Privacy Policy

YorubaQuest is operated by Topsite Consult, Helsinki, Finland (Business ID: 3439169-5), which acts as the data controller for the personal data described below. You can reach us at topsitech@gmail.com for any privacy question, request, or concern.

Parent / guardian account. Email address and, if you sign up with Google, the name and email address Google shares with us. If you set a password instead, we store a securely hashed password — never the password itself.

Child profiles. A first name or nickname chosen by the parent, an avatar, an approximate age, and gameplay data (XP, streaks, coins, badges, completed lessons, quiz scores). We do not ask for a child's surname, date of birth, photo, address, or any contact detail, and the app has no chat, messaging, or public profile feature for children to expose any of this to other users.

Independent child login (optional). If a parent enables it, a child can sign in on their own device using a family code and a 4-digit PIN the parent sets. The PIN is stored only as a one-way cryptographic hash (bcrypt) — we cannot see or recover the actual PIN. The device that logs in this way holds a signed, tamper-proof session token in an httpOnly cookie; it identifies the child profile only and carries no other personal data.

Teacher applications. A parent who applies to become a Teacher provides a school or organisation name, a location, the number of student profiles requested, and, where our verification process requires it, a supporting identity or affiliation document. This document is reviewed by an administrator to approve or reject the application and is not used for any other purpose.

Feedback you send us. If you use the in-app feedback form, we store the message text and, if you are signed in, associate it with your account so we can follow up.

Technical and diagnostic data. If the app encounters an unexpected error, a short technical error report (what went wrong and which screen) may be logged to help us fix bugs. We also use Vercel Analytics, a cookieless, privacy-preserving analytics service that reports aggregate, anonymised usage such as which lessons are opened and completed — it does not fingerprint devices, does not use cookies, and cannot identify an individual child or parent.

What we deliberately do not collect. No precise location, no advertising identifiers, no third-party social-media data beyond the basic Google sign-in profile described above, and no behavioural profiling of children for marketing.

Under the General Data Protection Regulation (GDPR), each processing activity has one of the following legal bases:

Performance of a contract (Art. 6(1)(b)) — creating and running parent and child profiles, saving progress, and letting a parent supervise their child's learning is the core service you asked us to provide.

Consent (Art. 6(1)(a), and Art. 8 for children's data) — a child profile is only ever created by the action of a parent or legal guardian, which constitutes the parental consent GDPR requires before a child's data can be processed. A parent may withdraw this consent at any time by deleting the child's profile or the whole account.

Legitimate interest (Art. 6(1)(f)) — keeping the service secure and working (error logs, abuse prevention, PIN hashing, aggregate anonymised analytics), and reviewing Teacher applications to prevent misuse of higher account limits. We balance this against your rights and never use it to justify marketing to children.

We do not sell, rent, or trade personal data. We share data only with the service providers (processors) that make the app work, each bound by a data-processing agreement:

Supabase — our database, authentication, and file-storage provider, hosted in the EU (Ireland/Stockholm region). Almost all personal data described above lives here, protected by row-level security rules that ensure a parent can only ever see their own children's data.

Vercel — hosts the application itself and provides the cookieless analytics referenced above.

Resend — sends transactional emails (for example, notifying an administrator that a Teacher application is awaiting review). Only account/administrative email addresses pass through this service — never a child's data.

Some of these providers may process data on servers outside the EEA. Where that happens, we rely on their Standard Contractual Clauses (or equivalent safeguards under GDPR Chapter V) to ensure your data stays protected to the same standard.

We may also disclose data if required to comply with a legal obligation, court order, or valid request from a public authority, or to protect the rights, property, or safety of YorubaQuest, our users, or others.

Only a signed-in parent account can create a child profile. From the Guardian Dashboard, a parent can at any time: view every child's progress, edit a child's profile, remove a child profile, set or change a child's independent-login PIN, and permanently delete the entire account (which cascades to every child profile and all associated data). No child can change these settings themselves.

We keep account and child-profile data for as long as the account remains active. If you delete your account, associated personal data is permanently removed from our production database within 30 days, except where we are legally required to retain limited records for longer (for example, financial or legal-compliance records, which are kept only as long as the applicable law requires). Backups are rotated and fully expire within 90 days of creation.

We apply technical safeguards appropriate to the sensitivity of the data: passwords and PINs are never stored in plain text (industry-standard one-way hashing is used for both), database access is restricted by row-level security so one parent's data is never visible to another, and independent child sessions use signed, expiring tokens rather than reusable shared passwords. No method of transmission or storage is 100% secure, but we continuously work to protect your data using these and other reasonable measures.

If you are in the European Economic Area (or anywhere with similar data-protection law), you have the right to: access the personal data we hold about you and your child(ren); correct inaccurate data; request erasure ("right to be forgotten"); restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time without affecting processing carried out before the withdrawal.

To exercise any of these rights, use the in-app account-deletion and profile-editing tools, or contact us at topsitech@gmail.com. We will respond within one month, as required by GDPR.

You also have the right to lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi) — or with the data-protection authority of your own country of residence.

YorubaQuest is designed for a global diaspora audience learning the Yoruba language. Wherever you access the app from, your data is processed as described in this policy and stored with the providers listed in Section 4. If your local law provides additional protection for children's data beyond what is described here (for example, COPPA in the United States), we aim to meet the higher standard: we do not collect more information from a child than is reasonably necessary, we do not condition participation in the app on a child disclosing more data than necessary, and we do not use any data collected from a child for behavioural advertising.

YorubaQuest does not use advertising or tracking cookies. The only cookie the app sets is a strictly functional, httpOnly session cookie used solely to keep a child (or parent) signed in between visits; it cannot be read by JavaScript or by any third party. The app also stores a small amount of non-sensitive data on your own device using browser local storage — for example, your chosen voice or accessibility preferences, and guest-mode progress if you play without an account — which never leaves your device unless you later create an account.

We may update this policy from time to time to reflect changes in the app or in the law. If a change is material, we will notify account holders by email before it takes effect. The effective date at the top of this page always reflects the latest version.

Topsite Consult, Helsinki, Finland (Business ID: 3439169-5) — topsitech@gmail.com