Privacy Policy

Bodkas (bodkas.com) is an educational platform operated by:

Privacy contact: [email protected]

This Privacy Policy explains how Bodkas processes personal data when you:

• Visit or use the Bodkas website
• Create or use a Bodkas account
• Use Polyglot or Sciences
• Use a Solo or Family subscription
• Create or use learner profiles within a Family account
• Receive Family progress emails
• Contact support
• Use Bodkas applications distributed through supported app stores

Bodkas is designed around data minimisation. We collect only what is needed to operate the service. Bodkas does not require a child's email address, phone number, precise location, school address or real photograph to provide the Family learning experience.

For an account owner, we may process:

• Google authentication information to establish the Bodkas account
• An email address if provided by Google authentication
• A display name or nickname
• Subscription and entitlement state
• Learning progress (SRS scores, streaks, session history)
• Technical security logs
• Payment processing records (via our payment provider — no card data stored by Bodkas)

Payment records are managed by Paddle (our merchant of record). Bodkas does not store card numbers or full payment details.

Learner profiles under a Family account contain only what is needed to provide the learning experience:

• Learner profile ID (internal)
• Display name or nickname (chosen by the account owner)
• Product access state
• Learning progress
• Optional avatar reference

A learner profile does not require a personal email, phone number, school name, precise location or real photograph.

V1 Bodkas authentication uses Google OAuth. Bodkas stores an internal identifier derived from the Google account. We do not store your Google password. Your Google account terms apply to the authentication flow.

Legal bases may include:

• Performance of a contract — to provide learning services, subscriptions and entitlements
• Legitimate interests — security, fraud prevention, service improvement
• Legal obligations — where law requires retention or disclosure
• Consent — where required for specific optional processing

We aim to retain data only as long as necessary:

• Active account data: retained while the account is active
• Deleted accounts: learning progress deleted within 30 days of confirmed deletion request, subject to legal obligations
• Payment records: retained as required by applicable accounting law
• Security logs: retained for a limited period for fraud and security purposes

Depending on your jurisdiction, you may have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Delete your account and associated data
• Restrict or object to processing
• Data portability (where applicable)
• Withdraw consent (where processing is based on consent)
• Lodge a complaint with your supervisory authority

To exercise these rights, contact: [email protected]

Bodkas Family learner profiles are designed to minimize data about learners. The account owner (parent) is responsible for managing learner profiles and ensuring use is appropriate. Bodkas does not independently verify the age of learners. If you believe a learner's data has been processed incorrectly, contact us at [email protected].

Bodkas uses third-party providers to operate the service. These providers process data on our behalf and are contractually required to protect it.

We may update this policy. We will notify registered users of material changes at least 30 days before they take effect, where required by applicable law.

For privacy questions or to exercise your rights: [email protected]