Children & Family Privacy

LogNormal is mathematics learning software intended for a broad audience from age 5 through adult. A child may use the learning experience, but an adult handles the App Store purchase and Founding Families correspondence for a minor.

The approved launch design requires a learner under 13 to use a guardian-managed cloud profile. It does not give that learner independent email/password or Apple sign-in credentials or ask the learner for payment details. A teen may self-manage only where an implemented, versioned jurisdiction rule permits it. If eligibility is uncertain, account creation must stop rather than default to self-management.

An age or privacy threshold is not necessarily the age at which a person can enter a paid contract. Unless applicable law and the final launch flow establish otherwise, the adult purchaser or guardian accepts the paid Terms and is the contracting account holder for a minor learner.

On a fresh installation without an earlier account session, the reviewed app stores learning activity primarily on the device and does not upload exercise records or learner-authored mathematical work to LogNormal’s account service. New public account creation, public cloud synchronization, and guardian account controls are not enabled in that reviewed build.

A device retaining an earlier beta account session may still connect to the Supabase-hosted account service. Information there may be associated with a minor. The complete current-build distinction, including device storage, earlier accounts, Apple TestFlight, and deletion limits, appears in the Privacy Policy.

Before distributing another build that can restore those accounts, LogNormal must inventory the consent and notice provenance for earlier learner records. Records without adequate evidence must remain quarantined from use and be deleted or reauthorized through an approved process.

Depending on the final enabled features, a guardian-managed profile may involve an adult account email or display name; a learner display name; country or region; coarse age band; app-generated account, learner, installation, attempt, and session identifiers; authentication and retained-session metadata; household roles and guardian relationships; authorization, notice, agreement, and consent records; authorized-device state; and parental course controls.

Learning information may include exercises and modes used; attempts and checked outcomes; error categories; assistance and timing; progress and session summaries; resume checkpoints; and mathematical work the learner enters where an exercise needs it for operation or restoration.

The adult supplies the account and learner-profile details and chooses parental controls. The app generates learning activity and identifiers needed to operate and restore the experience. When an account service is used, the device and network connection may also provide an app-generated device identifier, device name, IP address, and request headers needed for authentication, security, and service delivery.

If an adult permits a child to use a TestFlight build, Apple may collect and make available the tester’s name or email, installation and session activity, crash and performance details, build and device identifiers, hardware and operating-system details, network information, and optional feedback or screenshots. A screenshot or feedback report can contain child information the tester chooses to include. Families should not include unnecessary child information.

LogNormal does not need a child’s precise location, contacts, microphone, photos, health information, payment-card details, or advertising identifier for the approved consumer MVP. The reviewed app does not request access to those device categories.

Information may come from the adult account holder or an eligible self-managed learner; from activity in the app; from the device, operating system, and network connection; from an earlier account; and from Apple when the family chooses an Apple service.

LogNormal uses this information, as applicable, to create and govern the learner profile; authenticate the adult account and authorized devices; operate exercises; preserve, synchronize, and display progress; restore work; apply parental course controls; choose or adapt later practice for that learner; prevent misuse; and answer support or privacy requests.

Learning information is not used to make decisions producing legal or similarly significant effects. The approved consumer MVP does not use a child’s information for advertising, targeted advertising, cross-service tracking, marketing profiles, or public posting.

Before LogNormal collects, uses, or discloses personal information online from or about a learner under 13—or otherwise below the applicable jurisdictional threshold—through the app, account service, TestFlight, website, or another provider acting for LogNormal, including profile or progress records and device, network, or online identifiers, the approved design requires LogNormal to give the guardian a direct notice describing the information, purposes, providers, disclosure, retention, and available controls, and to obtain authorization through the method required for the enabled jurisdiction and activity. A specific activity may proceed without prior authorization only if qualified counsel documents a lawful exception and LogNormal limits that activity to the exception’s permitted purpose, data, use, disclosure, and retention.

The guardian must take an affirmative action after seeing the applicable notice. A generic age or authority confirmation is not a substitute for that notice. LogNormal must keep versioned evidence of the notice and authorization and provide a way for an authorized guardian to withdraw it.

The current native implementation has not yet passed this requirement. No statement on this page should be read as claiming that guardian-managed cloud collection is operational or legally qualified today.

For the approved consumer MVP, information may be disclosed only as needed to service providers operating LogNormal; to Apple when a family chooses an Apple service or an App Store transaction requires it; to the authorized account holder or guardian; to advisers under appropriate duties; or as reasonably required for safety, fraud prevention, legal process, or protection of rights.

Supabase hosts the earlier account service, but the exact production region, contract, subprocessors, backup lifetime, and protections for information associated with minors remain release-verification items. Vercel processes requests to the public website; the website does not receive app learning records. Apple independently processes App Store and selected Apple-service information.

The reviewed LogNormal app and website do not sell a child’s personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or operate an advertising network. No school, tutor, or other learner receives access under the approved consumer MVP unless a future feature is separately designed, disclosed, and authorized.

Subject to applicable law and lawful exceptions, an authorized parent or guardian may refuse cloud collection for a child, review the child’s personal information, request a portable copy, correct it, ask LogNormal to stop further collection or use, withdraw authorization, and request deletion. Where a learner has a separate legal right, LogNormal will provide the applicable access or action to that learner as well.

LogNormal may verify the requester’s identity and authority using information proportionate to the request. It will not ask for a password or authentication token. A request concerning a child should come from an adult and should not include unnecessary information about the child.

The receiving inbox is available, but the guardian request and authorization workflows remain subject to release verification. Publishing an email address does not itself establish those protections.

contact@lognorm.al

Local learning histories use several different limits described in the Privacy Policy; not every local record currently has a time limit. An active cloud account retains profile and learning history to preserve longitudinal progress. The current dormant-account design begins a twelve-month notice period after seven years without meaningful activity, but the necessity and proportionality of that period for children’s information requires final legal approval.

Confirmed account deletion revokes access and begins deletion from the live account service immediately, subject to limited temporary records and provider backups described in the Privacy Policy. The maximum provider-backup lifetime has not yet been verified. Guardian-authorization challenge and grant records also lack a verified timed purge. LogNormal has not adopted a maximum retention period for TestFlight data or feedback. All three are launch blockers.

A guardian may ask LogNormal to stop future collection or delete a child’s cloud information without having to continue a paid service. Deleting an account does not itself cancel an Apple subscription; the adult must manage or cancel that subscription through Apple.

The reviewed implementation contains technical controls including authenticated access, authorization rules, device registration, encrypted network transport, platform-protected storage, and deletion mechanisms. Those controls do not establish a complete child-information security program. Before child cloud collection, LogNormal must designate a program owner, adopt a written security program, assess and test risks on a recurring schedule, verify provider assurances, and test the actual account, guardian, credential, recovery, and deletion paths. No system is completely secure.

If LogNormal materially changes how it collects, uses, or discloses children’s information, it will update this notice and provide any new direct notice or guardian choice required before the change applies. Historical versions and effective dates must be preserved.

LogNormal LLC is a Wyoming limited liability company. The receiving inbox is available, but the approved operator details and family privacy workflow must be completed before the corresponding release.

This public notice does not itself authorize collection that requires direct notice or guardian authorization.

contact@lognorm.al