Privacy

Privacy Policy

Effective: August 28, 2026 · Last updated: August 28, 2026

Short version: Focusplay uses limited account and learning information to provide educational games, progress, and rewards. We do not sell personal information, serve behaviorally targeted advertising to learners, or require children to provide an email address.

1. Who this policy covers

This policy explains how Focusplay.ai (“Focusplay,” “we,” “us,” or “our”) handles information when parents, guardians, educators, schools, and learners use our website and educational game service. Adult account holders are responsible for supervising child use. Schools may authorize student use under their own agreements and applicable law.

2. Information we collect

Adult account information

Name, email address, password hash, language preference, timezone, account role, and email-verification status.
If an adult chooses Google sign-in: verified email address, profile name, and the identifiers needed to complete sign-in. Focusplay requests the basic OpenID, email, and profile scopes.
For school inquiries: name, work email, role, organization, approximate student count, country, and the message submitted.

Learner information

A display name, grade, classroom or family workspace, selected avatar, and optional avatar customizations.
A class code association and a hashed three-picture password. Focusplay does not store a readable copy of the picture password.
Game activity such as games played, level, round duration, items attempted and correct, stars, skill progress, recent play days, and last-played time.
Reward and collection information such as gold, streaks, owned items, equipped character or pet, and purchases made with in-product gold.
When a learner uses a creativity activity: the prompt, explanation, drawing data, and related stored object. The service is configured to retain the most recent submissions and remove older creative objects as limits are reached.

Focusplay does not require a learner to provide an email address, surname, phone number, home address, or profile photograph.

Technical and security information

Session cookies needed to keep users signed in. Adult sessions and shorter child sessions use secure, HTTP-only cookies.
IP-derived security information, country code, request time, and anti-abuse records. Signup rate limits store a shortened hash of the IP address rather than the readable address.
Security and access audit records when authorized adults view or manage student information.
Standard hosting and request information processed by our infrastructure providers to operate and secure the service.

3. Why we use information

To create and authenticate adult, teacher, and learner accounts.
To provide grade-aware games, scoring, progress, rewards, collections, and saved creative work.
To let authorized parents, teachers, and schools review learner activity.
To verify parental or adult authorization, respond to support and school inquiries, prevent abuse, and protect account security.
To maintain, debug, and improve the reliability and age-appropriateness of Focusplay.
To comply with valid legal obligations.

4. Children under 13 and school use

Focusplay is designed for learners, including children under 13. A child should not independently create an adult account. For family use, a verified parent or guardian account adds the learner and authorizes use. We may request additional verification where required. For school use, the school or district must have authority to provide student information and authorize the service under its agreement with Focusplay.

Parents may ask to review, correct, download, or delete their child’s personal information, and may refuse further collection by discontinuing and deleting the child profile. Parents can permanently delete a child profile and associated records from the family account. Schools may submit requests for school-managed records according to their agreement.

Focusplay’s procedures are designed with the requirements and guidance of the U.S. Children’s Online Privacy Protection Act (COPPA), FERPA-related school responsibilities, and applicable state student-privacy laws in mind. This statement does not replace a school’s own legal review or data agreement.

5. When information is shared

We do not sell personal information. We do not use learner information for behaviorally targeted advertising or to build a commercial advertising profile.

Information may be shared only as needed with:

Cloudflare, which provides hosting, Workers, D1 database, R2 object storage, security, and delivery infrastructure.
Email delivery providers, such as Cloudflare Email Services or Resend, to send adult verification and password-reset messages.
Google, only when an adult chooses Google sign-in.
The learner’s authorized parent, educator, school, or district, according to role and relationship.
Authorities or other parties when required by law or reasonably necessary to protect users, the service, or legal rights.

Service providers may use information only to perform services for Focusplay and are expected to protect it appropriately.

6. Retention and deletion

We keep information only as long as needed for the educational service, security, legal obligations, and authorized school requirements. Current service controls include:

Raw game-round records are configured for a 90-day retention period after daily progress summaries are created.
Expired authentication sessions are configured for deletion after 30 days.
Student-access audit records are configured for retention for up to two years to support school and security requests.
Account, summarized progress, inventory, and relationship records remain while the account is active or as required by the school agreement.
When a parent permanently deletes a child, related child records are deleted through database relationships, active child sessions are revoked, and stored creative-work objects are removed.

Adults may request deletion of their own account or school-managed information by contacting us. Some limited records may be retained where legally required or necessary to document a completed deletion or security event.

7. Security

Focusplay uses role-based access controls, scoped student access, hashed passwords, secure cookies, rate limits, audit logging, encrypted HTTPS connections, and Cloudflare infrastructure protections. No system can guarantee absolute security, but we work to limit collection and reduce access to what is necessary.

8. California privacy information

California residents may have rights to know, correct, delete, or limit certain uses of personal information, subject to legal exceptions and whether a particular law applies. Focusplay does not sell or share learner information for cross-context behavioral advertising. A parent or guardian may exercise applicable rights for a child.

9. International access

Focusplay is operated for a U.S.-based educational service. Information may be processed in the United States and other locations where our service providers operate. Schools or users outside the United States should contact us before providing student information so that appropriate terms can be reviewed.

10. Changes to this policy

We may update this policy as the product or law changes. We will post the new date on this page and provide additional notice to adult account holders when a change materially affects child or student information.

11. Contact and privacy requests

For access, correction, deletion, school privacy review, or other privacy questions, email hello@focusplay.ai. Include the adult account email and describe the request. Do not send a child’s picture password or unnecessary sensitive information.

Official resources: FTC Children’s Privacy and U.S. Department of Education Student Privacy.