Privacy Policy

Draft for legal review — last updated October 2026

This document is a pre-launch draft. It describes how GLOW is actually built and operated, but it has not yet been finalised by counsel. It will be replaced before public launch.

Who we are

GLOW (“Global Learning On Web”) is a learning platform for children operated from Australia. Parents hold the account; children use the platform under a parent-issued invite.

What we collect

  • From parents: email address, password (hashed), billing details (processed by our payment provider; we never store card numbers).
  • From children: a first name or nickname, an age band, learning activity (answers, sessions, creations), and conversation text with the tutor. Never an email, phone number, or precise location.
  • No voice or other audio. GLOW has no microphone and never records or receives audio. A child who would rather talk than type can use the dictation key on their device's own keyboard: that is the device or keyboard maker's service, under its own terms, not ours, and only the resulting text reaches GLOW, like a typed message.
  • Technical: standard server logs and error reports. Chat content is excluded from error reports by code.

How we use it

  • To run the platform: tutoring, mastery tracking, parent reporting.
  • To keep children safe: safety filtering and flag review by the child's own parent.
  • To operate the business: billing, support, aggregate service health.

We do not sell personal data. We do not show advertising.

Who processes it

We use a small set of processors to run GLOW: cloud hosting, managed databases, an AI model provider for tutoring and moderation, OpenAI's image service (which receives the description of a picture a child asks for, and draws it), OpenAI's speech service (which receives the words GLOW reads aloud to a child, and turns them into a voice), a payment processor, and an email delivery service. Each receives only what its function requires. The current list is available on request.

Your rights

  • Export: in the parent console (Settings, “Your family's data”) a parent can download everything we hold about the family as one file: profiles, conversations, lessons and other activity, writing and uploads, things the children made, learning progress, consent records, devices and spend records, with a readable summary. Passwords and sign-in tokens are left out. The download link lasts ten minutes and the file is not kept on our side.
  • Deleting a child's data: done from the same page. Straight away, the child can no longer sign in or use GLOW, and their profile and every record about them in our main database are deleted. Their learning progress, held in a separate progress service, is deleted in the same step; if that service is unavailable, we keep retrying automatically and the page shows the request as pending until it confirms.
  • Deleting the family account: done from the same page after re-entering your password. Every parent is signed out and every child's device stops working at once, and all of the family's records are deleted as above, including the parent accounts.
  • What is not instant: our database backups keep a rolling history for a limited window, and a deleted child or family stays in that history until it ages out. We keep a one-way fingerprint of each deleted child and family (not their name or any record), so a backup is never restored with them in it. We also keep a record that a deletion happened, with its dates. Copies held by our service providers (the AI model provider, the image service, email delivery and error reporting) follow those providers' own retention periods, and server logs, which can contain account identifiers but not conversation text, expire on their own schedule. If you turned on product analytics, contact us to remove that data too.
  • Correction and access: contact us and we'll help.

Children's privacy

Children's data is covered in detail in our Children's Privacy Notice, written to satisfy COPPA's direct-notice requirements.

Contact

Privacy questions: privacy@ this product's launch domain (final address published at launch).