Privacy Policy

1. Who we are

S.E.A. Space Academy is run by S.E.A. Space Academy, Trinidad and Tobago. Questions? Use the Help chat on our home page or message us on WhatsApp.

2. What information is used

We only use what the programme needs to teach and to show you your child’s progress:

• Parent account: your email address and a password you choose (the password is handled by our sign-in provider and stored only in hashed form; we never see it). You also choose a 4-digit parent PIN for the Parent area; it is stored only as a scrambled (salted and hashed) value.
• Child profile: your child’s first name (a nickname is fine), the avatar and theme they choose, and a 4-digit PIN (also stored only as a hashed value).
• Learning records: lessons finished, answers, scores, mastery levels, stars, badges, time spent, mock exam results and section scores.
• Reading records: read-aloud accuracy and words-per-minute (WPM) results, and which books and chapters were read.
• Writing: the stories, reports and written answers your child types, so you can read them in the parent report.

We do not ask for a child’s surname, email address, phone number, school, photo or exact location.

3. Where your information is kept

Your family’s information is stored in the cloud so your child can continue on any phone, tablet or computer. We use Supabase, a hosted database and sign-in service (servers in the United States), to keep:

• your parent account (email address and hashed password) and any password-reset emails it sends you;
• your children’s profiles (first name, avatar, hashed PIN);
• each child’s learning records and writing (one progress record per child);
• your hashed parent PIN.

Family-only access: the database uses row-level security, so a signed-in parent can only ever read or change their own family’s rows. Other families cannot see your information, and the app contains only a public key that cannot bypass these rules.

Device copy (fallback): the app also keeps a copy of your child’s progress in the web browser’s storage on the device being used. This lets your child keep working when the internet drops; the device copy is sent to the cloud when the connection returns, and the newer copy wins. Signing out removes the sign-in from that device.

4. Microphone and read-aloud

Read-aloud practice is optional. When your child taps the microphone, the app asks the browser for permission to listen. For the reading check, the app records a short clip while your child reads and sends it securely through our server to Google Gemini, which listens for the words (it is told the reader is a Trinidadian child, so local pronunciation is accepted). The clip is not stored by us after the check. If that service is unavailable, the browser’s own speech recognition is used instead.

Depending on the browser and device, the browser or operating system provider (for example Google for Chrome, or Apple for Safari and iPhone/iPad) may send the audio to its own service to turn speech into text. That processing is covered by their privacy policies, not ours. If you prefer, you can refuse microphone access; your child can tap “I read it aloud” instead and still continue.

5. Ask Ms. Maya (AI helper) and voice checking

Ask Ms. Maya is an optional AI study helper. When your child types or says a question, or uses the voice reading check, the question (and, for voice, a short audio recording) is sent securely to our own server (a Supabase Edge Function), which passes it to Google Gemini to produce a short, child-safe reply. Only the question and the recent chat turns needed for context are sent; never your child’s name, your email, password or payment details. Please remind your child not to type personal details. We do not keep the audio or the chat text on our server; we only count how many questions each child asks per day (to keep use fair, about 60 a day). Google processes the request under its own terms; on Google’s free service tier, Google may use requests to improve its products, which is another reason we never send names or contact details. Ms. Maya is a computer program, not a real person, and can make mistakes, so please check important answers. You can simply not use Ask Ms. Maya or the microphone.

6. What we do not do

• No advertising, and no ads shown to children.
• We do not sell, rent or trade anyone’s information.
• No third-party tracking, analytics or social-media pixels.
• No chat with strangers and no public profiles.

The narration voice is pre-recorded, computer-generated audio that is part of the app; playing it does not send your child’s information anywhere.

7. Children’s privacy

The programme is designed for children aged about 8 to 12 who are preparing for the Secondary Entrance Assessment. Children cannot create accounts on their own:

• a parent or guardian creates the account, adds each child and chooses what they see;
• by ticking the box at sign-up, the parent or guardian confirms they are the child’s parent or guardian and gives consent for the child to use the programme as described here;
• we never collect a child’s email address or contact details;
• the parent area is protected by the parent’s PIN, and you can remove a child’s profile at any time.

8. Seeing, exporting or deleting information

• See it: open Parents in the app and enter your parent PIN to view each child’s report card, scores and writing.
• Export it: in the parent report, use Export data to download a copy (a JSON file) or Print for a paper copy.
• Delete it: in the parent report you can reset a child’s progress or remove a child; removing a child deletes their profile and progress from the cloud. To close your whole account and delete everything we hold, use the Help chat on our home page or message us on WhatsApp. “Repair this device” clears only the saved app files on that device and keeps accounts and progress.

9. Security

Parents sign in with their email and a password, which our sign-in provider stores only as a hash. Child and parent PINs are stored only as salted hashes. The site sends strict security headers (HTTPS only, no framing, a content security policy), the app contains only a public key, and the AI helper key is kept on our server, never in the app. All traffic to the site and to the cloud database uses a secure (https) connection, and row-level security keeps each family’s data separate. No method of storage is perfect, so please keep your email account and devices locked and do not share the parent PIN with children.

10. How long information is kept

We keep your family’s information while your account is open. When you remove a child, that child’s profile and progress are deleted. When you ask us to close your account, we delete your account and all of your family’s information from the cloud within 30 days. The copy on a device stays until you sign out and clear the browser’s data.

11. Laws we follow

We aim to handle personal information in line with the Data Protection Act, 2011 of the Republic of Trinidad and Tobago and its general privacy principles, including collecting only what is needed, using it only for the stated purpose, keeping it secure and letting people access and correct it. For families outside Trinidad and Tobago, we aim to follow the principles of the United States Children’s Online Privacy Protection Act (COPPA) and the children’s provisions of the EU and UK GDPR (“GDPR-K”): parental consent, minimal data, no behavioural advertising and easy deletion.

12. Changes to this policy

If we change this policy, we will update the date at the top and, for important changes, show a notice in the app before the change takes effect.

13. Related documents

Please also read our Terms of Use and our Disclaimer, which explains that speech recognition and automatic checking can make mistakes and that the programme is independent of the Ministry of Education.

14. Contact

Questions? Use the Help chat on our home page or message us on WhatsApp.
S.E.A. Space Academy, Trinidad and Tobago.