Privacy

LearnR is a small independent app for practising primary school maths and English, served from learnr.muzza.tech and as an iPad app. It is run by one person in Australia, and everything it stores is stored in Australia - the database and the servers are both in Sydney.

For anything on this page, including a request to delete data, email support@learnr.muzza.tech.

Which of these exists depends on how the grown-up signed up.

• Signing in with Google gives us the name, email address and profile-picture address on that Google account, and a token that lets us confirm the sign-in. We ask Google for nothing else, and we cannot see the Google password.
• Signing up with an email and a password stores the email address and a scrambled form of the password from which the password cannot be read back. We never store the password itself.
• Either way we store a sign-in record so the browser or app stays signed in, and the fact that the email address was confirmed.

A grown-up’s email address is used to sign them in, to send the six-digit confirmation code when they set a password, and to answer them if they write to us. It is not used for marketing, and there is no mailing list to be on.

A child’s profile is made by their grown-up, and holds no contact details at all - no email address, no phone number, and no password. What it holds is:

• A first name or nickname - whatever the grown-up typed. It is shown on that family’s own screens and nowhere else.
• A picture: either one of eight preset animals, or a photograph the grown-up chose. A photograph never leaves the device as a photograph - the browser crops it to a small circle and shrinks it before anything is sent, so what we store is a thumbnail of about twenty kilobytes and not the original file. We do not receive the camera roll, the original image, or anything recorded alongside it such as where it was taken.
• The school year and the subjects their grown-up chose for them.
• Their current login code, until it is used or expires.

This is the part that is the point of the app. For every question answered:

• the question as it was shown, and the diagram beside it if it had one;
• the expected answer, what the child answered, and whether it was right;
• how long the question took;
• when it was answered, and how far the device’s clock is from UTC.

That last one is a time zone and not a location. It is there so an answer given at eight in the evening is counted on that evening’s date - including when it was given offline and sent the next day - and it is far too coarse to say where anybody is.

We also record, per sitting and per child:

• which subject and year a sitting was in, and when it started;
• a running summary per topic, which is the answers above rolled up so a report does not have to re-read years of them;
• speed-run results: which drill, how many were right, and when it was played;
• stars, the day streak, and whether a daily goal was met.

All of it is attached to the child’s profile, because a report for one child that could not tell their answers from their sibling’s would not be a report. That is the whole of why it is kept.

No location. No contacts. No advertising identifier and no device identifier. No microphone and no camera, other than a photograph a grown-up deliberately picks for a profile picture. No health data and no payment details - LearnR takes no payments and has nothing to buy.

There is no advertising, no tracking, and no analytics. We do not build a profile of anybody for any purpose other than choosing which question a child is asked next, we do not track anybody across other websites or apps, and nothing here is sold or handed to a data broker. There is nothing to opt out of, because there is nothing running.

LearnR uses a small number of other companies to run. Each one is listed with what it actually receives, rather than as a name on a list.

• Amazon Web Services (Sydney) serves the website and runs the code.
• Neon (Sydney) hosts the database everything above is stored in.
• Google - only if a grown-up chooses to sign in with Google, and only that sign-in. A family that signs up with a password never touches it.
• Resend sends one email: the six-digit code a grown-up needs to set a password. It receives that grown-up’s email address and the code.

That is the complete list. Nobody else receives anything, and none of these is given data to use for their own purposes.

The iPad app is more contained than the website, and this section says exactly what it does because it is what the app’s own privacy declaration to Apple says.

• It collects the answers described above, attached to the child’s account, to make the app work - and nothing else.
• It contains no third-party software of any kind - no analytics, no advertising, no crash reporter, nothing. The only server it ever contacts is LearnR’s own.
• It does not track. There is no advertising identifier, and nothing about a child is combined with data from anywhere else.
• It has no way out of itself: no adverts, no links to the web, no in-app purchases, and no browser inside it.
• What it keeps on the device is the sign-in token, in the device’s keychain and marked so it is not copied to iCloud or into a backup, and the answers waiting to be sent.

Questions are generated on the device, so the app works with no connection. Answers given offline are held on the device and sent when there is a connection again.

LearnR is set up by a grown-up, for a child in their care. Only a grown-up can create a child’s profile, and they do it from an account they signed in to themselves - there is no way for a child to sign themselves up, and no way to create an account with a login code.

A grown-up can see everything recorded about their child, on the report, and can delete any of it. A second grown-up - a separated parent, a grandparent, a tutor - can be given a read-only view of one child’s report by invitation, and that invitation can be taken back at any time. They can never change anything.

Nothing a child types is ever shown to anybody outside their own family. There is no messaging, no posting, no public profile and no way for one family to reach another. Within a family, the speed-run board shows family members’ first names and pictures beside their scores, which is the family’s own data shown back to them.

You can also ask us for a copy of what is held about your child, or to correct something that is wrong. Ask at the same address.

We keep a child’s answers for as long as the profile exists, because a report that quietly forgot last term would be worse than no report. We do not keep a copy after a deletion, beyond the short period it takes routine backups to age out.

Everything travels over an encrypted connection and is stored on managed, encrypted databases in Sydney. Passwords are stored scrambled and cannot be read back. A child’s login code is short-lived, limits how often it can be guessed at, and can be replaced by their grown-up at any time.

Every request that reads or writes anything about a child checks who is asking first, and a grown-up can only ever reach their own children and any shared with them - so a child’s identifier appearing in a link is not enough to see anything.

If what LearnR collects changes, this page changes with it before the change ships. It was last checked line by line against the code on 14 November 2026.

Questions, or anything here that does not match what you are seeing: support@learnr.muzza.tech. If something on this page turns out to be wrong, we would rather hear it from you than not.