Privacy policy

This policy explains how TinyGenius Hub collects, processes, stores and protects parents' personal data and children's learning data when using the platform.

1. Legal basis of reference

Law on Personal Data Protection No. 91/2025/QH15 (effective from January 1, 2026).
Decree 356/2025/ND-CP (effective from January 1, 2026; replacing Decree 13/2023/ND-CP).
Law on Consumer Rights Protection No. 19/2023/QH15 and related guiding documents.

2. Data we collect

Parent account data: email, display name, registration status.
Children's learning data: learning records, lesson progress, learning interaction history.
Technical data: IP address, device, access log for system safety.
Payment data: transaction information from payment partners (full card number is not saved).

3. Purpose of data processing

We process data on one or more appropriate legal bases, such as performance of a contract or legal obligation, consent or legitimate interests under applicable law.
Account operations and core learning functions.
Personalize the learning experience according to the child's age and level.
Send service notifications, progress reports, technical support.
Prevent fraud and abuse and meet legal requirements.

4. Children's data

Main account created and controlled by parents.
We do not purchase or sell children's personal data for independent commercial purposes.
We do not run behavioral ads aimed directly at children.
Where processing beyond the core learning objectives is required, we require an appropriate lawful basis.

5. Share data with third parties

Share only to the extent necessary to provide the service.
Key partner groups: infrastructure, email, payments, security and analytics.
Partners must comply with data security obligations under contracts or applicable laws.

6. Store and protect data

Data is protected using risk-appropriate technical and organizational measures.
Role-based access restriction applies.
The storage period is determined according to the purpose of processing and the legal obligations involved.

7. Rights of data subjects

Right to know, access, and correct personal data.
The right to request restriction of processing or deletion of data to the extent permitted by law.
Right to withdraw consent for purposes based on consent.
We respond to data subject requests within the time limits prescribed by applicable law.

8. Cookies and tracking

Necessary cookies are always active to ensure login security.
Analytical/marketing cookies are enabled only with explicit consent.
For details see the pageCookie Policy.

9. Cross-border data transfer

When there are cross-border transfers of personal data, we implement records and controls according to the legal framework applicable at the time of processing.

10. Contact to exercise data rights

Email: privacy@tinygeniushubvn.tech
Operating unit: TinyGenius Hub

Last updated: 26/03/2026

2. Data we collect

Parent account data: email, display name, registration status.

Children's learning data: learning records, lesson progress, learning interaction history.

Technical data: IP address, device, access log for system safety.

Payment data: transaction information from payment partners (full card number is not saved).

3. Purpose of data processing

We process data on one or more appropriate legal bases, such as performance of a contract or legal obligation, consent or legitimate interests under applicable law.

Account operations and core learning functions.

Personalize the learning experience according to the child's age and level.

Send service notifications, progress reports, technical support.

Prevent fraud and abuse and meet legal requirements.