Privacy policy
Last updated 12 October 2026
Bright Belts makes learning tools for children, starting with NumNinja. We collect as little as we can, we never sell data, and there are no ads. This page explains exactly what we store and why, in plain language.
Trying without an account
When a child uses “Try it now”, their name, pet and practice stay in that browser on that device. Nothing about them is sent to us. If a parent later chooses to save that practice, it is copied into the child's profile as described below.
What we store about grown-ups
- Teachers and parents: email address (to send sign-in links) and the display name you choose.
- Parents: a record of your consent (when you agreed and to which version of this notice).
- Feedback you send us, and the email address you add to it if you want a reply.
What we store about children
- A first name or nickname, grade, birth year (year only), country and chosen pet.
- Their picture password or PIN, so they can sign in without an email.
- Their practice: each question, their answer, whether it was right, and how long it took. From this we work out belts, XP, streaks and what to practise next.
- Which class or family group they belong to.
We never ask children for an email address, photo, exact birthday, location or any free-text message. Children cannot contact other people through our tools.
Who can see it
- A child sees only their own progress.
- Parents see their own children. Teachers see the students in their classes.
- No one else, apart from the few services that run the app for us (below), and only to run it.
Consent
A child's profile is created either by a parent, who gives consent when setting it up, or by a teacher for classroom use under their school's authority. We follow the US Children's Online Privacy Protection Act (COPPA) and similar laws in the UK, EU and India.
Services we use
- Supabase: database and sign-in (servers in the United States).
- Vercel: hosts the website.
- An email service to send sign-in links to grown-ups.
None of them may use your data for their own purposes. We don't use advertising or tracking cookies; the only cookie keeps you signed in.
Keeping and deleting data
- Parents can delete a child's profile and all of its practice at any time from the child's settings page. It is removed immediately.
- Teachers can remove a student from a class. To delete a classroom student's data entirely, email us.
- To delete your own account, or to get a copy of your data, email hello@brightbelts.com.
Changes and contact
If we change this policy in a way that affects your child's data, we'll ask parents to agree again. Questions? Email hello@brightbelts.com.