Privacy policy

In short

Codniko is made for children, so we keep data to a minimum. There is no advertising, the app uses no third-party analytics, and we never ask for a child's real name.

What we collect

• The parent's email and password — for the account. The password is stored only as a hash (argon2id), never in plain text.
• The parent's name — optional. If you fill it in we use it only to address you by name in an email; leaving it empty takes nothing away from the account.
• The child's nickname and birth year — to tell profiles apart and match tasks to their age. We do not need a real name.
• Learning progress — how the child answered each task and how long they studied. This is what the parent area shows.
• Your message, if you write to us — subject, text, your email and the app version, so we can find the problem.
• When the message comes from the website form we also store the IP address — to guard against spam. It is used for nothing else and is deleted with the account.

What we do not collect

• Location, contacts, camera or microphone — the app never asks for these permissions.
• Advertising identifiers — there is no advertising.
• Third-party analytics in the app — app statistics are processed only on our own server.
• A child's real name, photo or contact details.

Website statistics

To count visits to codniko.ge we use Vercel Web Analytics. It uses no cookies and cannot identify a person: it counts which page was opened, where you came from, the country, browser and device type. The temporary identifier used to count a visitor is deleted automatically within 24 hours. Admin pages and password-reset links are never sent to it. The app does not use this service.

Where it is stored

Learning progress is stored on the device first, in an encrypted database. When there is a connection it syncs to our server so the parent can see it at any time and nothing is lost if the device is. On the phone the data belongs to one account: signing in with a different account clears the local copy.

Sending email

System letters — the password recovery link and the password-changed notice — are sent through a mail service (Resend). Only your email address and the text of the letter are passed to it. We send no marketing or newsletter email.

Reminders

A parent can turn on a daily reminder: at most one notification a day, around 6:30 pm, if the child has not played that day. Turning it on is optional, happens in the parent area (behind the Parent Gate) and can be turned off at any time in settings. The text is generic and never contains the child's name.

• On iPhone and iPad we store Apple's notification token and the device's time zone (for example Asia/Tbilisi) on our server. Our server sends the notification directly through Apple's service (APNs), with no third-party SDK. We also record whether the notification was opened.
• On Android reminders are scheduled locally on the device: there is no notification token and we do not use Google's push service. The server only stores that a reminder is on (with a random device number that is not an advertising identifier, and the time zone) and counts how often the app is opened from a reminder.
• When an account is deleted, the tokens and reminder settings are deleted. Send and open statistics contain no email address and remain anonymous, detached from any account.

Children's safety

The child's area has no outside links, chat, social networks or purchases. Settings and the parent area are behind a parent gate.

Deletion and contact

You can delete your account from the app itself: Parent area → Settings → “Delete account”. Deletion happens immediately and takes child profiles, progress, events and your messages with it — from both the server and the phone. Questions: hello@codniko.ge.