Privacy Policy

Who we are and how to contact us

ZAFARI is operated by Persistence of Vision (Persistence of Vision Previs, LLC), referred to here as “we,” “us,” or “our.” This policy covers visitors, parents and guardians, and children using our services.

For questions about children’s information, to review or delete information, or to refuse further collection or use, contact the operator below or use our privacy request form. Parents should make these requests. Please do not send a child’s photo, voice recording, password, or payment-card details.

Information we collect and why

Parent and account information

We use a parent’s email, authentication credentials, family code, consent records, time zone, communication preferences, and subscription status to operate and secure the family account, schedule activities, and send account messages. Supabase handles authentication. Children access an existing family account with a family code and explorer PIN.

Newsletter subscriptions contain the name and email details you provide. Support, feedback, and privacy requests contain your message, contact details, and account or page information you submit. Feedback may include the page URL. These forms are for grown-ups.

Child profiles and learning information

• An optional first name or nickname and optional sounds-like pronunciation. A nickname or no name can be used; the profile remains linked to a family account.
• Age group or learning tier, explorer PIN, and parent-selected avatar preferences, including optional appearance details and family heritage.
• Lessons, answers and attempts, completion, skills, time spent, hints or support used, weekly learning cycles, earned rewards, and mural progress.
• Generated avatar images, synthesized name audio, coloring pages or family printables, and records needed to create, review, and deliver them.

We use this information to deliver activities, personalize parent-authorized features, save and synchronize TREK progress across supported devices, show parents progress, and provide rewards. The child experience has no public profiles, public posting, or direct messaging between children.

Payments, delivery, and technical requests

When paid access is offered, Stripe processes checkout and billing details. We keep payment references, subscription and invoice status, and related account records rather than raw payment-card numbers. When you request an earned physical reward, we collect the parent’s recipient and shipping details to check eligibility and arrange delivery.

Website, app, image, audio, and video requests expose an IP address and request information to the receiving service. Hosting and security systems may process URLs, browser or app information, timestamps, errors, and security logs. We use IP-derived rate-limit records to prevent abuse. This technical processing is different from precise GPS location collection, which our child experience does not request.

Children and parental permission

TREK’s early-learning programs are intended for young children with a parent or guardian’s involvement. Adults create and manage family accounts and review privacy information during setup. Setup records a parental permission timestamp before saving the completed child profile. Children do not create independent parent accounts.

We are required to obtain verifiable parental consent where applicable before collecting, using, or disclosing children’s personal information, and renewed consent for material changes where required. The setup permission record is separate from the grown-up check used for external navigation.

Parents can choose whether to provide a name, pronunciation, optional avatar details, or family heritage. Do not put a full name, contact details, or sensitive medical information in optional text. We do not ask children to upload photos, recordings of their voice, or videos. Synthesized name audio comes from parent-provided text, not a recording of the child.

We do not sell children’s personal information, use it for targeted advertising, or disclose it to data brokers. We use providers for the purposes below. Parents may refuse further collection or use and request deletion. If we learn that information was collected from a child without required permission, we will address the collection and deletion as required by law.

Name audio, avatars, and printables

Zoomba name audio

For parent-authorized personalized speech, ElevenLabs receives the optional first name or nickname, or sounds-like spelling, to synthesize Zoomba saying that name. Our name-audio request excludes the parent’s email, family code, explorer PIN, and any recording of the child. Generated clips are stored privately and retrieved for authorized website and app playback. Previously generated clips can be reused across sessions and devices.

Illustrated avatars and earned printables

AI image services receive selected appearance options, optional parent-provided appearance details and family heritage, approved ZAFARI instructions, and illustrated reference images to generate or review avatars and printables. These optional choices may reveal personal or sensitive characteristics. Children do not supply open-ended image prompts. The intended generation inputs exclude the child’s name, email, photo, and voice recording.

Image workflows use Google’s Gemini services and OpenAI for avatar or printable generation, moderation, review, or correction. Generated illustrations may be sent back for review or correction. Names or headings can be added to printables separately. Authorized staff review generated content. AI output can contain errors and does not determine a child’s identity, diagnosis, or school placement.

Private files are accessed through authenticated requests or time-limited links. Progress messages and earned printables may be delivered through parent email. Anyone you share a file or an unexpired link with may be able to view it. Downloaded or emailed copies are outside our direct control.

Service providers and disclosures

We disclose information needed for the feature used to the following services or categories of recipients:

• Supabase: authentication, family and learning databases, private audio/image/printable storage, and security records.
• Vercel: website/API hosting, delivery, request/error processing, and public-site measurement described below.
• Cloudinary and content-delivery services: public ZAFARI artwork and media delivery, including network request information.
• Resend and email-delivery providers: parent/subscriber email addresses, messages, earned attachments or links, and delivery records.
• Stripe: adult checkout, billing contacts, payment methods, subscriptions, and transactions when paid access is used.
• ElevenLabs: name or pronunciation text for synthesized Zoomba audio.
• Google / Gemini and OpenAI: avatar and printable generation, moderation, review, or correction using the inputs above.
• Google / YouTube: video playback and previews described below.
• Cloudflare Turnstile: form anti-abuse verification where enabled, including browser/request information and the IP address used for verification.
• Reward fulfillment and professional service providers: shipping details for requested physical rewards, or information needed for support, legal, accounting, or security work.

