Last Updated: October 29, 2026
Welcome to Elysian Minds Innovations Limited ("Elysian Minds," "we," "us," "our," or the "Company"). We are committed to protecting the privacy of our users, especially the children who use our educational platform.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platform designed for children aged 7-12. We operate on a parent-child model where parents (guardians) create and manage accounts for their children (students).
Please read this Privacy Policy carefully. By using our Service, you agree to the collection and use of information in accordance with this policy.
When a parent, guardian or teacher creates an account, we collect the following information:
| Data Type | Required | Purpose |
|---|---|---|
| Email Address | Yes | Account identifier, sign-in, and communications for email-based accounts. An account may instead be created and secured with a phone number, in which case an email address may not be collected. |
| Full Name | Yes | Account personalization and communications |
| Account Type | Yes | Whether the account belongs to a parent or a teacher. It decides which packages we offer you and is shared with our CRM (Section 4.8). |
| Password | Conditional (hashed) | Account security and sign-in for email-based accounts. Phone-based accounts are passwordless and no password is stored. |
| Country | Yes | Localization, legal compliance, and tax purposes |
| Phone Number | Conditional | Account identifier and sign-in for phone-based accounts, and delivery of our parent messages over WhatsApp (with SMS as a fallback), covering one-time login and verification codes as well as account, billing, trial and re-engagement messages. Required for phone-based accounts; may otherwise be provided as a contact method. |
| Language | Yes | Language preference (the Service is currently available in English) |
| Timezone | Yes | Proper time display and scheduling |
When a parent creates an account for their child, or a teacher creates one for a student, we collect the following information:
| Data Type | Required | Purpose |
|---|---|---|
| Username | Yes | Account identification and login |
| Password | Conditional (hashed) | Sign-in with the child's own password, which a parent can turn off |
| First Name | Yes | Showing the child's name in the app, in the voice greeting, and on the leaderboard and activity feed (Section 5.3). We ask for a first name only and do not collect a child's surname. |
| Date of Birth | Yes | Age-appropriate content delivery (7-12 years) |
| Curriculum | Yes | Educational content alignment (UK National Curriculum or United States state standards) |
| School Year | Yes | Placing the student in the correct school year for the selected curriculum (UK Years 3-8 or US Grades 2-7), derived from date of birth |
We automatically collect the following data as students use the platform:
To provide personalization features, we collect:
To run your subscription, we store:
We never see or store your full card details. You enter them on Stripe's own checkout page, and Stripe, our PCI-compliant payment processor, stores them.
When you use our Service, we may automatically collect:
When students use the AI chatbot assistant, we collect:
Chatbot conversation sessions are held in a temporary cache in our chatbot service for about 15 minutes and then removed. Before a child's message goes anywhere, we check it on our own servers for length, offensive language, email addresses, phone numbers, US social security numbers and attempts to manipulate the assistant; a message that fails these checks is blocked and never sent to any outside service. A message that passes is checked by OpenAI's moderation service for hate, harassment, self-harm, sexual and violent content, and only a message that passes that check too is sent to OpenAI to be answered. The checks do not detect names, home addresses or school names, so please remind your child not to share them. When a message is flagged for safety, for example a sign that a child may be at risk, we keep the message, the tutor's reply and the student's account ID as a safety record for 90 days so our staff can review it, with email addresses and phone numbers removed. When a student uses Report a problem, the note they write and the reply they reported are kept the same way. We keep a record longer only while a safeguarding case about it is open, and we delete these records when the student account is deleted. A serious flag alerts our staff straight away, and they decide whether to contact the parent; the child is encouraged to talk to a grown-up they trust. Chatbot data is used only to help the student learn and to keep them safe, and every reply passes through age-appropriate safety filters before the student sees it.
To provide personalized audio greetings, we process:
Voice greetings are generated through a third-party voice synthesis service (ElevenLabs) and stored on our infrastructure for playback. The audio files are deleted when the student account is deleted.
When you contact us through our support system, we collect:
Support data is used for responding to your inquiries and follow-up communications. Confirmation and closure emails are sent to the provided email address.
Our platform includes a virtual coin economy. We track:
Each coin transaction is deleted 12 months after it is made. A child's current coin balance and the items they own are kept while the account exists.
We store push subscription data on two separate tracks. On the parent track, when a parent allows notifications in their own browser so we can tell them about their family's progress. On the student track, when a parent has allowed learning reminders and the student then turns notifications on for their device. For each subscribing device we collect and store:
This information exists only to deliver notifications to that specific device. The two tracks are stored separately, so a parent and a student can use the same physical device without one affecting the other. Notification contents are encrypted in transit, and the push delivery services that relay them (see Section 4) cannot read them. The student track is off by default, a parent can withdraw it at any time, and turning notifications off on either track deletes the stored subscription for that device.
