PlayWaka
Your privacy and trust are sacred to us. Learn how Brightkiwi safeguards your information and upholds child-first safety standards across PlayWaka.
Our Four Core Privacy Commitments
PlayWaka is built as an educational sanctuary. We treat student and child data with extreme care and zero compromises.
No Data Selling
We never sell, rent, or monetize your personal or gameplay information.
No Behavioral Ads
Our platform contains zero third-party targeted behavioral advertising.
Child-Safe By Design
Compliant with COPPA, GDPR-K, and New Zealand Privacy Principles.
Full Control
Parents and educators can inspect, export, or delete account data anytime.
Table of Contents
1. Overview & Scope
Brightkiwi ('we', 'us', or 'our') operates the PlayWaka web portal, educational services, and interactive learning environments. This Privacy Policy describes how we collect, store, protect, and disclose information when you access or interact with our services.
By accessing PlayWaka, you acknowledge that you have read and understood the data practices outlined in this policy. If you are a parent, guardian, or educator, this policy explains how we protect the youth under your supervision.
2. Information We Collect
We collect minimal information necessary to deliver educational gameplay and platform functionality:
- Account Data: Screen name / username, password hash (salted and encrypted), avatar choices, and optionally an email address (used solely for account recovery and notification preferences).
- Educational & Gameplay Progress: Quiz answers, completion status, XP, level, earned coins and gems, quest milestones, and avatar items.
- User Submissions: Community questions, answers, and blog articles submitted through our collaborative feeds.
- Technical & Log Data: Browser type, device classification (desktop, mobile, tablet), IP address (anonymized for security logs), and general timestamps.
3. Children's Privacy Protections
Protecting young learners is the foundational pillar of PlayWaka. We design our systems to comply with the Children's Online Privacy Protection Act (COPPA), the General Data Protection Regulation (GDPR-K), and the New Zealand Privacy Act 2020.
Youth Safeguards in Place:
- We encourage students to choose imaginative nicknames rather than their real full names.
- We never condition a child's participation in any quest or game on the disclosure of more personal information than is reasonably necessary.
- Parents and schools maintain the right to review, edit, or purge their child's account at any point.
4. How We Use Information
We utilize collected information solely for legitimate educational and platform operation purposes:
- To authenticate logins and manage virtual character states.
- To calculate quiz scores, award virtual rewards, and recommend appropriate learning levels.
- To maintain platform stability, prevent cheating, and protect users from abuse.
- To provide technical support and respond to parental or educator inquiries.
5. Cookies & Local Storage
PlayWaka uses essential session cookies and local storage tokens strictly required for login authentication, user session persistence, and CSRF protection against cross-site request forgery attacks.
We do NOT employ cross-site tracking cookies, behavioral tracking beacons, or commercial advertising pixels.
6. Data Sharing & Third Parties
We do not sell, rent, or monetize personal information. Data is only shared with trusted technical service providers essential to maintaining our infrastructure (such as secure cloud hosting and database systems under strict confidentiality agreements).
We may also disclose information if required by law or a valid court order, or to protect the vital safety of our users and the public.
7. Data Security & Infrastructure
We implement industry-standard administrative, physical, and technical safeguards, including HTTPS SSL/TLS encryption for all data in transit, salted password hashing, and restricted database access controls.
8. Data Retention & Account Deletion
We retain account information for as long as your account remains active. If you or your school requests account termination, all personal data, avatar associations, and private logs are permanently and securely deleted within 30 days.
9. Your Rights & Parental Controls
Depending on your jurisdiction, you and your legal guardians have the right to:
- Access and receive a copy of any personal data we hold about you.
- Request correction of incomplete or inaccurate profile details.
- Request total erasure of your account and associated records.
- Withdraw consent at any time for non-essential processing.
10. Privacy Officer Contact
If you have questions, comments, or wish to exercise your privacy rights, please reach out to our designated Privacy Team: