Your family’s privacy

Updated 10 September 2026 · Development preview

Pebbles uses parent account details to provide family access, child profiles and settings to select suitable activities, and device records to pair and revoke devices.

Voice and AI are separate choices

Online voice sends short recordings from the device through Pebbles to the configured speech provider. Online reading help can send reading attempts and activity text for processing. These purposes start off and require a parent’s permission for each child. Operating-system microphone permission alone does not enable online voice.

Online AI remains unavailable until the configured providers and the child-data release requirements are approved. The parent settings show its current availability. See AI and voice for the controls and limitations.

What is saved

The reading proxy does not intentionally save audio clips or transcripts in the Pebbles database. Provider processing and retention are separate and must be documented before online AI is enabled. Optional learning observations stay on the child’s device. Optional cloud summaries contain practice totals and recent results, not recordings or answer text.

A separate rewards backup choice saves new completion IDs, activity days, coin awards and racing lessons for cross-device recovery. It starts off. Legacy coins, streaks, car preferences and quest schedules remain local. Deleting the backup pauses it and prevents older device records from restoring that cloud history.

Permission changes and minimal report categories are recorded for operation and review. Routine reporting does not ask for a transcript. Browsing checks concern website addresses and public results; Pebbles does not monitor private conversations for grooming.

Change a choice or request deletion

Parents can turn each AI purpose off in Learning → Privacy and AI. Turning a purpose off prevents further authorised requests and cancels pending responses when the server checks permission again. It cannot recall data already sent. Cloud summary deletion is available in Learning; it does not erase records saved on devices.

Signed-in parents can download scoped child data, delete cloud progress or reward backups, and track full access or erasure review requests in Account or the child’s Privacy and AI section. A received request is not a completed deletion. Local device and provider records need separate handling.

Use Help and reporting for privacy requests. This development notice describes the implemented boundaries; the final controller contact, lawful-basis, provider/transfer and retention schedule must be approved before external child access.