We occasionally ask how things are going. Answering is always optional and skipping it changes nothing about the Service. We store:
Neither prompt accepts free text, so a child cannot type anything into it and nothing a child writes is collected here. A parent's rating may be attached to their contact record in our CRM (see Section 4.8) so that support can follow up. A student's rating stays within the Service and is never shared with the CRM or any advertising system. A parent can ask us to delete either at any time under Section 6.
When a child signs in, we store what is needed to keep them signed in and to let a parent see and control it:
We use your and your child's information to provide the learning service you signed up for, under our contract with you, and for analytics and service improvement on the basis of our legitimate interests, which you can object to at any time. Specifically, we use it for the following purposes:
We send messages to parent accounts for the purposes below. These are delivered by email for email-based accounts, and over WhatsApp (with SMS as a fallback) for phone-based accounts. We never send messages of any kind to a student account:
The first seven categories above are transactional and always reach you, because they concern the security, access and billing of your account. The last two are engagement messages. You can turn any category off, and turn off a whole channel (email or WhatsApp), from Communication Preferences in your account settings, and every message carries an unsubscribe route. Turning everything off does not affect the security and billing notices.
To a parent, once they allow notifications in their own browser, we may send updates about their family's learning, such as a lesson finished or a badge earned, and requests from a child asking to sign in on a device. To a student, with a parent's opt-in consent and only after the student turns notifications on, we may send occasional reminders that support their learning, such as a nudge to continue a lesson or pick up where they left off.
These notifications are educational or informational in purpose and are not advertising. The student track is off by default, limited in how often it is sent, respects quiet hours, and can be turned off at any time by the parent in Settings or by the student on their device. A parent can turn their own notifications off in their browser's site settings at any time.
We advertise to adults on Facebook, Instagram and Google. To see whether those adverts work, our website and the parent and teacher pages of our app use the Meta Pixel. The Meta Pixel tells Meta when a visitor views a page, signs up, verifies their account, starts a trial, goes to checkout or subscribes, with the plan price and currency for a purchase. It also reports some button clicks and page details on its own.
Meta may link these events to a Facebook or Instagram account on the same browser and use them to measure and improve the delivery of our adverts. The Meta Pixel is never loaded on pages children use, and we never use it to advertise to children. You can block it with your browser's settings or an ad blocker, and you can manage how Meta uses this data in your Facebook or Instagram ad settings.
We work with the service providers below to run our platform. Each one handles personal information only to provide its service to us, under its terms with us, which include data protection commitments.
Generated audio files are stored on our infrastructure. The voice generation service processes the student's first name only for the purpose of creating a personalized greeting.
Chat sessions are held in a temporary cache for about 15 minutes and then removed. Safety records are kept for 90 days, or longer only while a safeguarding case is open, and are deleted with the student account (see Section 2.7). OpenAI may keep the data it receives for up to 30 days to monitor for abuse and then deletes it, and does not use it to train its models. Every reply passes through age-appropriate safety filters before it reaches the student.
PostHog is used only for product analytics and reliability, never for advertising. Session recordings are deleted after 30 days and analytics events are kept for up to seven years. When an account is deleted, we delete its analytics profiles with their events and session recordings (see Section 7.2).
GoHighLevel is never used to communicate directly with children. All marketing and lifecycle communications are sent only to parent accounts. Phone messages, including one-time codes, are sent by us directly over WhatsApp (operated by Meta) with SMS as a fallback, not through GoHighLevel; message and data rates may apply. If you start signing up but never verify your email or phone, only the email or phone number you entered is added to our CRM, so we can help you finish. If your account is deleted, we keep only a minimal contact: your email address or phone number and the tags that mark the account as deleted, with your name, country and every message between us removed (see Section 7.2). We keep it on the basis of our legitimate interest in recognising returning customers and not contacting you by mistake; you can object, or ask us to erase your data, and we will delete it.
We do not maintain accounts with these services or send them identifying information about parents or students; they act only as the transport layer the browser already uses.
The Meta Pixel runs on our website and on the parent and teacher pages of our app only. It is never loaded on pages children use.
We also use these providers, which may handle a limited amount of personal information:
We take children's privacy very seriously. Our platform is designed with the following protections in compliance with the Children's Online Privacy Protection Act (COPPA):
Parents have full control over their children's accounts and can:
We do not send marketing or advertising communications to children. With a parent's opt-in consent, we may send non-marketing educational reminders as push notifications to a student's device; these are off by default and can be turned off at any time. All subscription and marketing communications are sent only to parent accounts.
