Privacy Policy

Privacy Policy – Kids in Cyber

Kids in Cyber is committed to protecting your privacy and handling personal data responsibly and transparently.

This Privacy Policy explains how we collect, use, store, and protect personal information when you use our website and platform.

Who We Are

Kids in Cyber provides digital literacy, online safety, and AI literacy resources for schools, educators, families, charities, and education organisations.

If you have any questions about this policy, you can contact us at:

Email: [email protected]

Information We Collect

We may collect the following types of information:

Information You Provide

• Name
• Email address
• Organisation or school name
• Contact number
• Role or job title
• Account login details (where applicable)
• Messages or enquiries sent to us

Information Collected Automatically (Website Use)

• IP address
• Browser type and device information
• Pages visited and actions taken on our website
• Cookies and similar technologies

How We Use Your Information

We use your information to:

• Provide access to the Kids in Cyber platform
• Communicate with schools and organisations
• Respond to enquiries and support requests
• Improve our website, content, and services
• Manage partnerships and accounts
• Provide AI-powered educational responses through “Ask Riley”
• Meet legal and safeguarding obligations

Legal Basis for Processing

We process personal data under the following legal bases:

• Contract – to provide access to our platform and services
• Legitimate interests – to improve our services and communicate with users
• Legal obligation – where required to comply with the law

Platform Use

When you access the Kids in Cyber platform, we may process account-related data to:

• Create and manage user accounts
• Deliver educational content
• Support lesson planning and platform functionality

This data is used only for the purposes of providing and improving the service.

AI Usage (Ask Riley)

Kids in Cyber includes an AI-powered feature called “Ask Riley”.

• It is designed for educational use only
• It is restricted to computing and digital literacy topics
• It does not store personal conversations or have memory
• It includes safeguards to detect and warn against sharing personal information

Children’s Data

Kids in Cyber is designed for use by adults working with children.

• We do not require children to create accounts
• We do not knowingly collect personal data directly from children

Schools and organisations remain responsible for safeguarding and data protection relating to children.

If we become aware that children’s personal data has been provided to us in error, we will delete it.

Sharing Your Information

We do not sell personal data.

We may share information only where necessary, including with:

• Trusted service providers who support our platform
• Legal or regulatory bodies where required by law

All third parties are required to handle data securely and lawfully.

Trusted Service Providers (Sub-processors)

We use a small number of trusted third-party providers to deliver our service, including:

• Supabase (AWS infrastructure) – database and secure data storage
• Vercel – platform hosting
• Cloudflare – security and performance
• Google Gemini (Ask Riley) – AI-powered responses
• Stripe – payment processing

These providers process data only as necessary and are required to meet appropriate security and data protection standards.

Data Storage and Security

We take appropriate technical and organisational measures to protect personal data, including:

• Secure hosting
• Access controls
• Regular system updates

Data is only kept for as long as necessary:

• Account data is retained while your account is active
• Enquiry data is retained only as long as needed to respond and follow up

Cookies

We use cookies to:

• Ensure the website functions properly
• Understand how users interact with our site
• Improve user experience

You can manage or disable cookies through your browser settings.

Your Rights

Under data protection law, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request the deletion of your data
• Object to or restrict certain processing
• Withdraw consent where applicable

To exercise your rights, contact us using the details above.

International Users

Kids in Cyber may be accessed internationally.

Website Data
Information collected through general use of our website (such as analytics and enquiries) is primarily processed and stored in the United Kingdom.

Platform Data
Where users access the Kids in Cyber platform, we store and process personal data in the region closest to the user where possible:

• Users in the United States – data is stored in the United States
• Users in New Zealand – data is stored in Australia
• Users in the United Kingdom – data is stored in London, United Kingdom
• Users in the European Union – data is stored within the European Union

Where data is transferred outside of a user’s region, we ensure appropriate safeguards are in place in line with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be published on our website.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact:

Email: [email protected]