AryOLingo for parents: safety and privacy in plain words
AryOLingo is built so that a parent stays in charge. A parent creates the account and gives consent. The child never enters an e-mail address, never buys anything and never sees ads. There are no analytics and no third-party trackers, and data is never sold.
Safety at a glance
| Question | Answer |
|---|---|
| Ads? | No. Children never see ads. |
| Analytics or trackers? | No analytics, no third-party trackers, no advertising identifier. |
| Sale of data? | Never. |
| Chat with strangers? | No. There is no way for a child to talk to someone outside the family. |
| Who creates the account? | A parent, with an e-mail address verified by a code. The parent confirms being an adult parent or guardian. |
| Can a child buy things? | No. Purchase screens are behind the parent gate and a parent pays through the store. |
| Can I delete everything? | Yes, in the app, at any time. |
How consent works
Only a parent or legal guardian can create an account, add a child, change settings or give consent. Before any child data is collected, the parent can read what is collected in the privacy policy and the privacy choices screen, and can say no.
The child plays on a device the parent has paired with a one-time 6-digit code that works for 15 minutes.
The Parent PIN and the parent gate
Settings, outside links, purchases and deletion are behind a parent gate. The gate is a Parent PIN of 4 to 6 digits that the parent sets in Settings, or a short multiplication sum if no PIN is set. The PIN is kept on the parent device only, as a scrambled hash, and is never sent to our servers.
Features that are off until you turn them on
- AI word checking: off by default. If you turn it on, a typed word, the topic, an age band such as 7 to 9 and the language name are sent to Anthropic, our AI provider, to check whether the word fits. No name, e-mail or voice is sent.
- Voice notes from a child to the family: off by default. If allowed, the recording is private to the family.
- Pronunciation practice: off by default. It uses the speech recogniser on the phone itself. The audio and what the child said are not recorded, uploaded or stored by us. We only receive a pass or not-yet result and a count of tries.
You can turn each one off again at any time. That withdraws your consent.
League and family messages
- Monthly league (optional): other players see only a nickname made by the game (the child picks it from a list and cannot type it), an emoji avatar and the month's points. No real names, photos or messages. Real children from other families can be in the same table. Empty places are held by computer players clearly labelled "Robo" with a robot icon, and prizes go only to real children. A parent can switch the league off.
- Family chat: works only inside one family, between parents and their paired children. Messages are stickers from a closed set and short text. It never connects two children and never connects anyone outside the family.
What a parent sees
In the parent area you can review the information about your child, see what the child practised and how the play is going, and read the speaking practice results if you turned that on. You can also ask for a copy of the data.
Deleting data
- Delete one child and all their data: in the app, Settings, then "Delete child and all their data".
- Delete the whole account: in the app, Settings, then "Delete my account and all data". It happens immediately.
- No app at hand? Use the web page Delete my account or write to aryolingo.support@gmail.com. E-mail requests are done within 30 days.
The legal texts
This page is a plain summary. The binding texts are the privacy policy and the terms. The policy follows the ideas of COPPA, GDPR-K and the UK Children's Code, but we do not claim any certification.