🔒 Privacy Policy

1. Who We Are

MomSoft Learning is a product of Self IT Solutions UK Ltd, a company incorporated in England and Wales.

Registered Address: 42, Lynton Close, Isleworth, TW7 7ET, London, United Kingdom

Companies House Number: 13473652

Contact email: hello@momsoftlearning.com

ICO Registration Number: C1969256 (UK Information Commissioner's Office — data controller registration)

Self IT Solutions UK Ltd is the data controller for all personal data processed through MomSoft Learning.

2. What Data We Collect

Data you give us (parent / guardian account)

• Email address (for account login and communications)
• Password (stored as a secure hash — never in plain text)
• Child's first name or nickname (so we can personalise activities)
• Child's age group (3–4, 4–5, 5–6, 6–7, or 7–9) — not exact date of birth

Data we collect automatically

• Which activities were played and for how long (progress data)
• Browser type and device type (for technical compatibility)
• IP address (used only for security and fraud prevention — not stored permanently)
• Session cookies (see Section 10)

Data we do NOT collect

• We do not collect children's full names, addresses, phone numbers, or photographs
• We do not use advertising cookies or track users across other websites
• We do not sell or rent data to any third party
• We do not use voice recordings — the Text-to-Speech feature runs entirely in your browser and is not transmitted to us

3. How We Use Your Data

• Account management — creating, maintaining, and securing your login
• Personalisation — showing the child's name and appropriate age-group content
• Progress tracking — showing parents which activities have been completed
• Service improvement — understanding which activities children use most so we can improve them
• Security — detecting and preventing unauthorised access
• Legal compliance — meeting our obligations under UK GDPR, COPPA, and the UK Children's Code

We will never use your data for advertising profiling, sell it to third parties, or use it for any purpose not listed above.

4. Children's Privacy

UK Children's Code (Age Appropriate Design Code)

We comply with the UK ICO's Children's Code. This means:

• We apply privacy settings to their highest level by default
• We do not use nudge techniques or dark patterns
• We do not serve behavioural advertising to children or their families
• We minimise data collection to only what is necessary
• We provide clear, age-appropriate privacy information

COPPA (USA — Children's Online Privacy Protection Act)

If you are located in the United States, COPPA applies. We comply as follows:

• All accounts are created by a parent or guardian aged 18 or over
• We do not knowingly collect personal data directly from children under 13
• Parents can review, correct, or delete their child's data at any time by emailing hello@momsoftlearning.com
• We do not condition a child's participation on providing more personal information than is necessary

EU GDPR — Article 8 (Children)

For users in the European Union, parental consent is required for processing the personal data of children under 16. By creating an account, the parent or guardian provides this consent.

5. Legal Basis for Processing (UK & EU GDPR)

• Contract — processing your account data is necessary to provide the service you signed up for (Article 6(1)(b))
• Legitimate interests — security, fraud prevention, and service improvement (Article 6(1)(f))
• Legal obligation — compliance with UK law, COPPA, and tax/accounting requirements (Article 6(1)(c))
• Consent — for any optional marketing communications (Article 6(1)(a)) — you can withdraw at any time

6. Who We Share Data With

We share data only with the following categories of trusted service providers, under strict data processing agreements:

• Microsoft Azure — cloud hosting and data storage (servers in the UK/EU region)
• Payment processor — for premium subscriptions only (we never see or store full card numbers)

We do not share data with advertisers, data brokers, social media platforms, or any other third parties.

7. Data Storage & Security

All data is stored on Microsoft Azure infrastructure located in the United Kingdom or European Union. We apply the following security measures:

• Passwords are stored as secure hashes (not plain text)
• HTTPS encryption on all connections
• Access controls limiting who within our team can view data
• Regular security reviews

No system is 100% secure. If we ever experience a data breach affecting your rights and freedoms, we will notify you within 72 hours as required by UK GDPR.

8. How Long We Keep Data

• Active accounts: data is kept for as long as you have an account
• Deleted accounts: data is permanently deleted within 30 days of account deletion
• Progress/activity data: deleted with the account
• Financial records: kept for 7 years as required by UK law
• IP address logs: automatically purged after 30 days

9. Your Rights

Under UK GDPR and EU GDPR, you have the following rights. To exercise any of them, email hello@momsoftlearning.com and we will respond within 30 days.

• Right of access — request a copy of all data we hold about you
• Right to rectification — correct inaccurate data
• Right to erasure ("right to be forgotten") — request deletion of your data
• Right to restriction — ask us to pause processing while a dispute is resolved
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, withdraw at any time

If you are in the USA, you also have the right to review or delete your child's personal information under COPPA by contacting us at the email above.

10. Cookies

We use only essential cookies required for the website to function (e.g., keeping you logged in). We do not use advertising cookies, tracking cookies, or third-party analytics cookies. Please see our Cookie Policy for full details.

11. International Data Transfers

Our servers are based in the UK and EU. If data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO and European Commission.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email (to the address registered on your account) and update the "Last updated" date at the top of this page. Continued use of MomSoft Learning after changes constitutes acceptance of the updated policy.

13. Contact & Complaints

For any privacy questions, data requests, or concerns:

• Email: hello@momsoftlearning.com
• Company: Self IT Solutions UK Ltd
• Registered Address: 42, Lynton Close, Isleworth, TW7 7ET, London, United Kingdom
• Companies House: 13473652
• ICO Registration: C1969256

If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

If you are in the EU, you may also complain to your local Data Protection Authority.