Children's privacy

Most children are set up by an adult: the parent or guardian signs in and creates a student profile for them. Where that is how the profile was made:

• The parent controls which children use Epivo
• The parent can view all session history and progress
• The parent can delete a child's profile and all associated data

A learner can also start on their own device with no account at all. If the age they give is below the threshold that applies where they are, Epivo locks the account until a guardian approves it. Their progress can be linked to a parent's account afterwards.

Whether a guardian's consent is required depends on the learner's age and the law where they are:

• 13 — Sweden, Belgium, Estonia, Finland, Latvia, Malta, Norway, Portugal (and Australia, Brazil, Canada, Japan, the UK and the US)
• 14 — Austria, Spain, Italy, Lithuania (and South Korea)
• 15 — Denmark, France, Greece, Slovenia
• 16 — Germany, Ireland, Liechtenstein, Luxembourg, the Netherlands

Where we cannot establish the local rule, we use 16 — the most protective answer available.

When consent is required, the adult creating the profile gives it on the add-learner form, signing with their own name. If a learner started on their own device instead, their account stays locked until a guardian approves it — from an emailed approval page, or by scanning the QR code Epivo shows in the app.

For a learner's profile, Epivo stores:

• Their name and date of birth (a parent creating the profile enters a first name, an optional last name, and a date of birth; a learner starting on their own gives a name and an age in conversation)
• Learning progress and mastery levels
• Session transcripts (text, not audio)
• Course enrolments and preferences
• Facts the learner volunteers about themselves, so the tutor can refer back to them in later sessions
• An approximate country and timezone, derived from the network connection

The country matters because it decides which consent rule above applies, and the timezone decides when a daily limit resets. We do not collect email addresses, photos, or precise or GPS location from children. A parent can see all of it and delete it.

The Children's Online Privacy Protection Act (COPPA) sets rules for collecting data from children under 13 in the US. Epivo's approach is to:

• Require a guardian's consent, recorded on a signed consent form, before a learner whose stated age is below their local threshold can carry on
• Collect only the minimum data the lesson needs
• Give parents full access to review and delete their child's data at any time

For more details, see our privacy policy. If you have questions about how we record consent, write to privacy@epivo.ai.