.

We use information to:

• create and authenticate the parent/family account;
• provide subscriptions, gifts, entitlements, and account support;
• create private child profiles and deliver broad age-range-appropriate content;
• save settings and learning/play progress;
• show parent progress and usage reports;
• send transactional, security, support, progress, and service communications;
• send optional usage updates or marketing emails to a parent, with a working unsubscribe link and account preference control;
• prevent fraud, abuse, unauthorized access, and duplicate or improper account creation;
• diagnose errors, maintain performance, and improve the Services;
• comply with law and enforce our terms; and
• protect users, BTM, service providers, and the public.

We do not use children’s personal information for behavioral advertising, sale, independent third-party marketing, or non-integral disclosure.

The Services use a neutral grown-ups gate before parent-directed settings and account functions. The gate entry is not retained or sent to Analytics.

For subscription purchases, we obtain verifiable parental consent through a qualifying parent-associated subscription payment. On the purchase screen before the parent completes the purchase, the parent sees clear notice of the parent information we collect, how we use it, our non-disclosure position, and clearly clickable links to the Children’s Privacy Policy and Terms. The parent must affirmatively complete the purchase; without consent, the parent cannot subscribe.

This subscription consent covers the collection and uses disclosed at purchase, including the parent email used for account access, support, and optional parent communications and any later optional Apple or Google account linkage in the grown-ups area. Ordinary Terms of Service or privacy-policy links alone are not treated as verifiable parental consent.

Any legally required direct notice to a newly collected parent contact address is provided separately from marketing.

A parent may:

• review the information associated with the family account and child profiles;
• correct the parent email, child nickname, broad age range, avatar, or settings;
• stop further collection or use of a child’s information by deleting the child profile or family account, or by contacting us;
• delete an individual child profile;
• delete the whole family account;
• withdraw consent through the same deletion or contact options, subject to information we must retain by law; and
• opt out of optional marketing.

Self-service access, correction, and deletion require the parent to be signed in to the family account. Support is provided by ordinary email, including when the age-gated App opens the device email client. A request sent from the stored account email may be treated as authenticated to that account. A request from another address must complete a verification challenge sent to the stored account email or, if that channel is unavailable, provide minimally necessary transaction evidence. A child nickname, age range, book history, plan, or approximate subscription date is not sufficient authentication by itself.

To make a request, contact help@drseusslearn.com. We will respond within 30 days, or sooner if applicable law requires.

We do not sell or rent personal information. We disclose limited information only to operate the Services, comply with law, protect safety and rights, complete a business transaction with appropriate safeguards, or act with a parent’s authorization.

Our operational providers may include:

We require providers to process information only for the contracted service, apply appropriate security, and comply with applicable data-protection obligations. We review provider terms, data-processing and security materials, subprocessors, and relevant product settings before use and at least annually or after a material change or incident.

We maintain a written information security program proportionate to our company size, systems, and the limited data collected. Safeguards include managed cloud infrastructure, encrypted transport and provider-supported encryption at rest, authenticated account sessions, ownership checks, named administrator accounts with MFA or passkeys, least-privilege access, managed secrets, dependency and vulnerability review, monitoring and alerts, provider diligence, incident response, backups, restore controls, and recurring risk and program review.

No system is perfectly secure. We cannot guarantee absolute security, but we investigate and address suspected incidents and provide notices required by law.

We retain information only for the business or legal need stated below and delete or de-identify it when it is no longer reasonably necessary.

An account is active while it has a current paid or gift entitlement or the parent has authenticated activity in the App or Parent Portal. An account becomes dormant when it has neither a current entitlement nor authenticated activity. The dormancy period begins after the later of the entitlement ending or the last authenticated activity. We retain a dormant account for 24 months, then delete or de-identify the account and associated child-profile data, subject to the legal, transaction, security, and bounded-backup retention described below.

Whole-family deletion currently uses a 30-day soft-delete period before active-system purge. Store billing is managed separately: deleting the account does not itself cancel, refund, or alter an Apple, Google Play, Amazon, or Stripe subscription unless the applicable product flow expressly says so.

Some providers retain limited legal, anti-fraud, security, transaction, or backup records under their terms. We do not restore deleted information to active use merely because a backup exists.

BTM is based in Canada. The Services and providers may process information in Canada, the United States, and other locations where the providers operate. Where required, we use contractual or other lawful transfer safeguards. Regional privacy rights may supplement the parent rights described above.

We may update this policy when the Services, providers, law, or data practices change. We update the “Last updated” date and provide additional parent notice or obtain new consent before a material change when required. Material changes to registration, parental notice/consent, child data, sharing, providers/SDKs, retention/deletion, or this policy are submitted to KidSAFE for review before release where the certification terms require.

• Privacy email

  help@drseusslearn.com

• Support email

  help@drseusslearn.com

• Privacy phone

  +1 778-486-9933

• Mail

  Be The Monster Inc., Attn: Privacy Officer, 1005 Langley St, 3rd Floor, Victoria, BC V8W 1C6, Canada

• Website

  /privacy