Privacy Policy

Flavoureak UK Ltd, trading as CurioKids ("CurioKids", "we", "us") runs the CurioKids website, web app and mobile apps, and the live online English lessons we give through them. We are the controller of the personal information described here: we decide how it is used, and we are responsible for looking after it. CurioKids is a trading name of Flavoureak UK Ltd, registered in England and Wales, company number 16410737. Registered office: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.

Because we are a UK company, the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018 apply to how we use personal information. Singapore’s Personal Data Protection Act also applies for families in Singapore, and Malaysia’s Personal Data Protection Act for families in Malaysia.

This policy explains what we collect about parents and guardians, children, teachers and people who apply to teach, and visitors to our website; why we collect it; who we share it with; how long we keep it; and your choices and rights. Our Terms of Service and Cookie Policy also apply.

For any question or request about your personal information, email hello@curiokidslearning.com.

When you create a parent account

• Your first and last name, email address and a password. We store your password only in a scrambled form that can’t be turned back into it.
• Your country (Singapore or Malaysia) and your time zone, so we can show your prices and lesson times.
• Your child’s first name, age and first language.
• That you are your child’s parent or legal guardian and agree to our Terms and this policy.
• Where we offer them, your choices about messages from us: emails with tips, offers and news, WhatsApp messages about your child’s lessons, offers and news on WhatsApp, and requests to review your child’s teacher. Each choice is optional, has its own box and starts unticked. If you tick a WhatsApp box, we also collect the mobile number it is for. For each box we keep a record of the words shown next to it, whether you ticked it, and when and where you answered, with the IP address and browser or app used. Changes you make later in Settings, and unsubscribing, are recorded in the same way.
• A referral code, if a friend referred you.

Details you can choose to add

• More about your child: gender, school and school year, interests, learning goals, anything about their learning needs you want the teacher to know, and notes for the teacher. All of these are optional. Please share only what helps the teacher teach your child.
• Your phone number, in Settings.
• More children on your account.

Lessons and learning

• The lessons you book, move or cancel, and whether your child attended.
• Your child’s English level: the level you choose when you sign up, the teacher’s assessment in the first lesson, later assessments, progress, homework and game results, and certificates.
• The feedback teachers write after lessons.
• In the live classroom, video and audio pass between your child and the teacher so they can see and hear each other. We don’t keep them unless the lesson is recorded (see Lesson recordings). Messages typed into the classroom chat, on the website or in the app, are saved and automatically checked for contact details and bad language.
• Messages between you and teachers or our team, support requests, and any concern you report.

Payments

• When you choose a plan, you enter your card details in a payment form provided by Stripe. They go straight to Stripe: we never see or store your full card number.
• We keep your plan, how often you pay, the price locked on your subscription, payment status, invoices, refunds and any account credit.

Sign-in, security and your devices

• Sign-in records, including failed attempts, and the one-time sign-in codes we email you.
• Records of your agreement: when you sign up or add a child, we record what you agreed to, the version of the document, the date and time, your IP address, the country your connection came from and your browser type.
• Your notification settings and, if you allow notifications, a notification token for your device or browser.
• In the mobile app, access to your camera and microphone, which is used for live lessons.
• Technical information our servers record when you use CurioKids, such as your IP address, browser type and what was requested, to keep the service working and secure.
• If you allow analytics cookies, reports of errors in your browser on our website and app: what went wrong, the page address without anything after a “?” or “#”, your browser and device type and the steps just before it, with personal details removed (see Sentry under Our service providers).

How you found us

When you visit our website we remember, for 90 days, how you first arrived: the campaign tags in the link you followed, the page you arrived on, the website that sent you and when. If you allow advertising cookies we also keep the ad’s click ID. If you sign up or send us a message, we save this with your account or your message, so we can tell which of our marketing works.

If you contact us

Your name and email address and, if you give them, your phone number, your child’s age, your country and your message. We also record the IP address and browser used, to protect our forms from spam. If the form asks about messages from us, we record your choices as we do when you create an account. If you email us, we receive your email and anything in it.

If you teach with us or apply to

• Your name, contact details, country and time zone, profile, teaching experience, qualifications, the languages you speak, the ages and levels you prefer to teach, your availability and your introduction video.
• Documents you upload, such as teaching certificates, degrees, proof of identity, background checks and references, and our team’s review of your application.
• Your signed teaching agreement, with the name, signature, date, IP address and browser used to sign it.
• Your bank details for payouts (stored encrypted), the lessons you teach, the feedback you write, and your pay records and payslips.

