Privacy at Phira

What we do not do

• No ads in the child experience.
• No sale of personal information.
• No medical labels, intelligence-test labels, gifted labels, rank, or scoring language in the product.

Free demo

The free demo stores minimal anonymous session events on this browser (such as which clue was tapped or which world was chosen). No account is required. These events help improve lessons and prepare future parent reports.

Before saved child profiles or Genius Maps

Parent consent is required before we save a child profile, store a Genius Map, or link observations to a paid account. See parent consent.

Access and delete

Parents may request access to or deletion of their family's data by emailing our privacy contact. We will respond with what we can verify from our records.

Vendors & processors

Phira uses a small set of processors — no ad networks, no behavioral ad profiles on child lesson routes. Current vendors include Vercel (hosting), Supabase (database and privacy requests, ca-central-1), Google Fonts (web fonts), and planned parent-only processors such as Stripe and Resend when billing and email launch. Internal Privacy Ops (consent-gated admin workflow) fulfills access, delete, and revoke requests with audit logging.

Maintainer reference: docs/PRIVACY_VENDOR_INVENTORY.md in the Phira repository. Parents: email support@phira.ca for questions.

Data retention

• Free demo signals: anonymous lesson events — up to 12 months rolling on servers unless linked to a parent account; browser session data until cleared.
• Parent consent: stored until revoked; audit trail retained for compliance.
• Privacy requests: retained 24 months after completion unless a legal hold applies.

Submit access or delete requests on Privacy for parents.

More detail

• Privacy for children
• Privacy for parents
• Parent consent