Last updated : 20 August 2026
PromptLandia is a learning app for children aged 6 to 12, used under a parent’s responsibility. This page describes exactly what it collects and what it does not. It is written to be read, not to protect us.
From the parent: an email address and a password, used only to open the account and sign back into it.
From the child: a first name (or a nickname) and an avatar chosen from a list of emoji. Nothing else. No date of birth, no address, no photo, no phone number, no email. The child has no account: their profile lives under their parent’s.
From usage: finished lessons, experience points, the streak of consecutive days, and the number of learning minutes per day. This exists so the child can pick up where they left off, so the daily limit works, and so the parent can see what was learned.
What the child writes in the Workshop. Those texts are shown to them and to their parent, and to nobody else. The text boxes are for phrasing a request, not for introducing yourself: remind your child not to type their surname, address or school there. If it happens, write to us and we will erase the passage.
No advertising, of any kind.
No advertising identifiers, no profiling, no analytics. The only third-party component embedded in the app is the crash diagnostic tool described below.
We never sell or share data with third parties.
No live conversation with an artificial intelligence: lessons are written and reviewed before release, and the space where an AI would answer is disabled on our servers. If we ever open it, we will say so in the app beforehand, not afterwards.
We never ask a child for personal information.
The account, profiles and progress are processed to deliver the service you asked for — the contract with you, the parent (Article 6(1)(b) GDPR). You open the account, and you authorise the processing of your child’s data.
Crash reports rest on our legitimate interest in fixing what breaks (Article 6(1)(f)).
We ask for no advertising consent, because there is no advertising.
When the app hits an error, an automatic technical report is sent to Sentry (Functional Software, Inc.), on servers located in Germany. It contains the error, where in the code it happened, the app version and the device model.
Left at its factory settings, that tool would send far more. So we restrain it in code: we strip the installation identifier (a number that would follow the device over time), the detailed device fingerprint, network request URLs and technical logs from every report. We also turned off stability statistics, which would have phoned home on every launch. The result: nothing leaves while the app is working, and a crash report cannot be tied back to your child.
We write this because it is verifiable, not because it is flattering: an identifier, even without a name, is still personal data under the GDPR — which is precisely why we remove it.
Four companies are involved technically, and none of them receives data for advertising purposes:
Neon (Frankfurt, Germany) hosts the database: the parent account, child profiles and progress.
Vercel runs the servers that answer the app.
Expo distributes app updates. The app asks its servers on each launch whether a new one exists; that request carries no account, no profile and no progress.
RevenueCat handles the family subscription status. It knows whether an account is subscribed; it receives no child’s first name, no progress, and nothing written in the app.
Your family’s data is stored in Europe, in Frankfurt. Crash reports also go to Sentry’s European region.
Our providers and we are based in the United States. Where access from the United States is technically necessary, it is covered by the standard contractual clauses adopted by the European Commission. The GDPR applies throughout.
Everything travelling between the device and our servers is encrypted (HTTPS). Passwords are never stored in readable form. Access to the database is limited to the application servers, through credentials that never leave our machines.
We are not writing here that nothing can go wrong — we are writing what we do to make it unlikely.
The account, profiles and progress: for as long as the account exists. When it is deleted, all of it is erased.
Crash reports, from which we strip every identifier before sending: 90 days at most.
An email you write to us: for as long as it takes to handle your request, then 12 months at most, so we keep a record of what we told you.
Nothing is kept “just in case”.
You can ask what we hold, obtain a copy, have it corrected or erased, restrict its processing, or object to processing based on our legitimate interest.
You can also erase everything yourself, without asking: from Profile → Account settings → Delete my account in the app, or from our account deletion page if you have uninstalled it. Deletion from our live databases is immediate.
A person reads every message and answers — usually within two working days, and within one month at the latest for a request about your data.
You can lodge a complaint with the data protection authority of your country. In France, that is the CNIL (cnil.fr). You do not need our permission, or even to tell us — but if you do tell us, we will try to put it right ourselves first.
The app offers an optional family subscription. Payments are handled by the app store (Google Play or the App Store): we never receive or store any payment details. The free tier remains usable with no time limit.
If this policy changes, the date at the top of the page changes with it. A change that widened data collection would be announced in the app before taking effect.
Marnwell LLC, a limited liability company registered in New Mexico, United States
15442 Ventura Blvd, Ste 201-2828, Sherman Oaks, CA 91403, United States
+1 818 721 0412 · contact@marnwellstudio.com