WhizKids

Privacy

Last updated 1 October 2026

The short version

What we collect

From the parent: an email address and either a password (stored as a one-way hash) or a Google sign-in. With Google we also receive your name and profile picture. We keep the date you confirmed you are a parent or guardian, and a one-way hash of the grown-ups PIN. Optionally, the topics your family likes.

For each child profile: a nickname the family chooses (we block nicknames that look like phone numbers, addresses or unkind words), a buddy picture, a grade, and an optional 4-digit PIN (stored as a hash). Please do not use a child's real full name as a nickname.

Learning activity: which questions a profile answered and whether they were right, lessons practised, stories read, puzzles finished, XP, streaks, badges and cards earned, how many minutes were spent learning each day, and a best score for each Brain Break game. This is what makes progress, recommendations and the family dashboard work. We also keep a first-party log of product events (for example "lesson completed") tied to the profile number only, to understand what children enjoy.

Feedback: notes a grown-up sends us, and any pictures attached to them. The form sits behind the grown-ups PIN, so a child cannot use it.

Technical: your browser's time zone (so streaks roll at your midnight), standard server logs, and crash reports that hold only an error message and the page it happened on. We rate-limit sign-in attempts by network address; addresses are not stored with accounts or profiles.

Kept on your device only, never sent to us: anything drawn or typed in the scratchpad, and the answers a child can look back at during a lesson.

What we never do

How long things are kept

WhatHow long
Your account, each player, and their learning historyUntil you delete the player or the account. Deleting is immediate and removes everything that belongs to it.
Family Quiz Race rooms (nicknames and answers for one game)Deleted 7 days after the room expires.
Photos attached to a feedback noteDeleted 90 days after the note is marked resolved. The note itself stays until you delete it or the account.
Crash reports (a message and the page it happened on, no account or player)Deleted after 90 days.
Your sign-in on a deviceLasts 60 days, or until you sign out or choose Sign out other devices.
The grown-ups PIN unlockLasts 15 minutes, and ends when a player is picked.
Backups of the database, kept so the site can recover from a failureMay still hold deleted data until newer backups replace them.

Other services involved

Sign in with Apple and Google Sign-In, only when a parent chooses one, and only on the sign-in screen (with Apple you may hide your email address; the relay address works like any other). Wikimedia Commons, where some answer photos are loaded from. That is the whole list.

Read-aloud uses the voice built into your phone, tablet or computer. An optional cloud voice exists in the code and is switched off; if it is ever turned on, this page will say so first, and it would only ever be sent the lesson text, never anything about a child.

How the content is made

Lessons and stories are written for WhizKids with the help of an AI writing assistant. Part of the quiz bank was drafted by an AI model, and part comes from open trivia collections; the credits page says which is which. Nothing a child does or types is used to make content or to train anything.

Parent choices

Contact

Questions or requests about a child's data, or a correction to anything on this page: Use Send feedback at the bottom of any page once you are signed in (it opens from your account too). A person reads every note.

See also the terms.