Privacy Policy
Policy version: 2026-06-02
Effective date: June 2, 2026
Controlling language: English
Language notice: The English version of this Privacy Policy is the official and controlling text. The Ukrainian translation is provided for convenience. In case of any discrepancy, conflict, or misalignment between the English and Ukrainian versions, the English version prevails.
1. Our Commitment
Bright Kids Ukrainian Online School is committed to protecting your privacy. In plain language:
- We do not sell your personal information.
- We do not share your personal information with third parties or affiliates for their advertising, marketing, or data-broker purposes.
- We collect only the information needed to provide online classes, scheduling, trial registration, and communication about your enrollment.
- The Bright Kids mobile application is free of third-party advertising and does not use cross-app tracking.
- A small number of infrastructure providers (listed in Section 8) process data only on our instructions to operate the service — not for their own marketing.
We are an ad-free educational service. We do not build advertising profiles and we do not monetize your data.
2. Who We Are
Data controller:
BRIGHT KIDS UKRAINIAN ONLINE SCHOOL LLC
701 Brazos St, Austin, TX 78701
Contact (privacy requests):
school@brightkids.online
Website: https://brightkids.online
This Privacy Policy applies to:
- The Bright Kids iOS mobile application (the App)
- The Bright Kids website at brightkids.online (the Website)
- Related communication about enrollment, trial lessons, and online classes
The App is designed for parents and legal guardians (adults). Children do not create their own accounts. Information about students is entered by a parent or guardian.
The App is an information and enrollment hub. Live online classes, if you enroll, are delivered through separate platforms and arrangements chosen by the school — not through the App itself.
3. Scope and Roles
| Role | Description |
|---|---|
| You (Parent/Guardian) | An adult who creates an account, manages student profiles, and schedules trial lessons |
| Student | A child whose information you provide; no direct student login in v1 |
| Services | Information about courses, teachers, schedules, pricing; account management; trial registration |
For information about student data specifically, see our Children's Privacy Notice.
4. Information We Collect
We practice data minimization. We collect only what is necessary for the purposes described below.
4.1 Parent / guardian account
| Data | Purpose | Required? |
|---|---|---|
| Name (from you or OAuth provider) | Account, communication | Yes |
| Email address | Account, service messages | Yes |
| OAuth provider identifier (Apple, Google, Facebook) | Sign-in | If using social login |
| Date of birth | Age verification (18+) | Yes for full account |
| Contact phone | Scheduling, school contact | Optional but recommended |
| Location / time zone | Class scheduling | Optional |
| Social profile links | Optional contact | Optional |
4.2 Student profiles (entered by parent/guardian)
| Data | Purpose | Required? |
|---|---|---|
| Child's name | Enrollment, scheduling | If adding a student |
| Date of birth or age | Course fit, scheduling | If adding a student |
| Level / interests | Course recommendations | Optional |
We do not collect student data directly from children. See the Children's Privacy Notice.
4.3 Trial and contact forms
| Data | Purpose |
|---|---|
| Name, email, phone, message | Trial lesson requests, general inquiries |
Form submissions are delivered to school email inboxes via our secure server (see Section 8). Once delivered, those emails are school administrative records; the school controls how long they are kept in its inboxes.
4.4 Technical and security data
| Data | Purpose |
|---|---|
| App version, device type, locale | Support, security |
| IP address (server logs) | Abuse prevention, security |
| Consent records (policy version, timestamp) | Legal compliance |
4.5 Device security (optional)
If you enable Face ID or Touch ID to unlock the App, your preference is stored locally on your device (Apple Keychain). We do not receive, store, or process biometric data on our servers.
4.6 Third-party contact channels
The App may offer links to contact the school through Messenger, SMS/iMessage, Telegram, Viber, or WhatsApp. When you choose one of these options, you leave the App and use a third-party service governed by that provider's terms and privacy policy.
Messages you send through those channels are handled by that provider and school staff. They are not stored in the App unless you also submit the in-app contact form. We are not responsible for how third-party messaging providers process your communications.
5. Information We Do NOT Collect
Unless we tell you otherwise in an updated policy, we do not collect:
- Advertising identifiers (IDFA) or use cross-app tracking
- Precise GPS location from the device
- Contacts, photos, or camera/microphone content through the App
- Class video or audio recordings through the App
- Biometric data on our servers (Face ID/Touch ID stays on your device)
- Payment card data through the App (in-app payments are not offered in v1)
- Information for behavioral advertising or data-broker sale
The App does not display third-party advertisements. Online classes are not conducted inside the App; any video, audio, or chat during live classes happens on separate platforms (for example, video-conferencing tools) under arrangements communicated by the school. Those platforms have their own privacy practices.
6. How We Use Information
We use personal information only for:
1. Providing the Services — account access, course information, trial registration, scheduling coordination
2. Communication — responding to inquiries, trial confirmations, service-related messages from the school
3. Security and abuse prevention — rate limiting, honeypot protection on forms, protecting our systems
4. Legal compliance — records required by law, responding to lawful requests
5. Improvement — understanding aggregate usage to improve the App (without selling data or ad profiling)
We do not use your information for third-party advertising. Marketing emails (if any) require a separate opt-in and are not part of the core service.
