🔒 Privacy Policy

1. Who We Are

MomSoft Learning is a product of Self IT Solutions UK Ltd, a company incorporated in England and Wales.

Registered Address: 42, Lynton Close, Isleworth, TW7 7ET, London, United Kingdom

Companies House Number: 13473652

Contact email: hello@momsoftlearning.com

ICO Registration Number: C1969256 (UK Information Commissioner's Office — data controller registration)

Self IT Solutions UK Ltd is the data controller for all personal data processed through MomSoft Learning.

2. What Data We Collect

Data you give us (parent / guardian account)

• Email address (for account login and communications)
• Password (stored as a secure hash — never in plain text)
• Child's first name or nickname (so we can personalise activities)
• Child's age group (3–4, 4–5, 5–6, 6–7, or 7–9) — not exact date of birth

Data we collect automatically

• Which activities were played and for how long (progress data)
• Browser type and device type (for technical compatibility)
• IP address (used only for security and fraud prevention — not stored permanently)
• Session cookies (see Section 10)

Data we do NOT collect

• We do not collect children's full names, addresses, phone numbers, or photographs
• We do not use advertising cookies or track users across other websites
• We do not sell or rent data to any third party
• We do not use voice recordings — the Text-to-Speech feature runs entirely in your browser and is not transmitted to us

3. How We Use Your Data

• Account management — creating, maintaining, and securing your login
• Personalisation — showing the child's name and appropriate age-group content
• Progress tracking — showing parents which activities have been completed
• Service improvement — understanding which activities children use most so we can improve them
• Security — detecting and preventing unauthorised access
• Legal compliance — meeting our obligations under UK GDPR, COPPA, and the UK Children's Code

We will never use your data for advertising profiling, sell it to third parties, or use it for any purpose not listed above.

4. Children's Privacy

UK Children's Code (Age Appropriate Design Code)

We comply with the UK ICO's Children's Code. This means:

• We apply privacy settings to their highest level by default
• We do not use nudge techniques or dark patterns
• We do not serve behavioural advertising to children or their families
• We minimise data collection to only what is necessary
• We provide clear, age-appropriate privacy information

COPPA (USA — Children's Online Privacy Protection Act)

If you are located in the United States, COPPA applies. We comply as follows:

• All accounts are created by a parent or guardian aged 18 or over
• We do not knowingly collect personal data directly from children under 13
• Parents can review, correct, or delete their child's data at any time by emailing hello@momsoftlearning.com
• We do not condition a child's participation on providing more personal information than is necessary

EU GDPR — Article 8 (Children)

For users in the European Union, parental consent is required for processing the personal data of children under 16. By creating an account, the parent or guardian provides this consent.

5. Legal Basis for Processing (UK & EU GDPR)

• Contract — processing your account data is necessary to provide the service you signed up for (Article 6(1)(b))
• Legitimate interests — security, fraud prevention, and service improvement (Article 6(1)(f))
• Legal obligation — compliance with UK law, COPPA, and tax/accounting requirements (Article 6(1)(c))
• Consent — for any optional marketing communications (Article 6(1)(a)) — you can withdraw at any time

6. Who We Share Data With

We share data only with the following categories of trusted service providers, under strict data processing agreements:

• Microsoft Azure — cloud hosting and data storage (servers in the UK/EU region)
• Payment processor — for premium subscriptions only (we never see or store full card numbers)

We do not share data with advertisers, data brokers, social media platforms, or any other third parties.

7. Data Storage & Security

All data is stored on Microsoft Azure infrastructure located in the United Kingdom or European Union. We apply the following security measures:

• Passwords are stored as secure hashes (not plain text)
• HTTPS encryption on all connections
• Access controls limiting who within our team can view data
• Regular security reviews

No system is 100% secure. If we ever experience a data breach affecting your rights and freedoms, we will notify you within 72 hours as required by UK GDPR.

