Privacy, in plain language.
Bilhaif is designed for families. Parents control family accounts and child access; children never receive access to parent dashboards.
Information we handle
We use a parent’s name, email address, authentication records, and family settings. Child profiles may contain a first name, school year, weekly target, accessibility preferences, and learning activity. Child PINs are stored only as secure hashes, never as readable PINs.
Why we use it
We use this information to provide account access, keep parent and child spaces separate, personalise learning, show progress, prevent abuse, and improve reliability. We do not sell personal information or use child learning activity for advertising.
Services and security
Supabase provides authentication and database services, and Vercel hosts the application. Access is restricted by role, sensitive server credentials are not sent to browsers, and child-session cookies are signed and HTTP-only. Security logs may retain short-lived, pseudonymous attempt data to protect child PINs.
AI features
The learning helper is always labelled as AI. The current Family Beta uses prepared helper content and does not send child learning responses to an external AI model. If that changes, this notice and the relevant parent controls will be updated first.
Parent choices
Parents can update child details, reset a child PIN, and end earlier child sessions. Requests to access, correct, export, or delete family data can be made through the contact channel supplied with the Family Beta invitation.
Retention and changes
We keep account and learning information only while it is needed to provide and secure the service, meet legal obligations, or resolve issues. We will publish material changes here before expanding beyond the Family Beta.
This notice describes the current product behaviour; jurisdiction-specific legal review remains part of public-launch preparation.