NameChildProfile.name

The name shown on the child's screen. First name is enough.

until you delete the profile

Age and age bandChildProfile.age · ageBand

Age and its band choose the reading level and which sections are eligible. Not a birthday.

until you delete the profile

When you consented, and the wordingChildProfile.parentConsentAt · parentConsentText

When you gave consent and the exact wording you agreed to, kept for audit.

until you delete the profile

Weekly time, session length and interestsChildProfile.timePerWeekMinutes · sessionLengthMinutes · preferences

Minutes per week, session length and the interests you typed, so the plan can be generated.

until you delete the profile

The child's bookmark linkChildProfile.childAccessToken

The opaque link the child bookmarks. It is a URL, not a secret; the PIN is the gate.

until you delete the profile

The PIN (as a hash) and its lockChildProfile.pinHash · pinVersion · pinFailedAttempts · pinLockedUntil

A bcrypt hash of the 4-digit PIN (we cannot read it back), its version, and the failed-attempt lock.

until you delete the profile

Sibling board opt-inChildProfile.boardOptIn

Whether this child appears on the sibling board. Off by default.

until you delete the profile

The weekly planChildPlan · ChildPlanWeek

The generated weekly plan: week titles, goals, steps and your notes.

until you delete the profile

Assigned sectionsChildAssignment

Which published sections are assigned, and to which week.

until you delete the profile

Progress per sectionChildSectionProgress.status · attempts · passedAt

Per section: assigned / reading / passed, how many attempts, when it was passed.

until you delete the profile

Points awardedChildPointAward.points

Points awarded per section, with the attempt count at award time.

until you delete the profile

email · password · login

A child has no email, login or password. The parent's session and a PIN are the only access.

never

quiz answers · free text

Quiz picks are scored on the server and not kept; nothing a child types is stored.

never

analytics

Child-mode routes are excluded from the site's cookieless analytics. No third-party scripts.

never

birthday · school · photo

No birthday, school, photo or location is ever asked for.

never

There is no automatic expiry yet: child data stays until you erase the profile. Erasing it removes every row in every table listed here at the same moment.