Play Learn Rise family privacy

Privacy, in plain language

Family beta privacy notice • Updated November 3, 2026

Schools and invited educators

Play Learn Rise is not a student-information system and does not offer SIS or SSO integration. A parent owns and controls the nickname-only learner profile. The parent may invite a teacher, tutor, or specialist as a bounded contributor through a separate adult account. That invitation does not transfer ownership or open sibling profiles, family exports, account deletion, artwork, billing, or the child experience. If a school later uses the service directly, the operator and school must separately review applicable FERPA responsibilities and agreements; this family-beta notice does not claim that review is complete.

Playing without an account

A guest nickname, settings, mastery estimates, scores, mission history and Maker projects stay in that browser. They are not sent to the Play Learn Rise database. Signed-in learners use separate device records so siblings do not share local progress. Guest canvas drawings stay on the device and are not uploaded. Small tile designs in signed-in learning checkpoints and artwork a signed-in family deliberately saves to the Creative Portfolio are different; those are described below.

Weekly spelling lists

A grown-up can type, paste, or choose a file containing weekly spelling words. A selected photo is previewed and, when the browser supports local text recognition, read on that device. The photo is not uploaded. The grown-up must review and confirm the words before saving. Guest lists stay in that browser. For a signed-in learner, only the confirmed list title and words are stored with the adult-owned Learning Blueprint so the list can follow the learner across devices. Exact spelling words do not travel in a Learning Plan Code. Adults should not include a child’s name, school, teacher name, or other student information.

Schoolwork photos and practice

A grown-up can choose or take a photo of current schoolwork and confirm the text before Play Learn Rise makes fresh practice. The image, exact worksheet text, prompts, answers, operands, explanations, and file name stay in that browser and are not uploaded. A signed-in Learning Blueprint can store only a fixed source type, derived skill areas, bounded skill names and standards, an example count, and an update time. Those details help the app choose practice without copying the worksheet. Adults should remove or avoid a child's name, school, teacher name, report identifier, or other student information before using this feature.

Free Art and editable projects

Free Art keeps the current brush drawing and movable pieces in this page's memory, separated by learner while the page stays open. These temporary workspaces are not automatic backups and disappear on refresh or close. Save editable project downloads a file containing the drawing, title, background and piece positions; Open project reads that selected file locally without uploading it. PNG downloads are flat pictures. Gallery previews and flipbooks are different device-local records. Downloaded files are not included in an account export or removed by deleting an account; manage them on your device yourself.

A signed-in learner can deliberately choose Save to account to put up to eight editable works in a private Creative Portfolio. Each save contains the 900 × 600 brush layer, movable-piece data, scene, grade, generic activity type, a small preview, version number and save times. The cloud record does not include the child-written picture title. It is visible only inside that family account, has no public sharing, comments or likes, appears in the parent’s data download, and is deleted when its learner profile or family account is deleted. Updating a project checks its version so an older device cannot silently replace a newer save.

Art flipbooks

Interactive Math Art coaching saves the current teaching step and hint use as part of the learner's checkpoint. Maker checkpoints can also save selected gear and a small route-cost summary. These are private learning/resume data, not public scores. Small-step teaching choices are not labeled independent mastery.

Art flipbooks store up to eight small drawing snapshots per learner in this browser only. They are not uploaded, included in cloud account exports, or shared publicly. Download the storyboard PNG before clearing browser data. Removing a learner or family account also clears its flipbooks on the device used for deletion; clear other devices separately. The calm-motion preference is also device-local.

Pip’s voice and device reader

The Guide Cast uses clearly disclosed AI-generated voices: Pip (Marin), Kian (Cedar), Mira (Coral), and Astra (Sage). Pip also has saved, AI-generated Marin core recordings served from this website. OpenAI can generate only checked-in guide catalog and preview scripts selected by an approved script identifier through Play Learn Rise's private server. Dynamic questions, worksheet content, spelling words, learner names, typed answers, artwork titles, questionnaire notes, and account information stay out of that provider path and use the device reader instead. OpenAI is the narration sub-processor for the approved guide scripts. If natural narration fails, the browser's device reader takes over. A grown-up can separately allow online browser voices; those providers may receive the words being read, including a custom spelling word. This is off by default. Play Learn Rise does not record voices or use the microphone. Guide, pace, automatic-reading, and reading-detail preferences are saved per learner on this device and, for signed-in profiles, in the family account.

