Privacy
Updated 28 September 2026
What we store
Elvora runs Elvora Kids. We store your email, first name if supplied, lesson instructions and content, credits, plan, payment records, and support messages. Play records show which lesson was opened and when, so adults can follow learning activity. We also receive browser identifiers and security and server logs.
We use account, lesson and billing information to provide the service under our agreement with you; payment records also support accounting and legal obligations. Security logs and play counts help us operate and protect the service, relying on legitimate interests where applicable. Student information is used to deliver lessons and records under the adult’s instructions; any legally required parental permission must also be obtained.
We do not buy or sell personal data. Card details are handled by the card provider, not stored by us.
Children's data
Only adults hold accounts. Children use student profiles created and controlled by an adult and sign in with a six-letter password; they have no email or account.
Profiles hold a first name, optional age, generated six-letter password, assigned classes and lessons, saved lessons, and play records showing which lessons were opened and when. Adults enter details. Students enter passwords. We automatically collect play activity and a browser identifier, including for public lessons played without an account.
The adult controls lesson access, sees play records, and can change details, reset passwords or delete profiles. Only add a child if you are their parent or guardian, or have appropriate authority and any required parental permission. Elvora operates the service; tutors are responsible for their decisions about adding students, sharing lessons and using records.
Please do not enter surnames, schools, photographs or other unnecessary personal details. Parents or guardians can email support@elvorakids.com about a child’s information or request deletion.
Payments
Lemon Squeezy is the merchant of record for card purchases and handles card details and refunds. PayOS processes bank transfers. We receive payment information such as order identifiers, amounts, status and the linked account, and retain provider payment records. Contact support@elvorakids.com about either method.
Cookies
We use cookies for adult and student sign-in and lesson access. Adult sign-in cookies last up to 400 days and may refresh; student and lesson-access cookies last up to 30 days. Signing out clears the relevant sign-in cookie. A random browser identifier in local storage helps count plays and remains until browser storage is cleared.
There is no analytics following you across other sites. Lessons run on a separate address to isolate generated pages from your account session.
We count page visits by page, country, device and where you came from. We do not use cookies for this or store your IP address, and we cannot follow you across days or other sites.
If you are a parent using our sign-up, pricing or payment pages, we use the Meta Pixel on those pages to measure our advertising; it is never loaded on a lesson or on any page a child uses.
Who we share with
- Supabase: database and sign-in.
- Vercel: website hosting.
- Cloudflare R2: lesson-file storage and delivery.
- Lemon Squeezy: card purchases and refunds.
- PayOS: bank transfers.
- Together AI and OpenRouter: models that generate and edit lessons.
- Resend: service email.
Our AI providers receive lesson instructions and information needed to generate or edit a lesson. Do not include personal or sensitive information in instructions. Providers may use subprocessors, including downstream model providers.
Public lessons are visible and playable by anyone without an account. If you enable your public tutor page, anyone can see the name, biography and contact details you put there. We may disclose information when legally required. We share nothing for advertising.
Providers may process information outside your place of residence. Applicable data-protection rules still apply; contact us for information about the transfer arrangements and safeguards that apply to your data.
How long
We keep personal information only as long as needed for these purposes or legal requirements. Accounts, lessons and student profiles, including inactive profiles, stay until deleted. Play records stay until the lesson is deleted; deleting a student profile removes its link from those records. Clearing browser storage does not delete records already sent to us.
Closing your account removes access to lessons and deletes your account, student profiles, classes and your lessons’ play records. Plays of others’ lessons may remain without the student link. Lesson files are queued for removal. Backups and provider-held copies may remain until their retention cycles end; deletion is not instant everywhere. Copies others saved are outside our control.
Payment records, including provider information, may remain after closure for accounting and legal requirements. They are not necessarily anonymous. We keep security and server logs only as long as needed to operate and protect the service.
Your rights
Email support@elvorakids.com to request access, a copy, correction or deletion, including for a child you are responsible for. You can delete lessons, student profiles and your account from their pages.
Depending on applicable law, you may also request portability, restrict processing, object, withdraw consent where we rely on it, or complain to your data protection authority. We may need to verify your identity and authority. Legal retention requirements may limit deletion.
Contact
Write to support@elvorakids.com. We will notify account holders before material changes to how we use personal information.
See also the Terms page.