The long version of the rules.
Privacy for children is not a setting we added later. It is the shape of the thing. This page says exactly what happens to what your child says, what we keep, and what you can erase.
A parent is always the account holder
There is no way for a child to create a Prodigee account. A parent registers with an email address, adds each child by first name and age, and starts every session by choosing the child from the family page. There is no child password to remember and none to lose.
A child session ends on its own after a few hours. Nothing a child does can change the account, the consent settings, or anything about another child in the family.
Voice is never stored
When your child speaks, the audio is turned into text so the teacher can answer, and the audio is discarded in the same moment. There is no recording, no audio file, and nothing to play back. What remains is a text transcript, which you can read on the family page.
The microphone is a permission you grant. It is on by default because most children prefer to talk, and you can switch it off on the family page at any time. With it off, your child types.
Memory is opt-in and erasable
By default, no character remembers your child between sessions. If you turn memory on, a character may keep a few short notes: a favorite topic, what your child was working on, an inside joke. That is what lets a lesson pick up where it left off.
- Notes are short, written by the character, and limited to a handful per teacher.
- Anything that looks like contact details, an address, or a way to identify your child outside the school is stripped before it can be saved.
- You can read every note on the family page.
- One button erases all of it, immediately and completely.
No ads, no selling, no trackers in the school
There are no advertisements in Prodigee and there will not be. Nothing is sold inside the school. Nothing about your child is sold, rented, or shared with advertisers or data brokers.
The school itself carries no analytics or tracking scripts. If we ever measure how this marketing site is used, it happens only on pages built for adults, never on a page a child uses.
Every reply is checked
Before anything reaches your child, it passes two checks.
- The AI model runs with its safety filters at the strictest setting on every category: harassment, hate, sexual content, and dangerous content.
- Prodigee then checks the reply itself: that the character stayed in role, gave out no contact information, asked for none, and passed your child to another teacher only for a reason that teacher is allowed to give.
If either check fails, your child sees a gentle redirect instead of the reply. Characters also never ask a child for their full name, address, school, or anything that could identify them.
Children are never visible to each other
There are no profiles, no chat between children, no leaderboards, and no friend lists. A child is never visible to any other user of Prodigee. The twenty background students in the classroom are scenery written by us, not accounts.
What we store
| About | What |
|---|---|
| The parent | Email address, a hashed password, display name |
| Each child | First name or nickname, age, grade, avatar choice, learning style |
| Sessions | Text transcripts, which character spoke, and when |
| Progress | Which sounds and skills were practiced and how it went |
| Consents | Your yes or no for the microphone and for memory |
Not stored, ever: audio, video, photos, location, contacts, or anything else from the device.
Where it runs
Prodigee runs on Google Cloud in the United States. Data is encrypted in transit and at rest. The characters are powered by Google’s Gemini models through Google Cloud, whose terms do not allow what your child says to be used to train those models.
What you can do
- See everything: progress, transcripts, and memory notes are on the family page.
- Erase memory with one button, any time.
- Turn the microphone or memory off or on, per child, any time.
- Delete the whole account by writing to [email protected]. We confirm, then remove the parent record, every child, every transcript, and every note.
The formal version of all of this is in the privacy policy. If anything on this page and that one ever disagree, tell us, and we will fix whichever is wrong.