Minimal product evidence

For signed-in family profiles, Play Learn Rise stores a small first-party event record to understand whether adventures start and finish, a connected learning journey in any grade reaches an independent success or due memory return, narration succeeds or falls back, and grown-ups open reports. These records contain an event name, area, grade, optional bounded count or score, date, and an idempotency receipt. They do not contain answers, question text, typed text, artwork, names, email, IP address, user agent, device identifier, advertising identifier, or third-party tracking ID. The default retention period is 90 days, account export includes the records, and profile or family deletion removes them. This limited measurement system still requires privacy-counsel review before public commercial launch.

The public pages record same-origin events for landing, onboarding start and finish, first mission start, the first accepted answer, first mission finish, next-day return, mode opening, guided-tour start and finish, and a coarse page-health sample, using a random session identifier that exists only in memory for the current browser tab. The page-health sample stores only good, needs-work, poor, or unknown bands for response, display, layout shift, and initialization timing. It does not store raw timing or device details.

“First accepted answer” means the lesson interface accepted its first answer action in that browser session. This content-free event does not include the answer, whether it was correct, the question, or any learner content. Reports show aggregate browser-session counts, not people, and these checkpoints are not guaranteed to form one sequential funnel because sessions may begin at different points or end early.

For a landing event, Play Learn Rise stores only a broad acquisition category such as direct, search, social, referral, or campaign. It does not store the referring URL or search words. If the hosting edge supplies a two-letter country code, the event can store that country code. It does not store a raw IP address, city, street, precise location, full referrer, user agent, or device fingerprint. The application does not persist the session identifier on the device or attach an email or learner name. These anonymous rows use the same configured 90-day retention limit.

Adult launch and classroom interest

If an adult joins the family waitlist or asks about classroom use, Play Learn Rise stores the adult email address, family-or-teacher role, optional grade, and submission time. That information is used only for the requested launch or classroom follow-up, is not shown in the child experience, and is not sold. Contact learn@playlearnrise.com to ask for removal.

Adult product feedback and bug reports

An adult can send a product suggestion, bug report, or other feedback from the grown-up section. Play Learn Rise stores the adult email, selected product area, message, optional reproduction steps, page path, review status, and submission time. The form tells adults not to include child names, schools, diagnoses, answers, artwork, or other student information. Feedback is visible only to authorized reviewers, may also be emailed to the Play Learn Rise support address for follow-up, and uses a 180-day default retention period. Expired entries are removed by the configured privacy-retention cleanup job, not by an ordinary page visit. It is not used for advertising or shown in the child experience. Feedback sent from the email used for a family account is included in that account’s data download. Contact learn@playlearnrise.com to request earlier removal.

Optional adult and family accounts

A parent-managed learner account stores the adult email, email-verification status, a one-way password hash, consent record, optional weekly-brief preference, child nickname, selected grade, mission results, stars, mastery records, campaign phase/return state, and small learning-evidence counts such as independent attempts, supported attempts, hints, lessons, and completed explanations. The weekly brief is off by default and can be paused with one control. It uses skill names and evidence counts; it does not include questions, answers, worksheets, or a child’s real name. If a family deliberately uses the Creative Portfolio, it also stores the bounded artwork data described above. If a parent creates a personalized path, it stores the family’s learning goals, functional support preferences, optional current-topic note, confirmed weekly spelling words, interests, schedule choices, plan skills, baseline estimates, and plan events. The questionnaire asks about learning functions, not medical diagnoses or private school records. A child may optionally type an “Explain it to Pip” response; those words stay in the current browser view and are never saved or sent to the server. Short-lived one-time verification and password-reset records store a random selector and cryptographic hash, not the usable link secret. If an access code or future subscription is used, the account also stores entitlement, redemption, and subscription-status records. It does not store full payment-card numbers. This allows learning progress, chosen artwork and eligible access to follow a child across devices.

Healthy play controls are optional and parent-managed. For guests, the chosen days, start and stop times, session break, daily and weekly limits, and recent daily active-time totals stay on that device. For signed-in profiles, the same bounded settings and up to 21 recent daily totals are stored in the learner’s private account record so limits can follow the learner across devices. Stretch Path evidence stores skill-level counts for supported work, independent work, later memory checks, and completed stretch missions; it is not a permanent label about the child. These records are included in account export and removed with the learner profile or family account.