• To teach your child: set up your account, match your child with a teacher, book and run lessons, and share feedback and progress with you.
• To take payments: charge you through Stripe, apply the price locked on your subscription and any offer, send invoices and handle refunds.
• To keep children safe: check teachers before they teach, look into concerns, keep records of lessons and classroom chat, and stop contact details being shared.
• To keep you informed: booking confirmations, lesson reminders, feedback, billing and account messages, by email, in the app and by push notification if you allow it.
• To send news and offers: only if you said yes.
• To run and improve CurioKids: fix problems (with error reports from your browser only if you allow analytics), prevent fraud and misuse, and understand how the service is used.
• To measure our marketing: see which campaigns bring families to us, using analytics and advertising cookies only if you allow them.
• To meet our legal duties: for example keeping accounting records and answering lawful requests.

We use your information and your child’s to provide the service you asked for, with the consent you gave when you signed up and any further choices you make (such as marketing emails or cookies), where we have a legitimate need such as keeping CurioKids safe and secure, and where the law requires it.

• A parent or guardian is always in charge. Only a parent or legal guardian can create a child’s profile, and they agree to this policy for the child. Children can’t create their own accounts.
• Only what we need. We ask for a child’s first name, not their surname. Apart from their age and first language, everything else about your child is optional.
• Who can see it. Your child’s teacher sees what they need to teach your child, such as first name, age, level and the notes you added. Teachers see children’s learning records only for the children they teach. Authorised CurioKids staff can see it to run lessons, support you and keep children safe.
• Child mode. You can let your child use CurioKids in child mode, protected by your own PIN. Messaging isn’t available in child mode, and teachers can’t send messages to children.
• No advertising. We never use children’s information for advertising and never sell it. There are no ads or third-party trackers in the classroom or the children’s app.

Our classroom can record lessons (video, audio and the shared whiteboard) using our video provider’s recording service. We record lessons to protect children and teachers, to look into concerns or complaints, and to check the quality of teaching.

• Before a lesson in the web classroom, everyone sees a notice that the lesson may be recorded.
• Recordings are kept in our storage on Amazon Web Services in Singapore.
• Only authorised CurioKids staff can watch them. We never use recordings for advertising and never publish them.
• We delete recordings after 90 days, unless we need to keep a particular recording longer because of a safeguarding concern, a complaint or a legal claim.
• You can ask for a copy of a recording of your child’s lesson by emailing hello@curiokidslearning.com.

We can send you a short summary of a lesson, drafted by an AI model from the feedback your child’s teacher wrote. Summaries are off by default: we only create one if you ask for it, or if you have chosen to receive them.

• The AI model receives your child’s first name, the teacher’s name and the teacher’s written feedback. It doesn’t receive recordings.
• We use Anthropic’s Claude model through Amazon Bedrock, part of Amazon Web Services, in the Asia-Pacific region. Amazon Bedrock doesn’t use this information to train AI models.
• Every summary is labelled as drafted with AI from the teacher’s notes, and the teacher’s own feedback stays available to you.
• Teachers can also use AI tools to help prepare lesson materials. These tools are given topics and levels, not children’s personal information.

We never sell personal information. We share it only as described here.

Teachers

Your child’s teacher sees what they need to teach your child and give feedback.

Our service providers

These companies handle information for us, only to provide their service to us:

• Amazon Web Services (AWS)

  What they do

  Host our servers, database, files and backups; send email (Amazon SES); draft AI lesson summaries when you ask for one or have chosen to receive them (Amazon Bedrock).

  Where

  Singapore for hosting, files and backups. Amazon Bedrock runs in the Asia-Pacific region.

• Stripe

  What they do

  Take payments, run subscriptions, invoices and refunds, and pay teachers.

  What they get

  Your name, email address, card details and plan. We don’t send your child’s name to Stripe.

• Agora

  What they do

  Carry the live video and audio in lessons, and record lessons when a lesson is recorded.

  Where

  Live video is routed through Agora’s worldwide network to keep lessons smooth.

• Loops and Microsoft 365

  What they do

  Loops sends some of our emails. Microsoft 365 holds our email inboxes, so it receives the emails you send us.

• Apple, Google (Firebase Cloud Messaging) and Expo

  What they do

  Deliver push notifications to our mobile app, if you allow them. Web notifications you allow are delivered by your browser’s own push service.

• Sentry

  What they do

  Receive reports of errors so we can fix them: from our servers, and, only if you allow analytics cookies, from your browser on our website and app. Personal details such as names, email addresses and phone numbers are removed before a report is sent. Nothing is reported from the classroom, games, homework or child mode, and nothing records your screen.

  Where

  In the European Union.

• Twilio

  What they do

  Send WhatsApp lesson reminders to your phone number, only if we offer WhatsApp reminders and you turn them on.

• Google and Meta

  What they do

  Measure visits to our website and sign-up pages, and our ads. Their analytics and advertising cookies are used only if you allow them.

When the law or a child’s safety requires it

We share information with the police, child-protection services or other authorities when we believe a child is at risk, or when the law requires it.

