What we store

These records live in EduCare's database and are tied to your parent account. Only you and your own learners can read your rows; other families cannot.

• Parent account: your email address, and a securely hashed password held by our authentication provider. We never see or store your password in readable form.
• Learner profiles: the first name or nickname you enter, the grade (4–7), and the subjects you enrolled. No ID numbers, no addresses, no school records.
• Consent records: a timestamped, permanent note of which Privacy Policy and Terms version you accepted at signup. These are deliberately not editable or deletable, so the record stays trustworthy.
• Contact methods for verification: the email address (and, once a provider is connected, the mobile number) you choose to verify with, plus short-lived one-time codes stored only as a hash.
• Subscription state: plan, trial and grace-period dates, and a log of subscription events. No card numbers — payment processing is not connected yet.
• XP and rewards: the reward XP ledger (what was earned and what was spent), reward requests, parent approvals and fulfilment status. Lifetime XP is kept separate from spendable XP.
• Study Boost: whether a 24-hour boost is active, when it started, and how it was granted.
• Projects: the project title, subject, hand-in type, due date, stage, the teacher's instructions you typed or captured, your checklist and timeline, your own notes, and any source details you typed in yourself.
• Founders Challenge (part of the Founding Class of 2026): qualification status, the parent confirmation, and campaign events, only if you take part.
• Local Heroes, video lessons, isiXhosa Maths translations and bursary listings: these are our curriculum content, with review and source information kept for our admin team.
• Administrative audit records: an append-only log of admin actions, and of child-profile deletions (who deleted what, and when).
• Delivery records: whether an email or critical notice was accepted or bounced, so we can warn you if messages are not reaching you.

Some learning data never leaves the device it was created on. It is stored in your browser and disappears if you clear the browser's site data.

• Practice and answer logs: which questions were attempted, right or wrong, and the mistake patterns used to spot struggling topics.
• Daily AI usage counts against the allowance you set.
• Avatar choice, Study Mode setting and other display preferences.
• Offline bundles: downloaded lesson text and questions, plus work completed offline, held in the browser's own storage until it can sync.

When offline work syncs, only the outcome (such as verified XP) is sent, and the sync is idempotent — the same work cannot be counted twice.

• Learner-to-learner messages — EduCare has no peer chat, friend lists, groups or inboxes at all.
• Homework photos. A photo taken in the camera/OCR flow is resized on the device, read once, and then discarded. Only the text that is shown to you for correction is kept.
• Voice recordings. Read-aloud and speech input use your device's own built-in voice features; no audio is sent to or saved by EduCare.
• Full AI conversation transcripts. Homework helper conversations are held in the browser for the current session and are not written to our database, which is why the parent view shows outcomes only.
• Passwords in readable or plain text.
• School marks. EduCare never invents or infers a mark, report or assessment result for your child.
• Unnecessary sensitive personal information: no ID numbers, race, religion, health information, home address or precise location.
• Advertising or tracking profiles. We do not sell personal information and do not use your child's data for ad targeting.

You can ask us at any time for a copy of your child's data, ask us to correct it, or ask us to delete it. You can also delete your whole account yourself under Account settings → Delete account (see Delete your account). Email support@educareapp.co.za. Device-only data can be cleared by you at any time by clearing the browser's site data on that device.

The longer legal wording is in the Privacy Policy, and how we protect the data is on the Data & Security page.