Privacy Notice
Last updated: July 28, 2026
This Privacy Notice explains how Pixanow ("Pixanow", "we", "us", or "our"), the operator of the Curious Dojo service available at curiousdojo.app and related domains (the "Service"), collects, uses, and shares personal data. Pixanow acts as the data controller for personal data processed through the Service.
1. Personal data we collect
- Account data (parents): name, email address, hashed password, authentication tokens.
- Child profile data: display name, avatar, age or grade band, hashed PIN, and learning progress. Child profiles are created and managed by a parent or legal guardian.
- Learning activity: lessons started and completed, quiz answers, XP, badges, certificates, and creative projects produced inside the Service.
- Support and communications: messages you send us, and messages exchanged with our in-app assistant.
- Device and usage data: IP address, browser type, device identifiers, pages visited, and diagnostic logs.
- Cookies and similar technologies: essential cookies for login and preferences, and limited analytics cookies to improve the Service.
2. How we use personal data
- Create and secure accounts, authenticate users, and prevent fraud or abuse.
- Deliver the learning experience, save progress, issue badges and certificates.
- Provide customer support and respond to enquiries.
- Operate, maintain, monitor, and improve the Service.
- Send transactional communications (for example, password resets and account notices).
- Comply with legal obligations and enforce our Terms of Service.
3. Legal bases
Where applicable law requires a legal basis, we rely on performance of a contract with you (providing the Service), our legitimate interests (security, product improvement, fraud prevention), consent (where required, for example for certain cookies), and compliance with legal obligations.
4. Children's privacy (COPPA / GDPR-K)
Curious Dojo is designed for use by children under the direct supervision of a parent or legal guardian. We do not knowingly allow children under the age of digital consent to create accounts on their own. A parent or legal guardian must create the family account, provide verifiable consent by creating each child profile, and manage the profile from their dashboard.
We collect only the minimum information needed to deliver the learning experience: a child display name (which can be a nickname or initial), an avatar, an optional age or grade band, a hashed PIN, and learning progress. We do not use child data for behavioural advertising, profiling, or any purpose unrelated to providing the Service. Parents may review, edit, or delete a child profile at any time from their account, or by contacting us using the details below.
5. Sharing personal data
We share personal data with limited categories of recipients:
- Service providers (subprocessors): hosting, database, email delivery, analytics, and educational technology providers that help us operate the Service.
- Payments: Stripe processes payments, subscription billing, invoicing, and applicable sales tax on our behalf.
- Professional advisers: legal, accounting, and compliance advisers.
- Authorities: where disclosure is required by law, regulation, or valid legal process.
6. International transfers
Personal data may be transferred to and processed in countries other than your own. Where data leaves the UK or the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
7. Retention
We keep personal data for as long as your account is active and as needed to provide the Service. When an account or child profile is deleted, we delete or anonymise the associated personal data within a reasonable period, unless we are required to keep it for legal, tax, or security reasons.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.
9. Security
We use appropriate technical and organisational measures — including encryption in transit, hashed credentials, access controls, and audit logging — to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security.
10. Cookies
We use essential cookies to keep you signed in and remember preferences, and a limited set of analytics cookies to understand how the Service is used. You can manage cookies through your browser settings; disabling essential cookies may break parts of the Service.
11. Changes to this Notice
We may update this Notice from time to time. Material changes will be communicated through the Service or by email where appropriate.
12. Contact
Pixanow · Email: privacy@curiousdojo.app