If CurioKids changes hands

If CurioKids is reorganised or sold, your information may pass to the new owner, who must keep protecting it as this policy describes.

Our servers, database, files and backups are on Amazon Web Services in Singapore. AI-drafted lesson summaries are made by Amazon Bedrock in the Asia-Pacific region.

Some of the providers above handle information in other countries, including the United States: for example Stripe for payments, Agora for live video, our email and notification providers, Google and Meta. Sentry keeps error reports in the European Union. As a UK company, we are responsible for your information wherever it is held.

• Your account: for as long as you have an account with us.
• When you delete your account: we straight away remove your and your children’s names, email address and phone number, your children’s school, interests, learning needs and notes for the teacher; replace messages you wrote with "[deleted]"; delete the files stored for your account and recordings of your children’s lessons; and cancel your plan with Stripe. We keep some records linked only to an anonymous account: lesson and booking history, teacher feedback, assessments and progress, invoices and payment records, records of your agreement, the record of your message choices (what we asked, your answer and when, without your email address, phone number, IP address or browser details), and any safety reports. We keep them to meet our legal and accounting duties, to protect children, to show what you agreed to and to deal with any dispute.
• Copies held by providers: deleting your account doesn’t remove what Stripe and our email providers keep under their own policies. Email hello@curiokidslearning.com and we will ask them to delete it where they can.
• Just one child: deleting your account removes every child on it. To remove one child and keep your account, email hello@curiokidslearning.com.
• Lesson recordings: 90 days (see Lesson recordings).
• Error reports: Sentry deletes them automatically, within 90 days.
• Messages and enquiries you send us: while we deal with them and for as long as we need to follow up. We delete them if you ask, unless we must keep them for a reason explained in this policy.
• Payment and tax records: for as long as tax and accounting law requires.
• Safety reports and records of your agreement: for as long as we need them to protect children, to show that we had your agreement and to meet our legal duties.
• Teachers and applicants: while you teach with us or we consider your application, then for as long as employment, tax and safeguarding law requires.
• Backups: deleted information can stay in our backups until they expire, within 180 days.

Under the UK GDPR, and depending on where you live also under Singapore’s Personal Data Protection Act or Malaysia’s Personal Data Protection Act, you can:

• Get a copy. In Settings (Security, then Download my data), or in Settings in the mobile app, you can download your account, your children, plans, invoices, lessons booked and teacher feedback. For a copy of anything else we hold, such as messages, assessments or recordings, email hello@curiokidslearning.com.
• Correct it. Update your details and your child’s in Settings, or ask us.
• Delete it. Use Delete account in Settings (web or mobile app), or email us.
• Object or ask us to limit its use. You can object to us using your information where we rely on a legitimate need, and ask us to limit how we use it while a concern is looked into. Email hello@curiokidslearning.com.
• Change your mind. To stop news and offers, use the unsubscribe link in any of our marketing emails, change your choices in Settings, or email us. To stop AI lesson summaries, tell us or stop asking for them. To change cookie choices, use Cookie settings. If you withdraw your agreement to us using your child’s information, we can’t keep teaching your child, so we would close the account.
• Complain. Please contact us first so we can put things right. You can also complain to a data protection authority: in the UK, the Information Commissioner’s Office (ICO); in Singapore, the Personal Data Protection Commission (PDPC); in Malaysia, the Personal Data Protection Department (JPDP).

We may need to check it’s you before we act on a request. We will reply as soon as we can and within the time the law allows.

• Connections to CurioKids are encrypted (HTTPS).
• Passwords are stored only as secure hashes. Sign-in asks for a one-time code we email you unless you turn this off, and an account is locked for a while after repeated failed attempts.
• Card details are handled by Stripe and never reach our servers.
• Teachers’ bank details are encrypted in our database.
• Teachers see children’s learning records only for the children they teach, and our admin tools are only for authorised staff.
• Error reports have personal details removed before they leave our servers or your browser.
• We keep regular backups, in Singapore.

No system is perfectly secure. If a data breach is likely to harm you, we will tell you, and the authorities, as the law requires.

On our website and sign-up pages we use essential cookies (for example to remember your country, language and cookie choice), a cookie of our own that remembers how you found us, and, only if you allow them, analytics cookies (Google Analytics) and advertising cookies (Google Ads and Meta). In the app, the classroom and the children’s app we use only essential cookies. If you allow analytics, our website and app (never the classroom or the children’s app) also report errors to Sentry, which sets no cookies. Our Cookie Policy lists every one. You can change your choice at any time: cookie settings.

We update this policy when what we do changes. The version number and date at the top show which version you are reading, and we record which version you agreed to. If we make a significant change, we will tell you by email or in the app before it takes effect. Earlier versions are available on request.

Email hello@curiokidslearning.com about anything to do with your personal information, including requests to see, correct or delete it. You can also write to us at Flavoureak UK Ltd, 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.