Your account (parent)
- Your email address and your name.
- If you registered with a password, it is stored hashed — it cannot be extracted and we never see it.
- If you signed in with Google, we hold no password at all.
Privacy Policy
What we know about your child: almost nothing
Last updated: 15 August 2026
What we collect
The complete list — nothing hidden behind it.
Your child's profile
- Their name only — and it may be a nickname.
- Call them "Champion" if you like; we do not verify it and we never ask for proof.
Your child's learning
- For each letter and each skill (recognition · listening · writing) we store: the grade reached, the number of questions, the number of mistakes, and the date.
- This is exactly what you see in your child's report — we store nothing about them that you cannot see.
- Shown to you alone.
What you upload for your child
- Your voice messages and gift images.
- Stored on our server until you delete them or delete your account.
Microphone
- Used only in the parent app, so you can record your own voice for your child to hear instead of the app's voice.
- Recording starts only when you tap it, and it never runs in child mode.
- Recordings are uploaded to your account so they reach your child's device.
A number for this device
- We generate it randomly on first launch and send it with every request to our server, so we know how many devices are active on your account (device limit).
- It is created by us, not read from the device, it does not identify you or your child, it is never used for tracking or advertising, and we share it with no one.
- It disappears when the app is uninstalled.
What we never collect
These are not statements of intent — they are things that do not exist in the app.
Your child's age
- We never ask and never store it.
- Difficulty adapts from your child's own performance.
- We simply state that Rushda is for ages 3–7 and let you decide.
Your child's gender
- We never ask and never store it.
Your child's photo
- Never requested, never uploaded, never stored.
Nothing else either
- No email, phone number, address, location, or any document or proof for your child.
What the app never does
No advertising
- Not one ad, and no advertising identifier.
No tracking
- No analytics library and no crash-reporting library inside the app.
- The app does report to us automatically whether lesson files downloaded successfully (how many of the expected files arrived, and the app version) so we know lessons reach children intact.
- This report contains nothing about your child.
No selling data
- Our revenue is the subscription alone.
Nobody talks to your child
- No stranger chat, no open community.
- Your child communicates only with their own family.
No way out
- No external links on your child's screens.
Where data is stored and who sees it
Our main server is inside the European Union. We rely on three technical providers and no others.
Hosting
- Stores the database and the files you upload.
Cloudflare
- Stores the lesson files (letter sounds and images) and delivers them to your child's device.
- Site and app traffic passes through it as a security and speed layer.
- The lesson files are not your child's data — they are the educational content itself, identical for every child.
Google Sign-In
- Only if you choose it.
- Google verifies your identity and gives us your email and name, nothing more.
International data transfers
Why your data may travel
Rushda is available worldwide, and Cloudflare's network serves you from the location nearest to you so the app stays fast and secure. This means your data may pass through locations outside your country or outside the European Union while in transit — encrypted at every step.
Under what agreement
Such transfers are governed by a data processing agreement incorporating the European Commission's Standard Contractual Clauses.
Legal basis for processing
Performance of a contract
- Your account, your subscription, and storing your child's progress.
Your consent as the parent or guardian
- For everything relating to your child.
- Your child cannot create an account. The account is yours, and their device is linked with a code that you enter once.
- This constitutes the verifiable parental consent required by children's privacy law.
Wherever you are in the world
We apply the highest standard of protection to every user, regardless of country.
European Union and United Kingdom
- The GDPR / UK GDPR applies to all of our users, not only European ones, because Rushda's operator is established in Italy.
- For UK users the Age Appropriate Design Code (Children's Code) also applies — and Rushda is built to the most privacy-protective settings by default.
United States
- We comply with the Children's Online Privacy Protection Act (COPPA).
- We collect no data from a child without their parent's consent.
- We never use a child's data for advertising and never show them advertising.
- A parent may review or delete their child's data at any time.
Everywhere else
- We apply the same rules and respect the rights granted by your local law (including Saudi Arabia's PDPL, Egypt's data protection law, Brazil's LGPD, and Canada's PIPEDA).
Your rights
You may access, correct, delete, and port your data, and withdraw your consent, at any time.
Export your data
- Parent app → ⋮ → My account and data → "Copy" — copies everything we hold to your device clipboard, so you can paste it anywhere.
Delete your account
- Parent app → ⋮ → My account and data → "Delete my account", or via our account deletion page.
Response time
- We respond to any request within 30 days.
- You also have the right to lodge a complaint with your national data protection authority — in Italy, the Garante per la protezione dei dati personali.
How long we keep data
Account and progress data
- As long as the account exists.
After a deletion request
- 30 days grace period, then permanent deletion.
Your voice messages and gift images
- Until you delete them, or with the account.
Session and device-link tokens
- Expire automatically and are deleted.
Data on your child's device
- Deleted immediately when the app is uninstalled.
Who operates Rushda and how to reach us
The operator
Rushda is operated by its owner in a personal capacity, based in Italy. There is no intermediary company and no third party managing your data.
Email: rushdakids@gmail.com
Use it to request access to your data, correct it, delete it, or withdraw your consent.
Changes to this policy
You are told before it applies
We update this page whenever what we collect changes, and we notify you of any material change by email to your registered address before it takes effect.