Privacy
Last updated 4 October 2026
Draft, pending legal review. This page describes what the product does today. It has not been checked by a lawyer against the rules that apply to children’s data in every country Aaro is available in. Treat it as a factual description, not as a finished notice.
The short version
Aaro is used by a grown-up and the children in their family. We collect the least we can get away with: enough to show a child their own challenges and to let their grown-up approve what they did. We do not sell anything about your family, and we do not show advertising.
What we hold about a grown-up
- An email address, used to sign in and to send sign-in codes.
- A PIN, stored only as a hash, used for the grown-up gate inside the app.
- If you sign in with Google, the email address Google gives us. We do not receive your Google password.
- A record of payments, if you buy something: amount, currency, and a reference from the payment provider.
What we hold about a child
A child does not have their own account in the usual sense. Their record belongs to the family, and a grown-up creates it.
- A first name or nickname, an age band, and the colours and language they prefer.
- Photographs, short videos and voice recordings that the child submits as proof of a challenge, plus anything they type about what they learned.
- Which challenges they finished, which books they read, and the badges they earned.
- Which videos were watched and for how long, so a daily limit can be enforced.
We ask children not to put their full name, their school, or their address into a proof. Proofs are reviewed by the grown-up in their own family, nobody else.
Who can see a child’s proof
The grown-ups in that child’s family, and nobody else. Proof files are kept in private storage and are served through short-lived links, so a copied URL stops working. Aaro staff do not browse family content; a member of staff sees a proof only when it is submitted for a verified certificate and the family asked for that.
Who else is involved
- Supabase stores the database, the sign-in system and the proof files.
- Vercel runs the site and keeps short-lived request logs.
- Google, only if you choose to sign in with Google.
- YouTube, for the videos inside a challenge. They are embedded through YouTube’s privacy-enhanced mode, so YouTube does not set its usual tracking cookies before your child presses play. Your child never sees YouTube’s homepage, comments or recommendations.
We do not use advertising networks, and we do not run third-party analytics that profile visitors.
Deleting things
A grown-up can delete a child, which deletes that child’s proofs and progress. To delete the whole family and the sign-in account, write to us and we will do it. We will not keep a copy afterwards except where we are required to keep a financial record of a payment.
Contacting us
Write to hello@rifattareq.com for anything on this page, including a request to see or delete what we hold.