Your account (parent) — if saved with an email
- Your email address and your name.
- If you registered with a password, it is stored hashed — it cannot be extracted and we never see it.
- If you signed in with Google, we hold no password at all.
Privacy Policy
What we know about your child: almost nothing
Last updated: 17 September 2026
A family account without email
The first time the app is opened with an internet connection, we create a family account with no email and no name. It has a six-digit number shown in the parent corner. It holds a random number for the device, your child's name if you type it, their progress in the lessons, and your subscription status if you subscribe. We store no email address, no parent name and no payment details. You can delete all of it from "My account and data → Delete family data". An account left unused for a long time, with no progress and no subscription, may be deleted.
What we collect
The complete list — nothing hidden behind it.
Your child's profile
- Their name only — and it may be a nickname.
- Call them "Champion" if you like; we do not verify it and we never ask for proof.
Your child's learning
- For each letter and each skill (recognition · listening · writing) we store: the grade reached, the number of questions, the number of mistakes, and the date.
- This is exactly what you see in your child's report — we store nothing about them that you cannot see.
- Shown to you alone.
What you upload for your child
- Your voice messages and gift images.
- Stored on our server until you delete them or delete your account.
Microphone
- Used only in the parent app, so you can record your own voice for your child to hear instead of the app's voice.
- Recording starts only when you tap it, and it never runs in child mode.
- Recordings are uploaded to your account so they reach your child's device.
A number for this device
- We generate it randomly on first launch and send it with every request to our server, so we know how many devices are active on your account (device limit).
- It is created by us, not read from the device, it does not identify you or your child, it is never used for tracking or advertising, and we share it with no one.
- It disappears when the app is uninstalled.
What we never collect
These are not statements of intent — they are things that do not exist in the app.
Your child's age
- We never ask and never store it.
- Difficulty adapts from your child's own performance.
- We simply state that Rushda is for ages 3–10 and let you decide.
Your child's gender
- We never ask and never store it.
Your child's photo
- Never requested, never uploaded, never stored.
Nothing else either
- No email, phone number, address, location, or any document or proof for your child.
What the app never does
No advertising
- Not one ad, and no advertising identifier.
No tracking
- No analytics library and no crash-reporting library inside the app.
- The app does report to us automatically whether lesson files downloaded successfully (how many of the expected files arrived, and the app version) so we know lessons reach children intact.
- This report contains nothing about your child.
No selling data
- Our revenue is the subscription alone.
Nobody talks to your child
- No stranger chat, no open community.
- Your child communicates only with their own family.
No way out
- No external links on your child's screens.
Where data is stored and who sees it
Our main server is inside the European Union. We rely on four technical providers and no others.
Hosting
- Stores the database and the files you upload.
Cloudflare
- Stores the lesson files (letter sounds and images) and delivers them to your child's device.
- Site and app traffic passes through it as a security and speed layer.
- The lesson files are not your child's data — they are the educational content itself, identical for every child.
Google Sign-In
- Only if you choose it.
- Google verifies your identity and gives us your email and name, nothing more.
Sign in with Apple
- Only if you choose it — available on iPhone and iPad.
- Apple verifies your identity and gives us your email and name, nothing more.
International data transfers
Why your data may travel
Rushda is available worldwide, and Cloudflare's network serves you from the location nearest to you so the app stays fast and secure. This means your data may pass through locations outside your country or outside the European Union while in transit — encrypted at every step.
Under what agreement
Such transfers are governed by a data processing agreement incorporating the European Commission's Standard Contractual Clauses.
Legal basis for processing
Performance of a contract
- Your account, your subscription, and storing your child's progress.
Your consent as the parent or guardian
- For everything relating to your child.
- Your child does not create an account, enter an email, or pay — they only play. The name shown to them is typed by you, and it may be a nickname.
- Everything beyond playing — subscription, settings and account data — sits behind the Parents corner gate, protected by two arithmetic questions an adult answers.
- When you save the account with your email or subscribe, you do that yourself — and that is your consent as the parent or guardian.
Wherever you are in the world
We apply the highest standard of protection to every user, regardless of country.
European Union and United Kingdom
- The GDPR / UK GDPR applies to all of our users, not only European ones, because Rushda's operator is established in Italy.
- For UK users the Age Appropriate Design Code (Children's Code) also applies — and Rushda is built to the most privacy-protective settings by default.
United States
- We comply with the Children's Online Privacy Protection Act (COPPA).
- We collect no data from a child without their parent's consent.
- We never use a child's data for advertising and never show them advertising.
- A parent may review or delete their child's data at any time.
Everywhere else
- We apply the same rules and respect the rights granted by your local law (including Saudi Arabia's PDPL, Egypt's data protection law, Brazil's LGPD, and Canada's PIPEDA).
Your rights
You may access, correct, delete, and port your data, and withdraw your consent, at any time.
Export your data
- Parent app → ⋮ → My account and data → "Copy" — copies everything we hold to your device clipboard, so you can paste it anywhere.
Delete your account
- Parent app → ⋮ → My account and data → "Delete my account", or via our account deletion page.
- If the account was never saved with an email: My account and data → "Delete family data".
Response time
- We respond to any request within 30 days.
- You also have the right to lodge a complaint with your national data protection authority — in Italy, the Garante per la protezione dei dati personali.
How long we keep data
Account and progress data
- As long as the account exists.
After a deletion request
- 30 days grace period, then permanent deletion.
Your voice messages and gift images
- Until you delete them, or with the account.
Session and device-link tokens
- Expire automatically and are deleted.
Data on your child's device
- Deleted immediately when the app is uninstalled.
Who operates Rushda and how to reach us
The operator
Rushda is operated by its owner in a personal capacity, based in Italy. There is no intermediary company and no third party managing your data.
Email: rushdakids@gmail.com
Use it to request access to your data, correct it, delete it, or withdraw your consent.
Changes to this policy
You are told before it applies
We update this page whenever what we collect changes, and we notify you of any material change by email to your registered address before it takes effect.