Children's Privacy Notice

Draft for legal review — last updated October 2026

This document is a pre-launch draft. It describes how GLOW is actually built and operated, but it has not yet been finalised by counsel. It will be replaced before public launch.

The short version, for parents

You create your child's profile and control it completely. Your child never gives us an email address or password. We collect only what tutoring requires — their messages to the tutor, their answers, and their creations. You can read all of it at any time, download all of it, and delete it yourself from the parent console.

What we collect from children

  • A display name or nickname and an age band, both entered by you.
  • Conversation text between your child and the tutor.
  • Learning records: practice answers, quiz results, mastery evidence.
  • Creations they choose to save: pictures, stories, small apps.
  • Photos of written work or of a test or report, when they choose to upload one. A writing photo is kept with that draft; a test or report photo is discarded once the results are confirmed.

We do not collect from children: email addresses, phone numbers, photos of themselves, recordings of their voice, precise location, contacts, or anything for advertising.

GLOW has no microphone and never records or receives audio. If your child would rather talk than type, they can use the dictation key on their device's own keyboard. That is the device or keyboard maker's service, under its own terms, not ours; only the resulting text reaches GLOW, exactly as if it had been typed.

How it is used

  • To tutor: messages are processed by our AI model provider to generate teaching responses.
  • To draw pictures: when your child asks for a picture, its description is sent to OpenAI's image service to be drawn, and our AI model provider checks the picture before your child sees it.
  • To read aloud: when GLOW reads to your child, the words GLOW is saying (its replies, and lesson and story text) are sent to OpenAI's speech service to be turned into a voice. Your child's own voice is never recorded or sent anywhere.
  • To keep them safe: every message passes safety filtering; flagged items are shown to you.
  • To track mastery: answers become progress records you can see.

Children's data is never used for advertising, never sold, and never shared beyond the processors needed to run the service.

Parental consent and control

  • Creating a child profile requires an attestation that you are the child's parent or legal guardian.
  • You can review every conversation in the parent console.
  • You can revoke access instantly (per-device or household-wide).
  • You can download everything we hold about your family as one file, with a readable summary.
  • You can delete a child's data, or the whole family account, yourself. Your child's access ends at once and their records in our main database are deleted at once. Their learning progress, kept in a separate progress service, is deleted in the same step, or as soon as that service answers; the parent console shows it as pending until then.

What happens after deletion

  • Our database backups keep a rolling history for a limited window. A deleted child stays in that history until it ages out, and is never restored from it: we keep only a one-way fingerprint of the deleted child, which stops a restore bringing them back.
  • We keep a record that the deletion happened and when, without the child's name or records.
  • Messages already sent to our AI model provider, picture descriptions already sent to OpenAI's image service, words already sent to OpenAI's speech service to be read aloud, and error reports follow those providers' own retention periods.

Contact

Questions about your child's data: privacy@ this product's launch domain (final address published at launch).