1. Who We Are

Cognithix is operated by Alex Ghita, who acts as the data controller for the purposes of applicable data protection law.

Contact: blueflamegames@proton.me

2. Data We Collect

Parent account

• Email address
• Authentication ID
• Display name
• Purchase status (verified via Apple)

Child profile

• Name or nickname
• Curriculum settings
• Points and streak data

Learning and progress data (sent to cloud)

• Session-level aggregates only: attempted count, correct count, points earned, duration, timestamps, and topic
• Topic-level aggregates: sessions completed, average accuracy, and totals

Data kept local (on device only)

• Mascot state
• Character customisation
• Challenge state
• Wonder Trail progress
• Learning-plan rationale text

3. Data We Do Not Upload

Cognithix does not upload per-question submitted answers. Only aggregate counts (attempted, correct) are sent to the cloud.

4. Why We Process This Data

• Parent login and authentication
• Child profile management
• Delivering practice content (English, Verbal Reasoning, Non-Verbal Reasoning)
• Tracking progress and performance
• Restoring purchases

5. Legal Basis (UK GDPR)

• Contract performance — Article 6(1)(b): processing necessary to provide the service
• Legitimate interests — Article 6(1)(f): improving the app through aggregated analytics
• Legal obligation — Article 6(1)(c): compliance with applicable law

6. Children's Privacy

Child profiles are created and controlled by a parent or guardian. There are no independent child accounts. Children cannot create accounts or provide data without parental involvement.

7. Third-Party Services

• Google Firebase — authentication and cloud storage
• Apple Inc. — App Store distribution and in-app purchases

8. Data Retention

Data remains active while your account is active. Upon a verified deletion request, account and profile data will be deleted. Local data is removed when the app is uninstalled.

9. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict processing
• Data portability

To exercise any of these rights, contact blueflamegames@proton.me.

10. Security

We protect your data with authentication controls, encryption in transit, and Firestore security rules.

11. International Transfers

Your data may be processed outside your country of residence. Where this occurs, appropriate contractual safeguards are in place.

12. Changes

If we update this policy, we will revise the "Last updated" date and provide in-app notice where appropriate.

13. Contact