Privacy at Foxlark

Who this applies to

This policy describes how Foxlark Learning ("Foxlark", "we") handles personal information for two distinct groups: parent account holders (the adult who creates and pays for the account) and children (the learner profiles a parent adds under their account). The split matters: we collect different information about each, and the boundary between the two is enforced inside the product, not only on paper.

What we collect

From parents

• Your name and email address (used to sign in, send receipts, contact support).
• Your password, stored using industry-standard one-way encryption — we never see or store your password in a readable form.
• Your parent PIN if you set one, stored the same way (used to gate sensitive actions in the dashboard).
• Billing information handled entirely by Stripe. We never receive your full card number; on our side we keep only the minimal records needed to link your account to your active subscription.
• Server logs containing limited request metadata (including your IP address), kept for no longer than 30 days for operational and security purposes.

From children

• A display name (you choose; it does not have to be a legal name).
• Grade level and age.
• An avatar choice.
• Practice activity (problems attempted, answers given, time spent, hints used, achievements earned). This is the data Foxlark uses to choose what your child sees next.

Children's profiles never have an email, phone number, address, or any field that could capture contact information. There is no message inbox, no chat, and no third-party tracker on the lesson pages your child sees.

How we use the data

• To choose the next problem for your child.
• To show you, the parent, your child's progress and where they may be stuck.
• To send transactional emails (sign-in links, receipts, trial-ending notices).
• To handle billing through Stripe.
• To detect abuse, debug issues, and improve the product.

We do not sell your data to advertisers. We do not place advertising cookies or third-party trackers on the child-facing app. We do not use children's practice data to train external AI models.

AI-generated content

Some questions and hints are generated with the help of AI, behind safety checks designed for primary- and secondary-school learners. We do not send your child's name, your name, your email, or any other personally identifying information to the AI provider.

Where the data lives

Foxlark is hosted in Australia. Stripe holds billing data on its own infrastructure under their data-protection terms. AI-generated content is produced by third-party AI providers that may operate outside Australia; we do not send your name, your child's name, your email, or any other personally identifying information to those providers. Operational logs are retained for no longer than 30 days, then deleted.

Your rights

• Access: from the parent dashboard you can see all the practice history we hold for each child.
• Export: on request we will send you a JSON export of your account.
• Deletion: archive or delete a child profile at any time. Deleting the parent account removes all child data with it, including practice history.
• Correction: update parent details from your profile page; child profile fields from the parent dashboard.

How to reach us

Privacy questions, data export requests, and deletion requests: email privacy@foxlark.app.

Changes

We update this policy when we change how we handle data. The "last updated" date at the top reflects the most recent change. Material changes are emailed to parents.