Privacy policy

Bright Belts makes learning tools for children, starting with NumNinja. We collect as little as we can, we never sell data, and there are no ads. This page explains exactly what we store and why, in plain language.

Trying without an account

When a child uses “Try it now”, their name, pet and practice stay in that browser on that device. Nothing about them is sent to us. If a parent later chooses to save that practice, it is copied into the child's profile as described below.

The Fun Zone's games work the same way: the players' pets, any names they type and the game settings stay on that device, and nothing about the games is kept by us.

When friends play in a Fun Zone room, each on their own device, the devices pass the game's moves and each player's pet to each other through Supabase's real-time service, on a channel named by the room's 4-character code. No names, messages or anything else about the players are sent, and nothing is stored: the room is gone when the devices leave it.

What we store about grown-ups

• Teachers and parents: email address (to send sign-in emails) and the display name you choose.
• Parents: a record of your consent (when you agreed and to which version of this notice).
• Feedback you send us, and the email address you add to it if you want a reply.

What we store about children

• A first name or nickname, grade, birth year (year only), country and chosen pet.
• Their picture password or PIN, so they can sign in without an email.
• Their practice: each question, their answer, whether it was right, and how long it took. From this we work out belts, XP, streaks and what to practise next.
• Which class or family group they belong to.

We never ask children for an email address, photo, exact birthday, location or any free-text message. Children cannot contact other people through our tools.

Who can see it

• A child sees only their own progress.
• Parents see their own children. Teachers see the students in their classes.
• A teacher can hand a class to another teacher, for example when moving schools. The class, its students and their progress then belong to the new teacher, and the first teacher no longer sees them.
• No one else, apart from the few services that run the app for us (below), and only to run it.

Consent

A child's profile is created either by a parent, who gives consent when setting it up, or by a teacher for classroom use under their school's authority. We follow the US Children's Online Privacy Protection Act (COPPA) and similar laws in the UK, EU and India.

Services we use

• Supabase: database, sign-in, and passing game moves between the devices in a Fun Zone room (servers in the United States).
• Vercel: hosts the website.
• An email service to send sign-in emails to grown-ups.

None of them may use your data for their own purposes. We don't use advertising or tracking cookies; the only cookie keeps you signed in.

Keeping and deleting data

• Parents can delete a child's profile and all of its practice at any time from the child's settings page. It is removed immediately.
• Teachers can remove a student from a class. To delete a classroom student's data entirely, email us.
• To delete your own account, sign in, open Account and choose Delete my account. It happens straight away and can't be undone: your sign-in, your classes or family code, your consent records and any feedback you sent are deleted, and so is every child or student nobody else has, with all their practice. A child who also has another parent, or another class, stays with them, with their progress; if you are that child's parent, you can choose to delete them too.
• You can also email hello@brightbelts.com to delete your account or to get a copy of your data.

Changes and contact

If we change this policy in a way that affects your child's data, we'll ask parents to agree again. Questions? Email hello@brightbelts.com.