Privacy Policy

1. Information We Collect

We collect only what is necessary to provide our service:

• Account information: Parent/guardian name, email address, and password when creating an account.
• Player progress: In-game scores, levels, achievements, and learning path data tied to the account.
• Payment information: Processed entirely by Stripe. We never store credit card details on our servers.
• Usage data: Basic analytics such as pages visited and features used, to improve the platform.

2. Children's Privacy (COPPA / NZ Privacy Act)

Curio Quest is designed for children aged 7–9, used under parental supervision. We comply with the New Zealand Privacy Act 2020 and take children's privacy seriously:

• Accounts must be created by a parent or guardian aged 18 or older.
• We do not collect personal information directly from children.
• We do not display targeted advertising to children.
• We do not sell or share children's data with third parties.
• Parents may request deletion of their child's data at any time by contacting us.

3. How We Use Your Information

• To create and manage your account.
• To provide and personalise the educational experience.
• To process subscription payments via Stripe.
• To send account-related emails (e.g. receipts, password resets).
• To improve our platform based on aggregated, anonymised usage data.

We will never use your data for marketing without your explicit consent.

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with:

• Stripe — for secure payment processing. Subject to Stripe's Privacy Policy.
• Base44 — our hosting and backend infrastructure provider.
• Law enforcement — only if required by New Zealand law.

5. Data Security

We use industry-standard encryption (HTTPS/TLS) to protect data in transit. Passwords are hashed and never stored in plain text. Access to user data is restricted to authorised personnel only.

6. Data Retention

We retain your account data for as long as your subscription is active or as needed to provide the service. You may request account deletion at any time — we will remove your data within 30 days.

7. Cookies

We use essential cookies only — for authentication sessions and payment flows. We do not use tracking or advertising cookies.

8. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and data.
• Lodge a complaint with the Office of the Privacy Commissioner.

To exercise any of these rights, contact us at [email protected].

9. Third-Party Links

Our platform may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance.

11. Contact Us

For any privacy-related questions or requests, please contact us at: