Privacy Policy

1. Personal Information Collected

When signing up, Kids Study Lab collects the guardian's email address, password, and name. Email is used for account verification, password reset, and service-related communications. Passwords are encrypted and stored securely.

When registering a child, we collect the child's name (for display), date of birth, and profile image (emoji). Date of birth is used solely to provide age-appropriate learning curriculum (ages 5, 6, 7).

If using the service without an account, only an anonymous identifier and display name are stored in your device's local storage (localStorage). No personally identifiable information is collected. Lesson progress and answers are stored on the server by the registered child.

2. Protection of Children's Personal Information

When collecting personal information of children under 14, Kids Study Lab obtains consent from the guardian (legal representative) in accordance with the Personal Information Protection Act.

• Children's personal information is entered directly by the guardian and is collected with the guardian's consent.
• Information collected: child's name (for display), date of birth, profile image (optional)
• Purpose: providing age-appropriate learning content, managing learning progress
• Guardians may request to view, correct, or delete their child's personal information at any time.

3. Purpose of Use

Collected information is used solely for service provision (learning progress tracking, dashboard display), service improvement, and legal compliance. It is not used for marketing, advertising, or third-party sharing.

4. Retention and Disposal

When a user deletes their account, all guardian account information (email, name) and associated child data are immediately deleted. If non-members delete stored data from their device or clear browser storage, the information on that device is deleted. Learning data stored on servers may be retained for the duration necessary for service operation, and will be disposed of after the period required by law.

5. User Rights

Users may request to view, correct, or delete their information. Please contact us through the contact information provided in the service.

6. Security Measures

Kids Study Lab takes the following measures to ensure the safety of personal information:

• Passwords are stored using one-way encryption (hashing) and cannot be retrieved in plain text.
• SSL/TLS encryption is applied for all data transmission.
• Access to personal information is restricted to the minimum number of authorized personnel.

7. Data Processing Delegation

Kids Study Lab delegates personal data processing to the following service providers:

• Cloud hosting (GCP): Server infrastructure and data storage
• Firebase Hosting (Google): Web application hosting
• SendGrid (Twilio): Email delivery (verification, password reset)

8. Automatic Data Collection

Kids Study Lab does not use cookies. However, the following information is stored in browser localStorage for service convenience:

• Anonymous identifier (UUID), display name, profile emoji
• Authentication token (JWT) when logged in

Clearing browser storage will immediately remove this information.

9. Remedies for Rights Infringement

Users may contact the following organizations for dispute resolution or consultation regarding personal information infringement:

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Center (KISA): 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office Cyber Investigation: 1301 (www.spo.go.kr)
• National Police Agency Cyber Bureau: 182 (ecrm.cyber.go.kr)

10. Privacy Officer

Kids Study Lab designates a Privacy Officer responsible for overseeing personal information processing:

• Privacy Officer: Representative
• Contact: support@kids-study-lab.com

For inquiries, complaints, or remedies related to personal information, please contact the above.

11. Changes to Privacy Policy

This policy may be updated due to changes in laws or services. Changes will be announced through the service interface or notices.