We implement robust security measures to protect your information:
| Data Type | Required | Purpose |
|---|---|---|
| Parent and Teacher Account Data | N/A | Kept while the account exists |
| Student Accounts | N/A | Kept while the parent or teacher account that created them exists, and deleted with it. A parent can delete a child's account at any time. The account is then switched off at once and held for 30 days, so it can be brought back with its progress by adding the child again with the same username or by asking our support team, and after that it is deleted for good. |
| Activity and Coin History | N/A | Each entry, such as a lesson finished, a level reached, a streak kept or coins earned or spent, is deleted 12 months after it is recorded. A child's current progress, level, XP and coin balance are kept while the account exists. |
| Unverified Parent Accounts | N/A | Automatically deleted after 90 days if the account's email or phone number is never verified. The matching contact in our CRM (Section 4.8) is kept, without your account data. |
| Dormant Accounts | N/A | If an account has had no sign-in and no subscription for 24 months, we send a notice 30 days before deleting it. If nobody signs in by then, we delete the account and its children's accounts as described in Section 7.2. |
| Student Sign-in Sessions and Device Records | N/A | Kept while the session is active; deleted when a parent ends it or it is replaced, and in any case when the student account is deleted. Sign-in requests and pairing codes expire after two minutes. |
| AI Tutor Safety Records | N/A | Kept for 90 days, longer only while a safeguarding case about the record is open, and deleted when the student account is deleted (Section 2.7) |
| Product Analytics | N/A | Session recordings are deleted after 30 days. Analytics events are kept for up to seven years, the retention our analytics provider applies, and are deleted when the account they belong to is deleted. |
| Server Logs | N/A | Our server logs, which include IP addresses and account IDs, are deleted automatically within 12 months |
| Database Backups | N/A | Deleted data can remain in our encrypted database backups for up to 7 days before the backups are overwritten |
| Payment and Refund Records | N/A | Kept for seven years after the end of the tax period they belong to, as UAE tax law requires, including after the account is deleted. Stripe keeps its own records under its privacy policy. |
Parent Account Deletion:
What We Delete:
What We Keep:
Depending on your location, you may have certain rights regarding your personal information:
You have the right to ask for a copy of the personal information we hold about you and your children. Contact our support team and we will send it to you as a data file.
You can update your account information at any time through your account settings, or contact us to request corrections.
You can delete your account and your children's accounts as described in Section 7.2. If you also want us to delete your contact in our CRM, ask our support team to erase your data and we will delete it.
You may object to certain processing of your data or request that we restrict processing in certain circumstances.
To exercise any of these rights, please contact us at support@elysianminds.org. We will respond to your request within 1 week.
We are based in the Dubai International Financial Centre (DIFC). We store the personal information in our own systems on Amazon Web Services in the European Union (Ireland). Our product analytics (PostHog) and error tracking (Sentry) are hosted in the EU (Germany).
Some of our service providers process personal information in the United States or in other countries: Stripe, OpenAI, GoHighLevel and its email providers, Postmark, ElevenLabs, Rewardful, Meta (Facebook sign-in, WhatsApp and the Meta Pixel), Google (sign-in, Workspace and YouTube), Anthropic and Notion. Vercel serves our website and app from its global network, from the location nearest you, and runs our server-rendered pages in the United States (Washington, D.C.). WhatsApp messages are processed by Meta in its data centres, mainly in the United States. Cloudflare relays analytics data through its EU network on its way to PostHog.
DIFC law recognises the United Kingdom and the European Union as giving personal information adequate protection, so what we keep in Ireland and Germany needs no further safeguard. For providers in the United States and other countries, we rely on the data protection terms in our agreements with them, including standard contractual clauses where the provider offers them.
You can ask us for more information about these safeguards using the contact details in Section 13.
You can try a limited set of sample lessons in guest mode without creating an account. This section explains what we do and do not collect when you use guest mode.
If you later create an account, the information you provide at sign-up is governed by the rest of this Privacy Policy.
We may update this Privacy Policy from time to time. We post every change on this page and update the "Last Updated" date. When a change is material, for example a new purpose, a new kind of data or a new provider that receives your data, we also tell you by email, or by WhatsApp for a phone-based account, no later than when it takes effect.
For material changes that affect how we process children's personal information, we will provide additional notice and obtain parental consent where required.
We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.
If you have questions, concerns or requests about this Privacy Policy or how we handle personal information, contact us using the details below. Elysian Minds Innovations Limited is the controller of the personal information this policy describes.
For concerns about children's privacy or to exercise parental rights, please use the email above with "Children's Privacy" in the subject line.
