How we keep Elonic World safe
This page is maintained by the Elonic World team to answer common security, privacy, and safety questions about our platform for children and families.
This is an app-owned page describing our current practices. It is not an independent certification or third-party audit.
Accounts & access
- Parent accounts are protected by email and password sign-in, with an option to sign in using Google.
- Passwords are checked against known leaked-password databases at signup and change time to help prevent reuse of compromised credentials.
- Child profiles live under a parent account and are gated behind the parent's sign-in — children do not create their own accounts.
- Sessions are managed by our authentication provider using short-lived tokens with secure refresh.
Data protection
- Application data is stored in our managed database with row-level security so each family can only access their own records.
- Server-side functions that handle sensitive operations are not exposed to anonymous or signed-in users directly — they run with service-only privileges.
- We use HTTPS for all traffic between your browser or device and our servers.
Child safety
- Content is curated to be age-appropriate for children ages 2–16.
- We do not show third-party advertising or in-app purchases inside child-facing screens.
- Parental controls allow restricting activities and daily time limits per child profile.
- We aim to align with COPPA and GDPR-K principles for products used by children. Please contact us with any questions about specific regional requirements.
- Parents can review, correct and permanently delete a child's profile at any time — see our Privacy Policy for exactly what we store and how deletion works.
Cookies & analytics
No analytics or error-reporting script loads until a grown-up chooses "Accept All" on the cookie banner. Choosing "Essential Only", or simply closing the banner, means no third-party tracking is requested at all.
Inside our mobile app, third-party tracking is switched off permanently and cannot be enabled.
Links that lead away from Elonic World — Amazon, YouTube, social media and app stores — are protected by a grown-ups-only question, so children cannot leave the site on their own.
Subprocessors
We rely on a small number of trusted service providers to run Elonic World, including:
- Hosting, database, and authentication: Lovable Cloud
- Payments for optional purchases: Stripe
- Voice guidance: ElevenLabs
- Push notifications: Firebase Cloud Messaging
Contact us
Questions about privacy, security, or to report a concern? Reach out via our website at elonicworld.com.
The information on this page reflects our current practices and may change as the product evolves. It is provided for transparency and does not constitute a contractual guarantee or legal advice.