Last updated 24 September 2026.
The short version
Kiplrn is an AI tutor for children aged 4 to 15. This page explains, in plain language, what happens to your child’s information when they use it. We have tried to describe the system exactly as it works today, including the parts that are still basic.
- Your child never has an account. There is no child login, no child email address, and no way for a child to sign in anywhere. The account, if there is one, is yours.
- You do not need an account either. By default your child’s profile lives in your own browser, on your own device, and we hold no copy.
- You can choose to create one so that progress survives a lost phone or a cleared browser. It is a deliberate choice, made in Parent Settings, after a screen that says plainly what will be stored. Until you make it, nothing is uploaded.
- We store what your child learned, not what they said. A session record says a 20-minute maths lesson on fractions happened and earned 40 XP. The conversation itself is not kept by us at all.
- To generate a reply, the app sends your child’s message — plus their first name, age and chosen language — to an AI provider. That is the one time information leaves your device during a lesson.
- We show no advertising and we do not sell data to anyone.
What we store, and where
On your device
When you set up a profile, the app saves it in your browser’s local storage: first name, age, avatar, teaching language, the parent PIN, and a running record of sessions, XP and streaks.
If you have no account, that is the only copy. Clearing your browser data deletes it permanently and we cannot recover it, because we never had it.
The parent PIN is a soft lock to keep a child out of the parent dashboard and out of billing. It is stored on the device in plain form. Please do not reuse a PIN that protects anything important, such as a bank card.
In your account — only if you create one
If you turn on saved progress, we store a copy so it can reach your other devices:
- For each child: first name, age, avatar, teaching language, the parent PIN, daily goal, school country, school year and programme where you have set them, and their learning record — XP, streaks, badges, flashcards, review schedule, and a per-session summary (subject, topic, mode, duration, XP earned, number of messages).
- For you: your email address, and the times you signed in.
Your children’s profiles and learning records are stored in the European Union, on Google’s Firebase platform in the Belgium region, and access is restricted at the database itself so one account can only ever reach its own data.
The sign-in record that identifies you — your email address and sign-in timestamps — is held by Firebase Authentication, which Google operates from the United States. That is a transfer of your data outside the EEA, not your child’s.
You can download everything we hold, or delete the whole account permanently, from Parent Dashboard → Account & data. You do not need to write to us and wait.
On our servers
No conversations. Our server forwards a message to an AI provider and returns the reply; it does not write what your child typed to any database.
Our hosting provider, Vercel, keeps standard operational logs of requests — timestamps, IP addresses and error messages — as any web host does. When something fails, we log the technical error, not the conversation.
Who else sees your child’s messages
This is the part most privacy pages skate over, so we will be direct.
To produce a tutoring reply, we send to an AI provider: your child’s first name, age, chosen language, the subject and topic, and the messages in that conversation. We never send a surname, an email address, a school, or anything else — because we never ask for them.
The providers we use are Anthropic (Claude) and Google (Gemini), both in the United States. Each handles that data under its own API terms and retains it for its own limited periods. Under those terms neither is permitted to use it to train models.
Our system prompt instructs the tutor never to ask a child for a surname, address, school, phone number, email or photograph, and never to repeat personal details back if a child volunteers them. That instruction is set on our server and cannot be changed from the browser.
Photographs of schoolwork
You can photograph a term plan or contents page so the tutor knows what your child is covering in class. It is optional and nothing happens unless you choose it.
The photo is reduced in size on your device, sent to our AI provider to read the topic names off it, and then discarded. We do not store it, it is never saved to your account, and it is not written to any log. Only the list of topic names is kept, and you can edit that list before saving it.
A photograph of schoolwork can contain your child’s name or their school’s name whether or not we ask for it. That is why the app tells you, before the camera opens, to photograph the topic list rather than your child’s work, and to cover any names. If you would rather not, type the topics in instead — it works exactly the same.
Payments
Kiplrn has a free plan and a paid Family plan. If you subscribe, the payment is handled entirely by Stripe.
We never see your card number. It is entered on Stripe’s own payment page, not ours, and it never touches our servers. What we receive back is your subscription’s status, when it renews, and an identifier — enough to know whether your plan is active, and nothing about your card beyond the last four digits Stripe shows you.
Stripe is a payment processor in its own right and handles your billing details under its own privacy policy. Cancelling, changing your card and downloading invoices all happen in Stripe’s billing portal, reached from inside the app.
Children are never shown anything to do with payment. Billing sits behind the parent PIN.
On this website
kiplrn.com — the site you are reading now — uses Google Analytics to count visits and see which pages people find useful. That is separate from the app and involves no child data. The app itself carries no advertising or third-party tracking.
How the tutor is kept age-appropriate
Every request carries a child-safety instruction set that overrides everything else, including anything typed into the chat. It requires the tutor to refuse adult, violent, self-harm and other unsuitable content in any framing; to decline personal and medical advice; and, if a child mentions being hurt, unsafe or frightened, to stop the lesson and tell them warmly to speak to a parent, carer or teacher they trust — rather than counselling the child itself.
The tutor also treats anything typed by a child as a message, never as an instruction to change its own rules. Attempts to talk it out of its role are steered back to learning.
We should be honest about the limits of this. These are strong instructions to a language model, not a guarantee. If you ever see a reply that is not right for your child, please tell us at support@kiplrn.com and include what was on screen.
Language quality
A tutor that writes bad grammar teaches bad grammar, and a parent who does not speak the language has no way to know. So any language other than English is routed to a stronger, more expensive model, and we will not put a language in the app until we believe it is genuinely good. Only English and Maltese have been checked by a fluent speaker so far.
This is not a paid feature and never will be. All 16 languages, the child-safety instructions, the parent PIN and syncing across your devices are included on the free plan.
Your choices
- To see everything we hold: Parent Dashboard → Account & data → Download all my data. It arrives as a file, immediately.
- To delete everything we hold: the same screen, Delete my account and all data. It is immediate, permanent and cannot be undone.
- To delete what is on the device: clear your browser’s site data for app.kiplrn.com.
- To stop your child using it: close the tab. Nothing runs in the background.
- To ask us anything, or raise a concern: support@kiplrn.com. We respond within one month, usually far sooner.
You also have the right to complain to a supervisory authority. In Malta that is the Office of the Information and Data Protection Commissioner (IDPC).
What changed, and when
An earlier version of this page said we had no accounts and no database. That was true when it was written. Optional accounts and saved progress have since shipped, and billing has now shipped with them, so this page has been rewritten to describe what the product actually does today.
Kiplrn is operated by Keith Farrugia, a sole trader based in Malta, trading as Kiplrn and MindCore AI.
See also our Privacy Notice, which is the formal version of this page, and our Terms of Service.
If anything on this page does not match what the product actually does, that is a bug in the page and we want to know: support@kiplrn.com.