Privacy Policy

Last updated: 25 July 2026 · Effective: 25 July 2026

Zumo (“Zumo,” “we,” “us”) provides brain-training games for children and a progress dashboard for their parents, at zumo.vn. This policy explains what information we collect, why we collect it, how we use and protect it, and the choices you have. We have written it to be read by parents — because in Zumo, a grown-up sets everything up and stays in control.

1. Who this policy covers

Zumo has two kinds of users, and one account ties them together:

• Parents and carers — grown-ups who register an account, add children, and use the parent dashboard.
• Children — who sign in to the Kids Zone with a code created by their parent and play the games.

A child’s account only exists because a parent created it. Throughout this policy, “you” means the parent or carer who holds the account.

2. Information we collect

Information parents give us

• Account details — your email address and a password (which we store only as a securely hashed value, never in plain text).
• Child profiles you create — a first name or nickname for each child and their age band (used to size puzzles to their age). An email address for a child is optional and, if given, is only a label for their login code.
• Family setup — invitations you send to another parent or carer to help manage the family.

Information created as the games are used

• Gameplay and progress — which games a child plays, scores, stars, streaks, skill scores across the five thinking skills, and competition results and medals.
• Credits — the play-credit balance and allowance you set for each child, and top-ups.
• Friends and competitions — friend requests between children and participation in live competitions, where a child’s display name and results appear on a leaderboard to other participants.

Information collected automatically

• Sign-in and security logs — each sign-in attempt (for both parents and children) is recorded with its outcome, time, and IP address, so we can keep accounts secure and detect abuse.
• Basic technical data — standard information a browser sends, such as device and browser type, used to operate and troubleshoot the service.

We do not use advertising trackers, and we do not build advertising profiles of children or adults.

3. How we use information

We use the information above only to run Zumo and keep it safe:

• To create and operate parent and child accounts and let people sign in.
• To run the games, size puzzles to a child’s age, and record progress.
• To power the parent dashboard — activity, skill trends and reports.
• To run live competitions and show leaderboards to participants.
• To manage play credits and any credits you choose to add.
• To send account and service email you need (see the next section).
• To protect accounts, prevent abuse, debug problems, and meet legal obligations.

4. Email we send you

We send email only to parents, at the address on the account. Zumo sends service and transactional email — for example: verifying your address, password and security notices, invitations you ask us to send to a co-parent, and important notices about your account or the service.

We deliver email through Amazon Simple Email Service (Amazon SES), a service of Amazon Web Services, which processes the message and recipient address in order to deliver it. You can reach us at any time to update your email preferences; note that certain essential account and security messages are part of the service and are not promotional.

5. Children’s privacy

Zumo is designed for children aged 4–12 and is built to minimise the information collected about them:

• A child account is created and controlled by a parent, who provides only a first name/nickname and an age band.
• Children sign in with a code — they are never asked for an email, password, phone number, or other contact details.
• There is no advertising to children and no open chat with strangers. Interaction between children is limited to parent-visible features such as friend requests and competition leaderboards using display names.
• A parent can review a child’s information and progress on the dashboard, and can ask us to correct or delete a child’s account and data at any time.

If you believe a child has provided us information without a parent’s involvement, please contact us (see below) and we will delete it.

6. When we share information

We do not sell personal information. We share it only in these limited ways:

• Service providers who help us run Zumo under contract — for example our cloud hosting and database provider (Amazon Web Services) and our email-delivery provider (Amazon SES). They may process information only to provide their service to us.
• Within your family — children’s profiles and progress are visible to the parents and carers on your account; a child’s display name and results are visible to other participants during competitions and to accepted friends.
• Legal and safety — when required by law, or to protect the rights, safety and security of our users and the service.
• Business transfers — if Zumo is involved in a merger, acquisition or asset sale, information may transfer as part of that transaction, subject to this policy.

7. How long we keep information

We keep information for as long as your account is active and as needed to provide the service. Security logs are kept for a limited period to protect accounts. When you delete a child’s account or your whole account, we delete or anonymise the associated personal information within a reasonable period, except where we must retain some of it to meet a legal obligation.

8. How we protect information

• Traffic to Zumo is encrypted in transit with HTTPS/TLS.
• Passwords are stored only as salted, hashed values — never in readable form.
• Children sign in with codes rather than reusable personal credentials, and each sign-in attempt is logged.
• Access to systems and data is limited to what is needed to operate the service.

No online service can promise perfect security, but we work to protect your family’s information and to respond quickly if something goes wrong.

9. Your choices and rights

As the account holder you can, for yourself and for the children on your account:

• Access and review the information and progress on your dashboard.
• Correct account and child-profile details in the app.
• Delete a child’s account, or your whole account and its data, by using the app or by contacting us.
• Ask us for a copy of your information, or to restrict or object to certain processing, where applicable law gives you that right.

To exercise any of these, use the settings in the app or email us at the address below.

10. Cookies and similar technologies

Zumo uses only the storage it needs to work — for example, keeping you signed in and remembering essential session state. We do not use third-party advertising or cross-site tracking cookies.

11. Changes to this policy

We may update this policy as Zumo evolves. When we make a material change, we will update the “Last updated” date above and, where appropriate, notify account holders by email or in the app. Continuing to use Zumo after a change means you accept the updated policy.

12. How to contact us