← Back to home

Privacy Policy — BrainLab Kids

Pre-launch draft — pending review by a UAE-qualified legal counsel before the product is marketed to paying customers or opened to children outside a controlled pilot. This policy is published in good faith to support the current validation phase.

Effective date: 20 April 2026
Last updated: 20 April 2026
Data Controller: New World Education (operating BrainLab Kids), Dubai, United Arab Emirates
Contact for all privacy matters: khurram@newworld.education

1. Who we are and what this policy covers

BrainLab Kids is a web platform operated by New World Education from Dubai, UAE. We make cognitive-science activities ("Labs") for children aged 7 to 13. This policy explains what information we collect from parents and their children, how we use it, who we share it with, and the rights you have over it.

This policy covers everything at brainlabkids.spotlightdubai.com and any related emails we send you. It applies to parents who create an account, children whose profiles sit under those accounts, and visitors who join the waitlist.

2. The principle behind this policy

Children's data is handled to a higher standard than adult data. We collect the minimum we need to make the product work, we don't sell anything to anyone, we don't use children's data to train AI models, and we give parents full visibility and control over what their children do on our platform.

If this policy ever stops being true, we will tell you before we change anything — not after.

3. What we collect

3.1 From parents (account holders)

  • Email address
  • Password (stored only as a salted hash)
  • Full name (optional)
  • Country
  • Preferred language
  • Timestamps of account creation and last login
  • IP address (logged briefly for security)

3.2 From children (as added by parents)

  • First name only (never surname)
  • Age band (7-9, 9-11, or 11-13 — we do not store exact birthdate)
  • Chosen avatar emoji
  • Lab activity: which Labs were played, scores, difficulty level, timestamps
  • XP earned per Lab and per brain region
  • Conversations with Neo, our AI guide (see Section 6)

3.3 From children during specific Labs

Camera, microphone, and motion data is processed locally in the child's browser only. It is never transmitted to our servers and is never recorded. Only the numeric score is saved.

3.4 What we do not collect

  • Children's real full names, addresses, schools, or photos
  • Tracking pixels, behavioural advertising cookies, or third-party advertising networks
  • Location data beyond country-level inference from IP address
  • Payment information (not yet applicable)

4. Why we collect it

We process your data for account management, saving Lab progress, sending service emails, responding to Neo AI queries, improving the product via aggregate stats, security, and legal compliance. We do not use children's data for profiling, behavioural advertising, or automated decision-making.

5. COPPA compliance (US families)

We require verifiable parental consent before child profile creation. Children cannot create accounts independently. Parents can view, export, and delete all child data at any time. We do not show ads to children.

6. Neo AI — how conversations are handled

Messages are sent to Anthropic (Claude AI) for processing. Anthropic does not train on API customer data by default. All conversations are logged for parent review. Neo is limited to 20 messages per child per day and restricted to brain science topics only.

7. Who we share data with

Supabase (database), Vercel (hosting), Anthropic (AI), Resend (email). We do not sell data. We do not share with advertisers or data brokers.

8. Data retention

Active account data kept while account is open. Inactive accounts deleted after 24 months. Security logs retained 90 days.

9. Security

HTTPS encryption, password hashing, row-level security, encrypted environment variables, principle of least privilege. We notify affected users within 72 hours of any breach.

10. Your rights

Access, correction, deletion, portability, restriction, objection, consent withdrawal. Email khurram@newworld.education. Response within 30 days.

11. Contact

Email: khurram@newworld.education
Response time: 48 hours on UAE business days.

This document is written in plain English deliberately. If any part is unclear, that is our failure and we would like to hear about it.