This policy explains what information Bit Kido uses when you explore the lessons, create an account, make a purchase or contact support.
Accounts and purchases
Accounts and purchases are intended for parents or guardians. When you create an account, we store your email address, a password hash, language preference, account creation and email verification records, and login session records. Passwords are not stored as readable text.
We keep order identifiers, course access, payment and refund status, amounts, currency and transaction references to provide paid access, send receipts and handle payment questions. Creem hosts checkout; Bit Kido does not provide a form for collecting payment card details.
Learning progress and usage information
Lesson progress, entered calculator values, language and sound preferences are saved in your browser. They are not synced as a detailed learning record to your account. Clearing browser storage can remove this progress.
The website sends a limited set of events: landing-page views, lesson starts and completions, checkout clicks and confirmed purchases. We store the event name, time and a random visitor identifier. Events can also be linked to your account when signed in, and confirmed purchase events to an order. This includes use of the free lesson. These records are not completely anonymous.
These events help us understand how the website and course are used. The administrator view shows counts and conversion rates. We do not use a third-party analytics service or advertising trackers on the lesson pages.
Cookies, browser storage and security
A login cookie lasts up to 7 days. A first-party visitor cookie can last up to 365 days and is used for usage statistics and checkout attribution. Lesson progress and preferences in local storage have no automatic expiry. You can clear them using your browser settings; clearing or blocking cookies can affect sign-in and purchases.
Our application processes network addresses to limit abusive requests. It does not write raw IP addresses into the events table. Hosting and web-server logs may contain network addresses and request information for operation and security.
Payments, email and hosting
Creem receives your email address, the product, order and account identifiers, and checkout information to process payments and refunds. Its checkout and handling of payment information are covered by its own terms and privacy notice.
Resend sends account verification, password reset and purchase receipt emails. It receives your email address and the email contents, including the relevant verification link or order details. Messages you send to support are handled through the support mailbox. Please do not send passwords, full card numbers or unnecessary information about a child.
The application and database are hosted in Singapore. Payment, email, support-mailbox and infrastructure providers may process information in other countries under their own applicable safeguards and policies.
Children and parent-managed accounts
Children can use the free lesson without creating an account. Registration and purchases should be managed by a parent or guardian using their own email address. The lesson does not ask for a child's name, date of birth, photo, voice recording or location, but the technical and usage information described above is still processed.
If you believe a child has supplied personal information through an account or support message, contact us so that we can review the information and the available deletion options.
Retention, deletion and your choices
You can delete your account from the account page after confirming your password. This removes the account, login sessions, verification and reset tokens, course access, and events linked to that account. Orders are retained for payment records with the direct account and visitor links removed; transaction references remain.
Deleting an account does not clear progress stored in your browser, earlier events that were not linked to the account, support correspondence, or records held separately by Creem and email providers. It does not by itself request a refund. Existing backup copies, if any, are not erased by the account-deletion action.
Account records remain until deletion is requested. There is currently no fixed automatic deletion period for unlinked usage events or retained financial records. A cookie or link expiring does not mean that every related database record has been erased.
For questions or requests about access, correction or deletion, use the contact email below. We may need to verify that the request relates to your information. Your applicable privacy rights, including rights to object or complain to a relevant authority, are not limited by this policy.
Changes to this policy
We will update this page when the described practices change. The date above identifies the latest version.