Saved adventures and tile designs

Signed-in adventure checkpoints also store small, structured saved places: grade, lesson phase, generated-question seed, partial Math Art answers/tiles, Realm decisions, and Maker mission phase, planned route and mosaic tile colors. These allow unfinished activities to resume. Checkpoints do not contain child recordings, typed reflections or a full freehand drawing. Full artwork reaches the separate Creative Portfolio only after the learner chooses Save to account. Maker report counters summarize recent project attempts separately from the 28-day report; they are not school grades or certified mastery.

Authorized curriculum reviewers

The site owner may explicitly authorize a qualified adult account to review internal curriculum. Review decisions store a non-sensitive reviewer label, gate status, notes, and time for quality-control history. The review workspace is unavailable to children and ordinary family accounts. Reviewer notes must not contain child or family information. To preserve the curriculum audit trail, decisions may remain after a reviewer account is removed, but the parent-account identifier is disconnected; use a role label such as “Curriculum reviewer,” not a personal name.

Learning Plan Codes

A parent can create an expiring, one-time Learning Plan Code. The readable code is shown once; the database keeps only a keyed cryptographic hash and the final four characters for the parent's code list. Applying a code rebuilds the curriculum structure for the receiving learner's own grade and mastery. The code does not transfer the learner's name, email, grade, mastery history, baseline, current-topic note, state context, or diagnosis data.

A parent or guardian can also create a separate one-time Learning Team invitation for a specific learner. The invitation records a parent-chosen educator label, role, view-or-contribute permission, expiration, and cryptographic code hash. An invited teacher or specialist signs in with a separate adult account. That adult can access only the shared learner's Blueprint workspace, not siblings, billing, family exports, artwork, profile editing, or account deletion. Curriculum contributions are stored separately with an author role and version, then combined into a parent-led active plan with an audit event. The parent can revoke an unused invitation or a team member at any time; revocation ends access and removes that adult's active contribution from the next plan version.

Friendly Arena private invite rooms

Friendly Arena is an optional side activity for two to four signed-in learners in the same grade band. A family opens a private room and deliberately shares its short-lived invite code with another family. There is no guest or open child matchmaking, public room discovery, or public leaderboard. The activity uses only the allowlisted math and reasoning challenge catalog; it does not introduce unreviewed reading passages.

Each learner chooses one preset arena alias, such as Brave Fox or Bright Owl. Learners cannot type an arena name or any other free text. Friendly Arena has no chat, direct messages, friend list, public player profile, location sharing, or way to search for another child.

Live room access is transient. Join attempts are limited to 12 per learner in 10 minutes and 20 per invite code in 15 minutes, with an additional network limit. An unstarted waiting room closes after 15 minutes. A started match or rematch closes after 20 minutes. The server requires a short-lived safety token that cannot be used until the host completes a two-second grown-up hold. The usable invite code is not stored: the database keeps a keyed cryptographic hash and the final four characters. To run the room safely and reject replays, Play Learn Rise temporarily stores limited room, membership, turn, game-score, action-receipt, and time records linked internally to the signed-in learner profiles. A turn record contains the allowlisted challenge reference, selected choice, server-checked result, and game point; other players see only preset aliases and match state.

The server closes live room access at expiry or cancellation, keeps the limited room and linked membership, turn, score, and receipt records for 24 hours, and removes them during the next scheduled cleanup. Deleting the linked learner profile or family account removes them sooner. Arena results and scores are motivational game state only. They never update mission results, independent evidence, mastery estimates, learning plans, family learning reports, grades, or certified mastery.

Features intentionally not included

There is no advertising, behavioral tracking, child-to-child chat, public profile, precise location, microphone recording, or background camera access. A grown-up may deliberately open the browser file picker to choose or take a schoolwork photo; it stays on the device and is not uploaded. The app does not ask children for an email address or full legal name.

Parent controls

Signed-in parents can view and print a 28-day learning report, including what a campaign taught, what returned, and what comes next, download a copy of family account data, remove an individual learner profile and its records, or permanently delete the entire family account from the Family Account page. A successful password reset signs out older sessions.

Open Family Account

Open the Play Learn Rise Trust Center for the data inventory, retention schedule, service-provider and cookie lists, security program, independent-review status, and deletion guide.

For families · For educators · How the learning system works · Future plans