GrowMindGrow Privacy Policy

Last revised: 2 September 2026

Parents and schools: section 2 is our privacy notice for children under 13. It sets out what we collect from a child, what we do with it, who receives it, and how you review or delete it. Where anything else in this policy differs from section 2, section 2 governs children's information.

We have tried to write this so that it describes what actually happens. Where something is not yet how we would like it, we say so rather than describing an intention as a practice.

1. What We Collect:

From adults:

When you register as a parent, a teacher or a school, we collect your name, email address and a protected form of your password. If you subscribe to Premium, our payment processor collects your card details and gives us a record of the subscription and its status; we do not store your full card number.

Automatically, from anybody who visits:

Like most websites we receive technical information when your browser connects: IP address, device and browser type, the pages you visited, when, for how long, and the page you arrived from. We use analytics services to understand how the site is used, and these set cookies and similar identifiers. We use this to fix problems and improve the product. We do not use it for advertising, and we do not sell or rent it.

Location:

We do not collect precise geolocation. We never ask your device for its location. An approximate region can be inferred from an IP address, as it can on any website, but we do not ask for, collect or store device location.

2. Children's Privacy — Our COPPA Notice:

GrowMindGrow is intended for children in preschool through grade 5. We treat the children who use it as being under 13, and we follow the Children's Online Privacy Protection Act. This section is our notice to parents, guardians and schools.

Who is responsible:

GrowMindGrow operates the Service and is responsible for children's personal information collected through it. For any question, request or complaint about a child's information, contact us at mydata@growmindgrow.com. That address is monitored for exactly this purpose, so please use it rather than a general support or sales channel.

What we collect from a child:

Account details — a nickname, and where a school creates the account, a first and last name. A child signs in with their own credentials, so we hold an email address and a protected form of a password for them.
Profile details — birthday, grade, gender, a chosen avatar, and a profile identifier that appears in the address bar while the child is signed in.
Family and emergency contacts — where a parent or school provides them: a contact's name, relationship to the child, email address and telephone number.
Notes — free text a parent, teacher or school chooses to record against the child's record.
What the child does in the games — which games were played, when and for how long, answers, scores, progress, in-game rewards, and, for a school-enrolled child, assignment results and attendance recorded by the school.
Technical information — the identifiers and usage information described in section 1. On our play site this includes a cookie-based identifier set by a third-party analytics provider.

We do not collect a child's photograph, voice or video, biometric identifiers, precise geolocation, or any government identifier. Children cannot upload files, cannot send or receive messages, and cannot see or contact other children. Messaging on GrowMindGrow exists only between adults. We ask a child only for what the Service needs in order to work, and we do not require a child to give us more than that in order to play.

How we use it:

We use a child's information to run the Service: to sign them in, to present and adapt the games, to keep their progress, and to show that progress to the parent or school responsible for them. We do not use children's information for advertising or marketing, we do not build profiles for those purposes, and we never sell or rent it.

Who we give it to:

We disclose children's information only to the service providers we need in order to run the Service — our hosting and email providers — and to the analytics provider described above on the play site, which receives a cookie identifier, IP address and device characteristics. We also disclose information where the law requires it, or where it is necessary to protect the safety of a child or another person. Our payment processor handles an adult's billing only and receives no children's information.

Where a school holds a child's record, that school can see the child's profile and school records. Where a parent holds it, the parent can. We do not otherwise share a child's information with anybody.

Your rights as a parent or guardian:

Review what we hold about your child — sign in and open My Children, or write to mydata@growmindgrow.com and we will provide it.
Correct anything that is wrong, from the same screen.
Delete it. For a child profile you created, deleting it from My Children removes the child's record and everything linked to it — profile, credentials, contacts, notes, game history, progress and reports. It happens immediately, and it cannot be undone.
Ask a school to delete a school-held record. Where a school created or holds your child's record, that record is the school's too, so we do not destroy a school's register on one guardian's instruction. Use “Ask their school to delete their data” in My Children. We record the request and put it in front of the school, and the school either completes it — which deletes the child's information at that moment — or declines it and must give you a reason, which we show you.
Refuse any further collection. You can tell us to stop collecting anything further from your child while keeping the account, or close it outright. Write to mydata@growmindgrow.com. Refusing further collection stops most of the Service working for that child, because what the games record is what lets them adapt.

