Guest
No child account, name, email, chat, ad profile, or school roster. First-party product events contain event names and coarse context, never typed homework, answers, photos, or a device fingerprint.
Trust center
Privacy claims you can check.
This is the plain-language data inventory for the Play Learn Rise family beta. It separates guest play, family-account data, vendors, retention, security, and deletion.
Operator and contact
A named operator with a direct privacy contact.
Play Learn Rise is operated by Ambassador LLC, a Missouri limited liability company. Mailing address: P.O. Box 1105, Shell Knob, MO 65747. Telephone: 417-249-0054. Official privacy and legal contact: learn@playlearnrise.com.
What leaves the device
Guest play stays local.
A guest learner uses a nickname-only device profile. Progress, spelling lists, pets, passport, voice choices, and photographed schoolwork stay in that browser. A photo is examined locally and is not uploaded.
Family account
An adult email and consent record, nickname-only learner profiles, progress and evidence, preferences, and account security records are stored so a family can use another device and receive learning reports. The optional weekly email is off until the adult turns it on and can be paused with one control. It carries skill names and evidence counts, not questions, answers, worksheets, or a child’s real name. For Schoolwork practice, the exact image, worksheet text, prompts, answers, operands, explanations, and file name stay on the device. A signed-in Blueprint stores only the source type, derived skill areas, bounded skill names and standards, an example count, and an update time.
Friendly Arena
Only a preset roster nickname, fixed-choice answers, and match state appear inside a private invite room. There is no discovery, free text, voice, or learning-record effect.
Retention schedule
Keep only what has a current purpose.
Device-only data
Remains until the family deletes the learner, clears site storage, or removes the app. Play Learn Rise cannot recover device-only guest data.
Family-account data
Remains while the account is active so history and evidence stay available. The adult can export it and permanently delete the account and linked learner records.
Operational data
First-party product events are removed after 90 days. Adult feedback is removed after 180 days. Expired recovery tokens, rate-limit records, and closed temporary rooms are removed by cleanup jobs.
Hosts, cookies, and vendors
One product host. Two first-party account cookies.
Product host
The child app, API, and assets use playlearnrise.com. No advertising, behavioral analytics, or social media host loads in the child experience.
Cookies
A secure HTTP-only session cookie and a first-party preference/continuity cookie support signed-in use. They are not advertising identifiers.
Service providers
OpenAI may provide optional narration only for checked-in guide catalog and preview scripts selected by an approved identifier. Dynamic questions and family-entered text stay on the device reader. Postmark sends adult account mail. Stripe is used only for hosted adult checkout when enabled; card details never pass through Play Learn Rise.
Written security program
Reduce access, exposure, and recovery risk.
Access
Hashed adult passwords, secure sessions, consent and verification records, scoped reviewer roles, rate limits, and ownership checks protect account actions.
Application
A strict content security policy keeps scripts and connections first-party. Styles remain first-party; the policy currently permits inline style attributes used by measured diagrams, progress positions, and scene coordinates. Typed markup renders as text. Cross-origin writes are refused, and child chat does not exist.
Release
Build checks cover answers, evidence separation, accessibility, learner isolation, offline launch, content approval, public metadata, referenced assets, and server syntax.
Independent review status
No privacy seal is claimed.
Play Learn Rise is preparing the evidence needed for an independent COPPA safe-harbor review. No privacy seal, research-evidence tier, award, or certification appears unless that organization grants it.
Export or delete family data.
A signed-in adult can download the family record and permanently delete the account, learner profiles, and linked learning records.
Last updated October 15, 2026.