7a. Classroom Photos (Schools)

Schools using MomSoft Learning can share photos of classroom activities with parents. Because these may show children, we treat them more strictly than any other data:

• Only a school's own staff account can upload photos; parents can only view them.
• A parent sees only photos for their own child's class or for the whole school their child attends — never another class or another school.
• Photos are stored in private storage in the UK. There are no public links. Every view uses a signed link that expires within minutes.
• Before upload, the photo is resized on the teacher's own device and its embedded metadata (including any GPS location) is removed, so a photo never carries the school's location.
• A teacher can remove a photo at any time, after which it is no longer visible to anyone and the file is deleted.

If you do not want your child to appear in classroom photos, tell the school directly; this is a decision between you and the school, and MomSoft Learning provides the tool only.

7b. The MomSoft Learning App (iOS and Android)

The app is the same service as this website, installed on a phone or tablet. Everything in this policy applies to it. In addition:

• No advertising, no analytics, no tracking. The app contains no advertising or analytics software, does not use an advertising identifier, and does not track children or adults across other apps or websites.
• Permissions. The app asks for one permission only: notifications, and only when a parent or teacher chooses to turn them on. It does not request location, contacts, microphone, camera or photo-library access. (A teacher choosing a photo to share uses the device's own picker, which does not require the app to hold a camera permission.)
• Notifications are sent only to parent and school accounts, never to a child's device. To send them, your device gives us a delivery token, which we store alongside your account and delete when notifications are turned off or the device is no longer reachable.
• Works offline. Learning activities are stored on the device so they work without a connection. Progress is sent to us only when the device is online, and only for the child profile a parent has set up.
• Fonts and other files are bundled with the app or served from our own domain. Opening the app does not contact any third-party service.
• Subscriptions are managed on our website. The app itself contains no purchases.

7c. Stella, our on-screen helper

Stella answers questions about how the website works. Her answers are written by us and stored in the website itself — no artificial-intelligence service is involved and your question is not sent to any third party. Two optional things happen only when you choose them:

• Voice questions. If you tap the microphone, your browser turns your voice into text using its own speech-recognition service (Google for Chrome and Edge, Apple for Safari). The audio goes to that provider under its own privacy terms; MomSoft Learning never receives, records or stores the audio. Listening starts only when you press the button and stops when you finish speaking. You can always type instead.
• Spoken answers use your device's own text-to-speech voice. Nothing is sent anywhere.

We do not keep a log of questions asked to Stella.

8. How Long We Keep Data

• Active accounts: data is kept for as long as you have an account
• Deleted accounts: data is permanently deleted within 30 days of account deletion
• Progress/activity data: deleted with the account
• Financial records: kept for 7 years as required by UK law
• IP address logs: automatically purged after 30 days

9. Your Rights

Under UK GDPR and EU GDPR, you have the following rights. To exercise any of them, email hello@momsoftlearning.com and we will respond within 30 days.

• Right of access — request a copy of all data we hold about you
• Right to rectification — correct inaccurate data
• Right to erasure ("right to be forgotten") — request deletion of your data
• Right to restriction — ask us to pause processing while a dispute is resolved
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, withdraw at any time

If you are in the USA, you also have the right to review or delete your child's personal information under COPPA by contacting us at the email above.

10. Cookies

We use only essential cookies required for the website to function (e.g., keeping you logged in). We do not use advertising cookies, tracking cookies, or third-party analytics cookies. Please see our Cookie Policy for full details.

11. International Data Transfers

Our servers are based in the UK and EU. If data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO and European Commission.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email (to the address registered on your account) and update the "Last updated" date at the top of this page. Continued use of MomSoft Learning after changes constitutes acceptance of the updated policy.

13. Contact & Complaints

For any privacy questions, data requests, or concerns:

• Email: hello@momsoftlearning.com
• Company: Self IT Solutions UK Ltd
• Registered Address: 42, Lynton Close, Isleworth, TW7 7ET, London, United Kingdom
• Companies House: 13473652
• ICO Registration: C1969256

If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

If you are in the EU, you may also complain to your local Data Protection Authority.