We may disclose information when legally required, to respond to valid legal requests, protect users and services, or in a business transfer subject to applicable privacy obligations. We do not publicly publish child profiles or personalized assets as part of the child experience.

YouTube and external services

Watch pages and app screens may offer YouTube videos or links to external services. Loading a player, thumbnail, or preview may send Google or its delivery network your IP address, device/browser details, page context, and viewing interactions. Some requests occur when a preview loads, before Play is pressed. Privacy-enhanced embedding does not make these requests anonymous.

See the Google Privacy Policy and YouTube Terms of Service. Other external services have their own policies. The ZAFARI Apple apps use a grown-up check before opening external legal websites; it is a navigation control, not consent for data collection.

Cookies, device storage, and analytics

The website uses authentication/session cookies or browser storage for sign-in and local preferences for language, cookie choices, sound, and games where applicable. Some game progress is device-only. Clearing website data can remove local saves. Signed-in TREK progress is also saved on our servers and follows the family account across supported devices.

The iPhone and iPad apps use the device Keychain for credentials and local preferences or files for game saves, settings, tutorial status, and cached content. Signing out and deleting server data are separate actions. Device data, Keychain items, and operating-system backups may need to be managed separately through app or device settings.

Public pages use Vercel Web Analytics for audience measurement. It uses no analytics cookies and reports information such as page, referral source, approximate country, and device type. The provider receives network requests to supply the service. Our integration strips URL query strings from measurement events and filters TREK events under /school. Public entertainment pages can still be measured. Cookie preference buttons do not disable this cookieless measurement or hosting/security requests.

PostHog analytics is disabled in production iPhone and iPad app code. Developer debug builds can emit a limited launch event with app version and build information. That integration does not identify children or record their screens, taps, or TREK activity. We do not use advertising cookies or our own targeted advertising profiles.

Retention and deletion

We retain information for the specific service purpose for which it was collected, request handling, account security, and applicable legal obligations. Children’s information must not be kept indefinitely or after it is no longer reasonably necessary for its purpose.

• Profiles and learning records: used while providing the family’s TREK experience. Inactivity cleanup is configured around 12 months without lesson activity and targets inactive child profiles, associated database records, and name audio. This does not guarantee automatic erasure of every related asset, log, backup, or provider copy at that threshold.
• Personalized assets: retained for authorized personalization, rewards, and parent access. Parent deletion controls request removal of profile-linked files and records. Selected superseded and temporary avatar assets are targeted for cleanup after 30 days. Other generated files and failed jobs can remain pending cleanup; this is not a deletion deadline for every file.
• Parent, consent, billing, and support records: retained for account administration and the applicable legal, tax, security, or request-handling purpose. Deleting child progress does not itself delete the parent login, cancel billing, or erase legally retained transactions.
• Local saves and copies: remain until cleared or replaced. Server deletion does not erase downloaded files, email attachments, operating-system backups, or copies you shared.

Deletion is not necessarily instantaneous across systems. Provider, backup, security, and legally required copies can have separate retention. Contact us to request deletion or confirmation of what remains. We will explain applicable exceptions and respond within the period required by law.

Parent controls and privacy requests

• Review/export: the website dashboard offers “Download my data,” including available records and private asset links. Native parent controls export supported account/progress information. Export contents can differ; contact us for information not included.
• Correct: parent controls edit a child’s name, pronunciation, and supported settings. Contact us for other corrections.
• Delete: the website’s “Delete all progress data” removes the family’s child profiles and related records and attempts removal of linked private files. Native parent controls support child-profile and parent-account deletion. Review the confirmation carefully and contact us for broader requests or help.
• Withdraw consent: native parent controls withdraw permission and revoke child sessions. Withdrawal does not itself erase stored information. You may separately request deletion and refuse further collection or use through the operator contact or request form.
• Messages and billing: supported preferences control reminders, earned printables, and the child’s name in email. Newsletter unsubscribe and subscription cancellation are separate. Where available, “Manage subscription” opens Stripe’s billing portal.

We may verify that you are the parent, guardian, account holder, or authorized representative before disclosing or deleting information. You do not need to delete your account to ask questions or exercise a right. A request-form confirmation acknowledges submission; it is not confirmation that deletion has finished.

Regional privacy rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a portable copy of information; restrict or object to processing; withdraw consent; and complain to a privacy regulator. We do not discriminate for exercising applicable privacy rights.

Where EU, UK, or similar law applies, processing may rely on consent for optional features/communications, providing a requested service or contract with the parent, legal obligations, or legitimate interests such as security, subject to children’s protections and applicable limits. Optional heritage or appearance details can require additional safeguards.

We do not sell information or share it for cross-context behavioral advertising. Operational provider disclosures above are separate from that statement. Use our privacy request form or contact us. We respond within applicable legal deadlines and explain any lawful extension or exception.

Security, international processing, and changes

We use encrypted network connections, authentication, access checks, private storage, and expiring asset links to protect information. Authorized staff and providers may access information needed for their work. No online service can guarantee perfect security.

Providers may process information in the United States and other countries. Safeguards depend on the provider, contract, processing location, and law. Contact us for information about safeguards relevant to your data.

We update the date above when this policy changes. Where required, we give parents direct notice and obtain renewed consent before material changes to children’s collection, use, or disclosure. Our Terms of Use and Legal Notices remain available without sign-in.