Privacy Policy

Effective date: October 11, 2026 Last updated: October 11, 2026

1. Introduction

This Privacy Policy explains what information Linni ("we," "us," "our"), operated by DevelopPlay Studio LLC, collects, how we use it, and the choices you have. It applies to the Linni website, applications, and services (collectively, the "Service").

By using the Service, you agree to this Policy. If you do not agree, do not use the Service.

2. Information we collect

2.1 Information you provide

• School admins and teachers: name, email address, phone number, school name, and roster assignments.
• Parents: email address and phone number, provided through a school or teacher invite.
• Students: first name or nickname only, plus lesson notes, practice records, books and pages practiced, points, and stickers. Students do not have accounts and provide no information directly.
• Support communications: messages you send us and our responses.

We do not collect home addresses. We do not store payment-card numbers in Linni (payments are processed by our payment processor).

2.2 Information collected automatically

• Service records: invite status, email delivery events, practice confirmations and undo events, login events, and audit logs.
• Technical data: device and browser type, approximate location derived from IP address (city/region level), and standard server logs needed for security and operation.
• We do not use third-party advertising trackers. Any analytics we run are first-party and limited to operating the Service.

2.3 Information from third parties

• Book metadata from public sources (Open Library, Google Books) when a teacher looks up a book by ISBN. This contains no personal information.

3. How we use information

We use information only to provide and operate the Service:

• Creating and managing accounts by role (Section 4 of the Terms).
• Delivering lesson notes, practice tasks, lesson-update notifications, and practice reminders.
• Recording practice confirmations and computing points, stickers, and streaks.
• Generating school-level engagement reports for school admins.
• Sending service notices (plan, billing, Beta, and policy updates).
• Providing support, preventing fraud and misuse, and meeting legal obligations.

We do not use personal information for third-party advertising, and we do not sell personal information — including children's information — under any circumstances.

4. Children's privacy

Children's privacy is central to Linni's design. This section supplements the general policy above.

4.1 No child accounts; parental consent

• No child may create or hold a Linni account. Students exist only as records managed by their school, teacher, or parent.
• No child may use the Service without parental consent. A parent accepts an invite and creates a profile for their own child; that acceptance is recorded as the parent's consent for us to collect and process the child's information described in Section 2 for the sole purpose of providing the Service.
• For children under 13, consent is obtained in compliance with COPPA. We do not knowingly collect personal information from a child under 13 without verifiable parental consent obtained through the invite-acceptance flow.
• For users aged 13 to 17, we process personal data only as strictly necessary to provide the Service or with informed consent, consistent with the New York Child Data Protection Act.

4.2 Data minimization for children

• A student is identified by first name or nickname only. We do not collect last names, birthdates, photos, or other child details.
• Lesson notes and practice records concern the lesson only.

4.3 No sale, no advertising, no public model training

• We never sell children's data.
• We never use children's data for behavioral advertising or marketing.
• Children's records are never used to train public or third-party AI models.

4.4 AI processing

When AI features are used (e.g., structuring a lesson note, the Ask [Teacher] practice helper), only the note text and context needed for that task are sent to the AI provider. AI providers process this data only to provide the feature and do not retain it to train their models, per our processor agreements.

4.5 Parent rights for children's data

A parent may, at any time, request to view, correct, export, or delete their child's information by writing to mylinni2025@gmail.com. We will complete verified requests within 30 days and confirm when done.

4.6 If we learn a child is using the Service without consent

If we discover that a child's record exists without valid parental consent, we will delete the record (or obtain consent) promptly, and in any event within 30 days, consistent with applicable law.

5. How we share information

We share personal information only as follows:

• Service providers (processors): database hosting (Supabase), email delivery (Resend), payment processing, and AI feature providers. Providers process data only to perform their service for us, under written agreements, and — for children's data — with contractual limits consistent with Section 4.
• School-internal visibility: as described in Terms Section 4 (a teacher sees their students; a school admin sees their school; a parent sees only their own children). This is the Service working as designed, not third-party sharing.
• Legal and safety: we may disclose information if required by law, court order, or to protect the safety, rights, or property of our users or the public.
• Business transfers: if we are involved in a merger, acquisition, or sale of assets, user information may transfer, subject to the protections of this Policy; we will notify account holders before any material change.

We do not sell personal information. We do not share personal information with data brokers.

6. Data retention

• We keep lesson notes, practice records, messages, email events, and audit logs only as long as needed to provide the Service and meet legal obligations.
• When an account is deleted, associated personal data — including student records — is deleted within 30 days of the verified request.
• Beta-ended accounts keep data viewable as described in the Terms; data is never deleted as a surprise.
• Backups are encrypted and access-controlled, and are purged on their own cycle;

7. Data security

We implement reasonable administrative, technical, and physical safeguards consistent with the New York SHIELD Act, including:

• authenticated, role-scoped access (a school admin sees only their school, a teacher only their assigned students, a parent only their own children);
• encryption in transit and at rest for personal data;
• a separate, restricted, audited Operator console;
• encrypted, access-controlled backups.

No system is perfectly secure. You are responsible for keeping your credentials confidential and for notifying us of suspected unauthorized access.

8. Your privacy rights

Subject to applicable law and verification of your identity, you may request to access, correct, export, or delete your personal information (and, for parents, your child's information) by writing to mylinni2025@gmail.com. We respond within 30 days.

• Do Not Sell: we do not sell personal information; there is nothing to opt out of.
• Marketing: service emails (lesson updates, practice reminders, billing and policy notices) are part of the Service. Where we send optional updates, you may opt out; service-critical notices cannot be opted out of while you hold an account.
• Non-discrimination: we will not discriminate against you for exercising your privacy rights.

9. Cookies and tracking

We use only cookies and storage strictly necessary to operate the Service (authentication, security, preferences). We do not use third-party advertising or cross-site tracking cookies.

10. International use

The Service is operated in the United States and intended for U.S. users. If you access the Service from outside the U.S., you consent to the transfer and processing of your information in the U.S.

11. Changes to this Policy

We may update this Policy. For material changes, we will notify account holders (in-app and/or by email) at least 30 days before the new policy takes effect. Continued use after the effective date constitutes acceptance.

12. Contact

• Privacy inquiries, access/correction/export/deletion requests: mylinni2025@gmail.com
• General support: mylinni2025@gmail.com