Privacy policy

1. Scope

This privacy policy describes how Chocon processes personal data when you use chocon.net, the Chocon Desktop app and related services.

The parent or legal guardian who creates an account is responsible for informing children about appropriate use and safety.

2. Data we collect

We collect the minimum amount of data needed to operate the service and keep children safe.

• Parent account information: name, email address, authentication details and sign-in logs.
• Child profile details you provide: display name, age or grade level to tailor content controls.
• Device and pairing information: operating system, pairing code, app version and diagnostic data when issues occur.
• Anonymised learning activity logs: timestamps, lock/unlock status, approved website lists and blocked events.
• Optional AI Coach interactions: we store filtered metadata and content snippets to improve accuracy, and you can disable the feature at any time.

3. How we use the data

We use personal data for the following purposes:

• Provide, maintain and improve Chocon features.
• Configure schedules, safety policies and synchronisation across family devices.
• Deliver technical support, respond to requests and detect fraud or misuse.
• Analyse aggregated trends to improve product quality without identifying individual children.
• Comply with legal obligations or valid requests from competent authorities.

4. Legal bases and sharing

We process data based on your consent, the necessity to perform our service agreement and legal obligations regarding child protection.

Chocon does not sell personal data. We only share data in the cases below:

• Infrastructure and analytics providers that meet security standards equivalent to Chocon.
• Government or regulatory authorities when legally required.
• Other third parties when you provide explicit instruction or consent.

5. Retention and security

We apply technical and organisational safeguards—including encryption, access controls and regular audits—to protect data against unauthorised access.

Retention periods are limited as follows:

• Parent account information: retained while your account remains active and for up to 90 days after a deletion request to satisfy legal obligations.
• Learning activity logs: retained for up to 12 months to support parent reporting and reconciliation.
• Optional AI Coach data: deleted within 30 days after the feature is disabled.

6. Parent and child rights

You may contact us to exercise the following rights:

• Access, correct or delete personal data and child profiles.
• Withdraw consent for optional features or request restrictions on processing.
• Receive a copy of your data in a structured format where permitted by law.
• File a complaint with a supervisory authority if you believe your privacy rights were infringed.

7. Children under 16

Chocon is designed to support children, yet all data must be managed by parents or guardians.

We do not contact children directly or send marketing messages. If we learn that a child submitted information without parental consent, we will delete it.

• Ensure that children use devices in a supervised and safe environment and teach them about privacy.
• Notify us immediately if you suspect unauthorised access or misuse of an account.

8. Contact and updates

Send all privacy questions or requests to privacy@chocon.net. We aim to respond within 30 business days.

We may update this policy to reflect legal requirements or new features. We will notify you of significant changes via parent email and on chocon.net/privacy.