Privacy

Who we are

Zelkivo is run by Zelkivo, which is responsible for the data described here. Questions or requests go to support@zelkivo.com.

What we keep

• Parents: first and last name, email, phone number and password. The password is checked by our sign-in provider and stored only as a hash.
• Schools: the school's name, optional city, country and office email, and each staff member's name, email and password.
• Children: the name they go by, a username, an optional age group and a PIN. The PIN is stored only as a hash. We never ask a child for an email address, a phone number or a photo.
• Learning: lessons started and finished, answers, code a child writes and runs, hints used, XP, badges, streaks and an estimate of time spent.
• Payments: the plan, payment dates, amounts and the last four digits of the card. Card numbers are entered on Paystack's page and never reach us.

Why we keep it

To run lessons, check code, show progress to the adults responsible for a child, send the updates a parent asks for in Settings, take payment for a plan, and keep accounts secure. We do not sell data, show adverts, or use a child's work to profile them for anyone else.

Who can see a child's work

• A parent sees their own children and no one else's.
• A school's staff see the students on its roster, under the name the school entered. Teachers see only their own classes.
• Other learners only ever see a first name and last initial, with XP, on leaderboards, and only when the child's account is opted in. Contact details never appear on a board.

Services that process data for us

• Supabase hosts the database, sign-in and stored images.
• Paystack takes card payments for plans.
• An email provider delivers the account and progress emails a parent turns on.
• When our own staff write courses with AI help, the course outline goes to an AI provider. No child's data is sent.

A child's code runs in a sealed sandbox with no internet access and no access to anyone's data.

Cookies

We use one cookie to keep you signed in. There are no advertising or third-party tracking cookies.

Children and consent

A parent who creates a child's account consents to the child using Zelkivo. A school that adds students is responsible for having permission from their families under the school's own policies.

How long we keep it, and your choices

We keep data while the account is open. A parent can see, change or remove a child's details at any time, and can close the whole account from Settings. Closing removes children's names and PINs so they can no longer sign in; lesson history can remain without those names. Payment records are kept for as long as tax and accounting law requires.

To ask for a copy of your data, a correction or deletion, write to support@zelkivo.com.