Orby

Privacy Policy

How Seek Junior protects your child's data

← Back
📅 Last updated: April 2026  |  Effective: April 2026  |  Applies to: seekjunior.com and all Seek Junior services

🏢 Who We Are

Seek Junior is an AI-powered educational platform for children aged 5–13, designed to provide safe, curriculum-aligned learning in Ireland and the United Kingdom.

Data Controller: Seek Junior (operated by Luke Thomas)
Contact: support@seekjunior.com
Country: Ireland (EU GDPR applies)

🛡️ We are committed to children's privacy. This policy explains clearly what data we collect, why we collect it, how we protect it, and your rights as a parent or guardian. We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the UK Age Appropriate Design Code (Children's Code).

📋 What Data We Collect

About parents/guardians (collected at signup):

About children (created by the parent/guardian):

⚠️ We do not collect: full names, dates of birth, photos, school names, location data, device identifiers, or any biometric data. Children are never asked to provide personal information directly.

⚖️ Why We Collect Data & Our Legal Basis

Under GDPR Article 6, we process data on the following lawful bases:

👨‍👩‍👧 Children's data is always processed under parental consent. We do not use children's data for advertising, profiling for commercial purposes, or automated decision-making that has legal or similarly significant effects.

🗓️ How Long We Keep Data

We apply the principle of data minimisation — we only keep data for as long as necessary.

Data TypeRetention PeriodWhy
Parent account dataUntil account deletedRequired for service delivery
Child profile & nameUntil child profile deletedRequired for personalisation
Search history90 days, then auto-deletedParental monitoring; minimisation
Safety alerts180 daysParental oversight & safety
Conversation history (Study Buddy)Last 30 messages onlyContext continuity; minimisation
Quest rewards & progressUntil child profile deletedLearning continuity
Image view logs90 daysSafety monitoring
Daily AI usage counterResets at midnight dailyFair usage enforcement
Payment records7 yearsLegal / tax obligation
Parent account data
Until account deleted
Required for service delivery
Child profile & name
Until child profile deleted
Required for personalisation
Search history
90 days, then auto-deleted
Parental monitoring; minimisation
Safety alerts
180 days
Parental oversight & safety
Conversation history (Study Buddy)
Last 30 messages only
Context continuity; minimisation
Quest rewards & progress
Until child profile deleted
Learning continuity
Image view logs
90 days
Safety monitoring
Daily AI usage counter
Resets at midnight daily
Fair usage enforcement
Payment records
7 years
Legal / tax obligation

🔗 Third-Party Services

We use the following trusted third-party services. Each acts as a data processor under a Data Processing Agreement with Seek Junior:

🤖 Anthropic (Claude AI)

Powers Orby's responses. Search queries and chat messages are processed. Anthropic does not use child data to train models.

Privacy Policy →

🔥 Google Firebase

Authentication, database, and hosting. Data stored in EU (europe-west1). Subject to Google's DPA.

Privacy Policy →

💳 Stripe

Payment processing. Card details go directly to Stripe — Seek Junior never sees or stores them.

Privacy Policy →

🎙️ ElevenLabs

Pre-recorded voice audio for Orby. No child voice data is captured or sent to ElevenLabs.

Privacy Policy →

🛡️ OpenAI Moderation API

All child queries are checked for harmful content before processing. OpenAI does not use moderation API inputs for model training.

Privacy Policy →

🌍 Data transfers: Anthropic's servers are located in the United States. Transfers are covered by Standard Contractual Clauses (SCCs) under GDPR Article 46. All other data is stored in the EU.

Your Rights Under GDPR

As a parent or guardian, you have the following rights over your child's data:

👁️ Right to Access (Art. 15)

View all data held about your child via the Parent Dashboard → Download Data button.

✏️ Right to Rectification (Art. 16)

Correct your child's name or age group in the dashboard child settings.

🗑️ Right to Erasure (Art. 17)

Delete your child's profile and all associated data permanently via the dashboard. Account deletion available on request.

📦 Right to Portability (Art. 20)

Export your child's data as a JSON file using the Download Data button in the dashboard.

🚫 Right to Object (Art. 21)

Object to processing based on legitimate interests. Contact us at support@seekjunior.com.

⏸️ Right to Restrict (Art. 18)

Request restriction of processing while a complaint is being investigated.

🔕 Withdraw Consent

Withdraw consent for a child profile at any time by deleting the profile. This does not affect prior processing.

📢 Right to Complain

Lodge a complaint with the Irish DPC (dataprotection.ie) or the UK ICO (ico.org.uk).

👶 Children's Privacy Standards

Seek Junior is designed to comply with the highest children's privacy standards across both Ireland and the UK:

🇮🇪 Ireland — EU GDPR & Irish Data Protection Act 2018

🇬🇧 UK — Age Appropriate Design Code (Children's Code)

Applied across both markets:

🔒 Security

We implement appropriate technical and organisational measures to protect personal data:

HTTPS/TLS encryption Firebase Authentication Firestore security rules PII detection & blocking Content moderation Rate limiting EU data storage

In the event of a data breach that is likely to result in a risk to individuals' rights and freedoms, we will notify the Irish Data Protection Commission within 72 hours and affected users without undue delay.

🍪 Cookies

Seek Junior uses only essential cookies necessary for the service to function:

We do not use advertising cookies, analytics cookies, or any third-party tracking cookies. No cookie consent banner is required for strictly necessary cookies under ePrivacy Directive Article 5(3).

📝 Changes to This Policy

We will notify you by email at least 30 days before making any material changes to this Privacy Policy. Continued use of the service after notification constitutes acceptance. You may always delete your account if you do not agree with changes.

📧 Contact Us

For any privacy-related questions, requests to exercise your rights, or concerns:

Email: support@seekjunior.com

Response time: Within 30 days (GDPR requirement)

Supervisory Authority (Ireland): Data Protection Commission — dataprotection.ie

Supervisory Authority (UK): Information Commissioner's Office — ico.org.uk