7. Legal Bases for Processing
Depending on your location:
| Basis | Applies to |
|---|---|
| Consent | Account creation, privacy acknowledgment, personal data processing consent, parental consent for student data |
| Contract / pre-contractual steps | Trial registration, enrollment communication |
| Legitimate interests | Security, fraud prevention, improving the service (balanced against your rights) |
| Legal obligation | Compliance with applicable law |
For users in the European Economic Area or UK, you may withdraw consent where processing is consent-based. See Section 11.
For children's data in the United States, the App is directed to adults (parents and guardians). We do not permit children to create accounts. Student information is entered only by a parent or guardian who confirms parental consent through an in-app checkbox. We do not collect personal information directly from children through the App. Where applicable law requires verifiable parental consent beyond this mechanism, the school may request additional verification outside the App as part of enrollment.
8. Service Providers (Processors)
We use a limited set of service providers that process data on our behalf under contractual obligations. They may not use your data for their own marketing.
| Provider | Role | Data processed |
|---|---|---|
| Google Firebase | Authentication, account and profile storage (Firestore) | Account data, student profiles, consent records |
| Netlify | Serverless hosting for form API | Form submission payloads, IP (logs) |
| Amazon SES | Transactional email delivery | Form/leads content, recipient delivery |
| Apple Sign-In | Authentication (if chosen) | Name, email (per Apple settings) |
| Google Sign-In | Authentication (if chosen) | Name, email, Google user ID |
| Facebook Login | Authentication (if chosen) | Name, email, Facebook user ID |
School email inboxes: Form and trial submissions are delivered to school staff email addresses (for example, school@brightkids.online). Those inboxes are operated by the school as part of its administrative records. Retention of delivered emails is governed by school policy, not the App backend. Account deletion in the App removes data from Firebase; it does not automatically delete copies already in school inboxes.
We do not authorize these providers to sell your personal information. We do not share personal information with affiliates for marketing.
If we add providers, we will update this policy.
9. International Data Transfers
Bright Kids is based in the United States. If you access the Services from outside the US (including Ukraine, the EU, or the UK), your information may be processed in the US and other countries where our providers operate.
Where required by applicable law, we rely on appropriate safeguards for transfers from the EEA, UK, or Switzerland, including Google's Firebase/Google Cloud Data Processing Terms and Standard Contractual Clauses (2021) incorporated into those terms, or other lawful transfer mechanisms available at the time of processing. We do not represent that additional safeguards beyond our providers' contractual commitments apply unless required by law.
10. Retention and Deletion
| Data | Retention |
|---|---|
| Account and profile data | While your account is active |
| Student profiles | While your account is active or until you delete them |
| Consent records | Up to 3 years after account deletion or the last consent event (whichever is later), then deleted or anonymized, unless a longer period is required by law |
| Form/lead emails in school inboxes | Per school administrative policy (outside App backend control) |
| Server logs | Up to 90 days, then deleted or anonymized |
Account deletion: You may delete your account in the App (Settings → Delete Account). See User Privacy Choices. We will delete or anonymize personal data in our systems within 30 days, except where retention is required by law or as stated above for consent records and logs.
Deactivation alone is not sufficient — we delete account data as described in our Privacy Choices page.
11. Your Rights
Depending on your location, you may have the right to:
- Access personal information we hold about you or your students
- Correct inaccurate information
- Delete your account and associated data
- Withdraw consent where processing is consent-based
- Object to certain processing
- Data portability (where applicable)
- Lodge a complaint with a supervisory authority (EEA/UK)
How to exercise rights: Email school@brightkids.online or use in-app account deletion. We may need to verify your identity.
California residents (CCPA/CPRA): We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
12. Children's Privacy
We do not knowingly permit children under 13 to create accounts. Parents and guardians enter student information under their account after providing parental consent in the App.
For full details, see our Children's Privacy Notice.
13. Cookies and Tracking
The App does not use third-party advertising cookies or tracking technologies.
The Website may use essential cookies for basic functionality. We do not use third-party advertising networks on the App. We do not request App Tracking Transparency (ATT) because we do not track you across other companies' apps or websites for advertising.
14. Regional Notices
United States — COPPA
The App is directed to adults. We require a parent or guardian to create the account and provide in-app consent before we collect student information entered under that account. We do not collect personal information directly from children through the App. Additional verification may apply where required for enrollment.
European Economic Area / United Kingdom — GDPR
You have the rights described in Section 11. Our legal bases are in Section 7. Contact us at school@brightkids.online for privacy requests.
Ukraine
We respect the rights of data subjects under the Law of Ukraine "On Personal Data Protection" (as amended). You may withdraw consent without giving reasons by contacting us.
15. Changes to This Policy
We may update this Privacy Policy. Material changes will be posted at https://brightkids.online/legal/privacy with a new effective date. We may ask you to re-acknowledge the policy in the App when changes are significant.
The policyVersion identifier (e.g. 2026-06-02) is stored with your consent records.
16. Contact Us
Privacy inquiries:
school@brightkids.online
Postal address:
BRIGHT KIDS UKRAINIAN ONLINE SCHOOL LLC
701 Brazos St, Austin, TX 78701
Related documents:
Last updated: June 2, 2026 · Policy version 2026-06-02