Privacy

What we store about you

• Your email address and your name.
• A one-way hash of your password. Nobody can read the password itself, including us, which is also why a lost password is replaced and never sent back to you.
• The time you confirmed that you are the parent or legal guardian, and which version of the terms you accepted.
• When you last signed in, and one record for each browser or app that is signed in right now.
• An internal log of changes to your account and your kids' settings. It holds no names, no free text and no addresses, the site's regular clean-up deletes entries older than 365 days, and the entries about a kid are deleted with the kid.

The Emetli app on iPhone and iPad

The app needs no account. Your parent PIN, what your kid has read, the minutes they have saved and your settings stay on the device. The apps you choose to block are kept by Apple's Screen Time as tokens that only the device can read; they never leave it, not even to us.

• Stories, STEM articles and covers are downloaded without any account, id or age: a request names only the title it wants, the language and the app's version. The app picks what suits your kid's age on the device.
• The video list is downloaded the same way, with one addition: your kid's age, so we send back only the videos for that age. We use it to pick the videos and keep nothing: it is not logged or stored.
• When your kid holds a finger on a word to have it explained, the app sends that word, its sentence, the title and the language. We ask OpenAI to explain the word for a child and send the answer back. Nothing about your kid or the device goes with it, and the text is not logged.
• When you write to us from the help button in the parent area, we keep your name, email address and message so we can answer you by email. Ask us and we delete them.
• The app sends Google Analytics for Firebase anonymous usage statistics: which screens are opened, which steps of setup are finished, and which stories and videos are used, with counts, the device model and iOS version, and a random id that belongs to that install. Google works out an approximate country from the connection. It never gets a name, your kid's age, anything typed or an advertising id.
• We use these statistics only for the app's internal operations, as the US Children's Online Privacy Protection Act (COPPA) allows without a parent's consent: to see which parts of the app work and where it breaks or confuses, so we can fix and improve it. The random id is never used to contact anyone, to build a profile of a child or a family, or for advertising, and we look only at totals, never at one install. Google may use the statistics only to provide this service to us.
• On a device in the European Economic Area, the United Kingdom or Switzerland the statistics are off until you switch on “Share usage data”. Everywhere else they are on until you switch it off. The switch is on the last screen of setup and in the parent area. Switching it off stops the statistics and deletes the random id; resetting the app deletes it too.
• We advertise Emetli on Facebook and Instagram. To learn which ads bring families to the app, it tells Meta when it is installed and when setup is finished, with the device model, iOS version and a random id that Meta's software keeps for that install. Apple also tells Meta when an install came from one of its ads, without naming the device. This happens only while a parent sets the app up: once setup is done the app sends Meta nothing, so nothing your kid does reaches Meta. It never sends a name, your kid's age, anything typed or an advertising id, and it never asks to track you across other apps.
• Meta uses this to measure our ads, under Meta's Privacy Policy. It follows the same “Share usage data” switch as the statistics above: in the European Economic Area, the United Kingdom and Switzerland nothing goes to Meta unless you switch it on, and switching it off stops it everywhere.

What we don't do

• No advertising and no selling of data. These pages use Google Analytics to count visits and which features are used. It is set up to receive no names, email addresses, kid details, ids or anything you type: page addresses reach it with every id replaced, advertising features and Google signals are off, and it is not used for advertising. It sets its own cookies to tell visits apart.
• No IP address and no browser details are stored in any table. Limits on repeated sign-in attempts use keyed hashes that cannot be turned back into an address.
• No email is sent except our answer to a help request: no newsletters, no notifications, no reminders.
• Our own cookie, and only after you sign in. It keeps you signed in for up to 30 days, scripts cannot read it, and it is not used for tracking.

Who can see your family's data

You can. The administrator of this site can open a family's pages to help with a support question. That view is read-only, the administrator cannot change your kids' settings, and every such visit is written to the internal log.

Your kid's device receives the rules you set (blocking, ratio, topics, limits, quizzes on or off and time zone) and any bonus minutes or resets. It never receives your email, your password or anything about your other kids.

Deleting data

Family data stays until you delete it. You can remove a kid or delete your whole account at any time, also while an account is suspended. Both are permanent: the profile, reading history, bonus and reset history, device links and the internal log entries about that kid are deleted, not archived, and we cannot bring them back.

What is left afterwards identifies nobody:

• One log entry saying that a removal happened, with counts only and no name or id of the kid.
• A hash of each removed device link, kept for 180 days, so that Emetli on that device is told clearly that the link has ended.

Deleting data here does not unblock a device. Emetli stays on it with its current rules until you switch blocking off on the device or delete the app.

Who runs this site

Emetli is software that an operator runs on their own server. Two things are in the operator's hands rather than in the software's:

• Backups. Data you delete disappears from the live database at once, and from the operator's backups when those expire. Ask the operator how long they keep them.
• Server logs. The operator's web server must not record the query part or the fragment of addresses, because a password reset link carries its secret in the fragment. Nor may it record which book or STEM article Emetli asks for when it downloads a story, an article, a cover or a picture: next to the device's address, that would show what your kid reads.

Questions and requests

Write to support@emetli.com to ask what is stored about you or your kids, to correct it, or for help deleting it. The rules for using the site are in the terms.