What we know about your child: almost nothing

Last updated: 21 October 2026

A family account without email

The first time the app is opened with an internet connection, we create a family account with no email and no name. It has a six-digit number shown in the parent corner. It holds a random number for the device, your child's name if you type it, their progress in the lessons, and your subscription status if you subscribe. We store no email address, no parent name and no payment details. You can delete all of it from the parent corner: "My account" → "My account and data" → "Delete". An account left unused for a long time, with no progress and no subscription, may be deleted.

What we collect

The complete list — nothing hidden behind it.

Your account (parent) — if saved with an email

Your email address and your name.
If you registered with a password, it is stored hashed — it cannot be extracted and we never see it.
If you signed in with Google, we hold no password at all.

Your child's profile

Their name only — and it may be a nickname.
Call them "Champion" if you like; we do not verify it and we never ask for proof.

Your child's learning

For each letter and each skill (recognition · listening · writing) we store: the grade reached, the number of questions, the number of mistakes, and the date.
This is exactly what you see in your child's report — we store nothing about them that you cannot see.
Shown to you alone.

What you upload for your child

Gift images.
Stored on our server until you delete them or delete your account.

Microphone

The app does not use the microphone and does not ask for microphone permission.
In earlier versions, the parent app could record the parent's voice for their child to hear, only when the parent tapped record, and never in child mode.
Anything recorded then stays in your account until you delete it or delete your account, and we delete it on request by email.

Your conversations with the assistant

Your questions to the Rushda assistant and its answers, and the Rushda team's replies to you in the same conversation.
Support messages you send, with a small technical log about the device that contains no child name and no personal data.
Stored on our server so our team can reply to you and improve the answers; deleted on request by email.

Survey answers — optional

If you answer a survey in the parent corner, we store what you wrote to improve Rushda.
Answering is optional, it is written by you, and your child is never asked.

A number for this device

We generate it randomly on first launch and send it with every request to our server, so we know how many devices are active on your account (device limit).
It is created by us, not read from the device, it does not identify you or your child, it is never used for tracking or advertising, and we share it with no one.
It disappears when the app is uninstalled.

What we never collect

These are not statements of intent — they are things that do not exist in the app.

Your child's age

We never ask and never store it.
Difficulty adapts from your child's own performance.
We simply state that Rushda is for ages 3–10 and let you decide.

Your child's gender

We never ask and never store it.

Your child's photo

Never requested, never uploaded, never stored.

Nothing else either

No email, phone number, address, location, or any document or proof for your child.

What the app never does

No advertising

Not one ad, and no advertising identifier.

No tracking

No analytics library and no crash-reporting library inside the app.
The app does report to us automatically whether lesson files downloaded successfully (how many of the expected files arrived, and the app version) so we know lessons reach children intact.
This report contains nothing about your child.

No selling data

Our revenue is the subscription alone.

Nobody talks to your child

No stranger chat, no open community.
Your child communicates with no one inside the app; what reaches them from you is your gifts alone.

No way out

No external links on your child's screens.

Where data is stored and who sees it

Our main server is inside the European Union. These are all the technical providers we rely on — no others.

Hosting

Stores the database and the files you upload.

Cloudflare

Stores the lesson files (letter sounds and images) and delivers them to your child's device.
Site and app traffic passes through it as a security and speed layer.
The lesson files are not your child's data — they are the educational content itself, identical for every child.

Google Sign-In

Only if you choose it.
Google verifies your identity and gives us your email and name, nothing more.

Sign in with Apple

Only if you choose it — available on iPhone and iPad.
Apple verifies your identity and gives us your email and name, nothing more.

AI provider

Anthropic, or OpenAI if we choose it instead — one of them at any time.
Writes the Rushda assistant's answers and your child's reports, and processes what it receives on our behalf for that purpose only.
It receives the text of your question, your child's learning figures (letters and grades), and the grammatical gender used when speaking about them.
It never receives your child's name, your email, your account number or anything that identifies either of you: the name is replaced with a placeholder before sending, and we put it back in the answer on our side.

International data transfers

Why your data may travel

Rushda is available worldwide, and Cloudflare's network serves you from the location nearest to you so the app stays fast and secure. This means your data may pass through locations outside your country or outside the European Union while in transit — encrypted at every step. Our AI provider is in the United States, so the data described above is transferred to it — without names or identity — encrypted.

Under what agreement

Such transfers are governed by a data processing agreement incorporating the European Commission's Standard Contractual Clauses.

Legal basis for processing

Performance of a contract

Your account, your subscription, storing your child's progress, and the Rushda assistant's answers and the reports about your child that you receive.

Your consent as the parent or guardian

For everything relating to your child.
Your child does not create an account, enter an email, or pay — they only play. The name shown to them is typed by you, and it may be a nickname.
Everything beyond playing — subscription, settings and account data — sits behind the Parents corner gate, protected by an arithmetic question an adult answers.
When you save the account with your email or subscribe, you do that yourself — and that is your consent as the parent or guardian.
Survey answers are given with your consent: they are stored only if you choose to answer.

Wherever you are in the world

We apply the highest standard of protection to every user, regardless of country.

European Union and United Kingdom

The GDPR / UK GDPR applies to all of our users, not only European ones, because Rushda's operator is established in Italy.
For UK users the Age Appropriate Design Code (Children's Code) also applies — and Rushda is built to the most privacy-protective settings by default.

United States

We comply with the Children's Online Privacy Protection Act (COPPA).
We collect no data from a child without their parent's consent.
We never use a child's data for advertising and never show them advertising.
A parent may review or delete their child's data at any time.

Everywhere else

We apply the same rules and respect the rights granted by your local law (including Saudi Arabia's PDPL, Egypt's data protection law, Brazil's LGPD, and Canada's PIPEDA).

Your rights

You may access, correct, delete, and port your data, and withdraw your consent, at any time.

Export your data

Parent corner → "My account" → "My account and data" → "Copy" — copies your account, your children and their progress to your device clipboard, so you can paste it anywhere.

Delete your account

Parent corner → "My account" → "My account and data" → "Delete", or via our account deletion page.
For a family without email: type the confirmation word, then "Delete the data".

Response time

We respond to any request within 30 days.
You also have the right to lodge a complaint with your national data protection authority — in Italy, the Garante per la protezione dei dati personali.

How long we keep data

Account and progress data

As long as the account exists.

After a deletion request

30 days grace period, then permanent deletion.

Gift images, and recordings from earlier versions

Until you delete them, or with the account.

Assistant conversations, support messages and survey answers

Until you ask us by email to delete them.

Session and device-link tokens

Expire automatically and are deleted.

Data on your child's device

Deleted immediately when the app is uninstalled.

Who operates Rushda and how to reach us

The operator

Rushda is operated by its owner in a personal capacity, based in Italy. There is no intermediary company and no third party managing your data.

Email: rushdakids@gmail.com

Use it to request access to your data, correct it, delete it, or withdraw your consent.

Changes to this policy

You are told before it applies

We update this page whenever what we collect changes, and we notify you of any material change by email to your registered address before it takes effect.