What we keep, where it goes, and how to delete it.

Who we are

The Good Rabbit Hole is a small, independent pilot in Canada, not a big company. It is run by Chris, its founder, who is the person responsible for how it handles your family’s data. You can reach him through the contact form or at info@goodrabbithole.com. The terms say who the pilot is for and how to leave it.

Only grown-ups have accounts

A parent or guardian signs in, with an email and password or with Google. We keep your name and email to run your account. Children have no account, email or password of their own; they use it under yours, and every account is approved by hand before it works.

We also count how much AI your family uses each month, as amounts only and never what anyone wrote, to keep to the monthly AI allowance the terms describe.

And a short record of your family’s plan, kept with the record that your account was approved: when your family was first approved, whether it has had its free days, which plan you chose, whether it’s active and when it renews, when we sent you notice before the pilot ended, and the reference numbers Stripe gives your account and plan. Never your card details. Deleting your family’s learning data doesn’t remove it, so the free days and the founding price go to each family once.

One account covers the family: you can add up to 6 children, each with their own sessions and their own section of the family’s Sunday report. When there’s more than one, a child picks their name from a list to start; there’s no password between brothers and sisters. A grown-up PIN keeps the parent pages (your dashboard, reports and settings) away from children using the device.

What we keep about each child

• The nickname you give us (please don’t use a full name), their age and grade, anything optional you add in settings, such as interests, and when you agreed to how it works for them, with a record of which version of that explanation you read.
• Their sessions: what they write to the guide and its replies, the practice problems and their answers, the topics they explore, and what they choose to save.
• Safety alerts, if the check thinks they may not be safe, which you see on your dashboard.
• How many of their messages the safety check turned away, and what kind of thing it was. Not the words: those are replaced before anything is saved.
• How long they were active, and their own weekly summary, written for you.

What we don’t do

• No advertising, and we never sell or rent anyone’s data.
• No analytics or tracking on any page a child uses, or on the pages behind sign-in.
• We never ask for location, contacts or photos, and no audio ever reaches us.
• No public profiles, and no way to talk to other users.
• We don’t use your child’s conversations to train AI models, and we haven’t given Google permission to.

Where it is stored, and who processes it

Chats and learning records are stored in Google Cloud in Montreal, Canada. In live mode, your child's messages are sent to Google's Gemini AI, requested in the same Montreal region, for tutoring replies and safety checks. The same AI also writes your child's practice around whatever they are exploring. Math numbers and answers are set by our code; questions in other subjects are written by the AI for their grade's learning goals and used only if a second, independent AI check reaches the same answer (otherwise a question from our hand-checked set is used). Once a week it writes a short summary for you of what each child explored, from that child's own sessions only. It reads their exploration messages to do that, but quotes only what your child chose to share with you, and never includes safety alerts, which you see on your dashboard. The website itself runs on Netlify, whose servers may be outside Canada, so messages pass through them on the way, and sign-in details are held by Firebase Authentication, which is not tied to one country. We therefore cannot promise Canadian-only processing. If you turn on talking instead of typing, your child's browser turns their speech into text using its own speech service (Google's on Chrome, Microsoft's on Edge, Apple's on Safari and iPhones), so their voice may be sent to that company. It never reaches us: we only ever receive the text, never audio. This setting only controls our own Talk button; the dictation microphone on iPhone and iPad keyboards is Apple's, works whatever you choose here, and can be turned off in Settings > General > Keyboard.

Emails to you are sent through Resend, which handles your name and email address to deliver them: the note that your request arrived, your welcome, and, once your family is set up, a short note when a Sunday report is ready or when something on your dashboard is worth a look; and, about your plan, the notice before the pilot ends, a reminder before free days run out, and a confirmation when you choose one. Verification and password-reset emails are sent by Firebase, part of Google. None of these emails ever contains anything a child wrote, and no email is ever sent to a child.

If you choose a plan, payments are handled by Stripe. To take payment, Stripe receives your name, email address, card details and billing address, with a reference number for your account so the payment can be matched to it, and may store and process them outside Canada. We never see your full card number. Nothing about your children ever goes to Stripe: not their names, not their ages, nothing they wrote. Paying and managing a plan happen on Stripe’s own pages, under Stripe’s own privacy policy.

Nothing is read from the database by the browser: every read and write goes through our server, which checks who is asking. All traffic is encrypted.

Cookies, and counting visits

On the public pages (the home page, How it works, Pricing, About us, this page, Contact, and the page for signing in or asking for access) we use Google Analytics to count visits and see how people find the site, including which button someone pressed to ask for access and whether they got as far as sending the form. Google sets its own cookies to do that, which last up to two years. It works out roughly which country or city a visit came from, and handles the data on its own servers, which may be outside Canada. Its advertising features are switched off, and blocking it changes nothing about how the site works. Nothing you type into a form is ever sent to it.

It never runs on any page a child uses, or on the pages behind sign-in: your dashboard, reports and settings. Nothing about your family or your child’s learning goes to it.

The only cookies we set ourselves are secure ones: one that keeps a grown-up signed in, and a short-lived one (20 minutes) that remembers the grown-up PIN was typed, so the parent pages stay closed to a child using the same device.

Our pages never load anything from Stripe. If you choose a plan, Stripe’s own pages for paying and managing it set Stripe’s own cookies there.

How long we keep it

• Sessions and reports: 30 or 90 days, one choice for the whole family in settings. Then they delete themselves.
• A session a child leaves open ends on its own after two hours with nothing from them, and its report is written then, as if they had tapped Finish.
• Messages sent through the contact form: up to a year. They’re emailed to us, and those emails never include anything a child wrote.
• Your sign-in account: until you ask us to remove it.
• The record of your family’s plan: kept with the record that your account was approved, even after you delete your learning data or we close your account, so the free days and the founding price go to each family once. It holds no card details, and nothing about your children. Stripe keeps its own payment records under its own rules.

Your choices

• Download all of your family’s learning data, every child’s included, any time from the settings page.
• Remove one child in settings, and their sessions and Sunday reports are deleted with them, leaving everyone else’s alone. If any of it takes longer, it’s hidden from the app meanwhile (a download still includes it) and our regular clean-up deletes it.
• Or delete all of your family’s learning data at once, also from the settings page.
• Turn the Sunday report on or off for the family, and talking instead of typing for each child, in settings. That switch only controls our own Talk button: the dictation microphone on an iPhone or iPad keyboard is Apple’s, and is turned off on the device, in Settings > General > Keyboard.
• To remove your sign-in account entirely, contact us.

Children

It’s made for children about 8 to 12, used under a parent’s account, with the parent’s agreement recorded for each child as they’re added, before their first session. If you think a child is using it without a parent knowing, please tell us and we’ll act on it.

Changes

If we change what we keep or where it goes, we’ll update this page and the date at the top.