LeoLearn Privacy Policy

Last updated: July 17, 2026

    The short version for parents: LeoLearn is built for children,
    so we collect as little as possible. No account email, no real names required,
    no ads, no selling data, no contact from strangers. The AI features (voice chat,
    text chat, and picture generation) send what your child says, types, or draws to
    third-party AI providers — OpenAI and Google —
    only to generate Leo's response, and only after you agree in the app. This data
    is not used to train AI models. You can review your child's history and delete
    everything at any time.
  

1. Who we are

LeoLearn ("we", "us") is an AI learning companion app for children aged 3–12, operated by the developer of LeoLearn. Contact: essamharous@gmail.com.

2. Children's privacy (COPPA / GDPR-K)

LeoLearn is designed for use by children under parental supervision. We comply with the Children's Online Privacy Protection Act (COPPA) and the GDPR provisions for children. The app is set up by a parent or guardian, and a parental gate protects settings, purchases, and account management. By setting up the app, the parent consents to the limited data processing described here.

3. What we collect

Profile basics: a first name or nickname, age, and a chosen cartoon avatar. We never ask for surnames, addresses, school names, photos of the child, phone numbers, or email addresses.
Anonymous account: the app signs in anonymously — an internal random identifier, not tied to your identity.
Learning activity: lesson progress, creations your child makes, and chat transcripts (kept so parents can review them in the Parent Zone).
Voice audio: when your child talks with Leo, their microphone audio is streamed in real time to OpenAI to generate the spoken conversation. Speaking time is metered for billing.
Chat text: when your child types to Leo, the messages (and the child's first name and age, for age-appropriate replies) are sent to OpenAI to generate Leo's reply and to screen the content for safety.
Picture prompts and drawings: when your child asks for a picture, the text description and any drawing they make are sent to Google (Gemini) to generate the image.
Purchase status: our payment partner (RevenueCat / Apple) tells us whether a subscription is active. We never see card details.
Basic diagnostics: anonymous crash and usage analytics to keep the app working well.

We ask every AI provider not to use your child's content to train their models.

3a. AI features and your consent

Leo is powered by third-party artificial-intelligence services. To answer your child, the app must send the content of that interaction off the device:

Voice chat → the child's live microphone audio → OpenAI.
Text chat → the child's typed messages, first name, and age → OpenAI.
Picture creation → the child's description and drawing → Google (Gemini).

Before any of these AI features can be used, the app shows a clear notice explaining what will be sent and to whom, and asks the supervising parent to agree. If you do not agree, the AI features stay off and no such data is sent. You can review this at any time in the Parent Zone. OpenAI and Google act as our processors and are contractually required to protect this data to a standard at least equal to this policy and not to use it to train their models.

4. What we never do

No advertising, and no third-party ad tracking of any kind.
No selling or renting data — ever.
No open chat with strangers. Your child only talks with Leo, our AI character.
No AI training on your child's conversations or images.
No asking the child for personal information — Leo is instructed to refuse it.

5. Safety by design

Every message to and from Leo — and every picture idea — passes through an automated safety filter before and after the AI responds. Content that is not appropriate for children is blocked, and Leo gently redirects to a safe topic. Parents can review full chat history in the Parent Zone.

6. Service providers

We share the minimum necessary with:

OpenAI (privacy policy) — voice conversation, text chat, speech transcription, and content-safety screening.
Google (privacy policy) — picture generation (Gemini) only.
RevenueCat / Apple — subscription status only (no card details).

Each provider processes data only to provide its service to us, under terms that require protection at least equal to this policy. None of them use your child's content to train AI models, and none of them receive data for advertising.

6a. Analytics

The app contains no third-party analytics and no third-party advertising. No analytics SDK is embedded, and no usage or device data is sent to any analytics company.

To improve the app, we keep one piece of first-party usage information: how the supervising parent moves through the initial setup (which setup step was reached and which options were tapped). This is stored only in your own profile on our own secure servers alongside the rest of your account data, is never shared with anyone, is not used for advertising, and is deleted with your account.

7. Your parental rights

At any time you can: review your child's data in the Parent Zone, delete a child profile (which deletes their data), or contact us to delete the entire account. We will comply within 30 days. We do not condition participation on providing more data than is necessary.

8. Data retention

Chat transcripts and creations are kept while the profile exists, so parents can review them. Deleting a profile deletes its data. Inactive anonymous accounts are deleted after 24 months.

9. Changes

If we materially change this policy, we will show a notice in the app before the change takes effect.

This document is provided for transparency and does not constitute legal advice. Questions: essamharous@gmail.com