None of this costs anything, and we will not close or restrict your account because you exercised it.

Accounts created by schools:

Where a school enrols its pupils, the school tells us it is authorized to do so on the parents' behalf for an educational purpose, and we act on that. Information collected on the school pathway is used only to provide the Service to that school, for the educational purpose it was given for, and for no commercial purpose of our own. A parent may use the deletion request above, and may also raise it directly with the school.

3. How We Use Adults' Information:

This section is about parents, guardians, teachers and school staff. What we do with a child's information is limited to section 2.

We use your information to operate your account, provide the Service, take payment for a subscription, respond when you contact us, send service messages such as receipts, security notices and changes to this policy, and to understand and improve how the product is used. Where you have asked to hear from us, we send newsletters and product news, and you can stop those at any time from the link in the message.

We do not sell or rent personal information, and we do not combine it with information bought from data brokers or other third parties.

4. Who We Share Information With:

Service providers who run parts of the Service for us — hosting, email delivery, payment processing and analytics. They may use it only to provide that service to us.
Where the law requires it, or to respond to a lawful request, or to protect the rights or safety of GrowMindGrow, our users, or the public.
A school, for the pupils enrolled under its account.
A buyer, if the business is sold or reorganised. If that happens the information stays subject to a policy no less protective than this one, and we will say so before it takes effect.

We may publish statistics that cannot identify anybody, such as how many people use the Service. Children's personal information is never included in any such disclosure.

5. How Long We Keep Information:

We keep personal information only as long as it is needed for the purposes above, and we delete it when you ask us to. In practice, today, that means:

A child's profile, credentials, contacts, notes, game history and progress are held to run the account and show progress to the responsible adult. They are deleted — permanently, and together in a single step — as soon as a parent deletes the profile, or a school completes a parent's deletion request.
School records such as attendance and assignment results are held for the school's record-keeping while the pupil's record exists, and go with it when it is deleted.
An adult's account information is held while the account is active, and afterwards only as long as needed to meet a legal obligation, resolve a dispute, or enforce our agreements.
Billing and transaction records are kept as financial records for as long as tax and accounting law requires, after an account is closed. They concern the adult account holder and contain no children's information.
A record that a deletion request was made and how it was resolved is kept after the child's information has gone, so that a parent and a school can each show what was asked and what was done. It deliberately holds no name, nickname, profile identifier, email address or birthday.

We would rather be exact than imply more than we do: we do not currently delete information automatically after a fixed period of inactivity or after an account is closed. Deletion happens when it is asked for, by the routes in section 2, and it is immediate and complete when it does. We are setting fixed retention periods and will state them here when they take effect. Until then, if you want information removed, ask us and we will remove it.

6. How We Protect Information:

We use technical and organisational measures designed to protect personal information, including encryption in transit, protected storage of credentials, and access limited to those who need it. No service can promise perfect security, and we do not. If a breach affects your information or your child's, we will tell you and the relevant authorities as the law requires.

7. Your Choices and Rights:

You can review and change your account information, and your children's, from within your account, and close your account at any time. To ask for a copy of your information, to correct it, or to have it deleted, write to mydata@growmindgrow.com.

Depending on where you live you may have additional rights — to access, correct, delete or port your information, to object to or restrict how we use it, and to complain to your data protection authority. Users in the European Economic Area and the United Kingdom have these rights under the GDPR. Users in Canada have rights under PIPEDA. Users in California and other US states with privacy laws have rights of access and deletion, and a right not to be discriminated against for using them. We do not sell personal information, so there is nothing to opt out of. We will not charge you for exercising any of these rights, and we do not require you to give a reason.

8. International Transfers:

We operate from the United States, and information you give us is processed there. If you are outside the United States, you should know that the laws where we process your information may differ from those where you live. Where the law requires a transfer safeguard, we put an appropriate one in place.

9. Changes to This Policy:

We may update this policy. When we do, we change the “last revised” date at the top and post the new version here. If a change materially affects information already collected from a child, we will notify the parent or school responsible for that child directly, and where the law requires it we will obtain consent before the change takes effect.

10. Contact Us:

For anything about personal information, yours or your child's, write to mydata@growmindgrow.com. For anything else, hello@growmindgrow.com.