Privacy

How we handle your child's data.

This page is the honest version of what we do today and what we're committing to before public launch. If anything here changes, we'll update this page.

What we collect

Parent account: your email and name. Child profile: first name, age, grade, school (optional), chosen tutor persona. Conversations: every message between your child and Echo, plus any homework PDFs you upload. Voice sessions are transcribed and stored as text on our side.

What we DON'T do

  • We do not sell your data.
  • We do not use children's conversations to train public AI models.
  • We do not share child data with advertisers or analytics third parties.
  • We do not retain voice audio recordings — only the text transcript.

Who processes what

Conversation data is sent to large language model providers (Anthropic Claude, Google Gemini) and a voice provider (ElevenLabs) only for the duration of producing a response. Each provider's data-processing terms apply for that specific call. We've chosen providers that contractually commit to NOT training their public models on enterprise/API traffic — but the legal arrangement is theirs, not ours.

Compliance

We're designing for POPIA (South Africa), GDPR (EU), and COPPA principles (US, ages under 13) from day one — parental consent, data minimisation, the right to delete. A formal independent audit is planned before public launch and we'll publish the results.

Your controls

From your dashboard you can: read every conversation your child has had with Echo, delete individual conversations or the entire account, and stop generation of new content at any time. Account deletion removes all child conversations, uploaded PDFs, and weekly digests within 30 days.

Contact

Email privacy@cu3e.co.za with any privacy concerns. We respond within one business day.

Last updated · this page evolves as our practices do