Privacy Notice
Who we are
Maestro AI Studio is operated by Mindful Gaming UK, a UK registered charity (charity no. 1212285). The service is hosted on Google Cloud Run in the europe-west2 region (London).
What we store about you
- Account profile: display name, email (the account owner), password hash + salt (scrypt), and the date the account was created.
- Learner profiles: display name, age (for children), and optionally a guardian name + guardian email when you create a child profile.
- Daily AI usage counters: per-profile counts of chat / generation / live-tutor turns used today, for free-tier rate limiting. Reset each calendar day.
- Billing metadata: if you subscribe to Premium, your Stripe customer ID and subscription status. We do not see or store your card details.
- Chat transcripts: your conversations with the AI Buddy / Maestro tutor are stored only in your browser's localStorage — they never leave your device.
- Diagnostic events: when the app crashes or hits an error, an anonymised record (URL path, browser user agent, stack trace) is shipped to our server logs. Email addresses and known auth tokens are stripped before transmission.
- Feedback: if you use "Send feedback", we store the message you write (and a reply email if you choose to give one) and forward it to our team inbox.
Where it's stored
Profile data lives in Google Firestore (europe-west2). A small JSON shared-cache file is stored in a Google Cloud Storage bucket (also europe-west2). Server logs go to Google Cloud Logging. All data stays within the EEA.
Who we share it with
- Google Cloud: as our hosting provider. Subject to the Google Cloud Data Processing Addendum.
- Google Gemini API: your AI Buddy / chat prompts are sent to Google's Gemini service for response generation. Google processes them per their Generative AI Terms.
- YouTube Data API: video search and metadata queries go to Google. We don't send your account email — only the search terms you type.
- Stripe: if you subscribe to Premium, we share your account email and a customer ID with Stripe. Stripe retains its own billing records per their policy.
- We do not sell or trade your data to advertisers.
Children's data
Child profiles are created only with explicit guardian consent (the tick-box in the Add Learner form). For children's profiles we disable external web search in AI Chat and constrain the AI Buddy with explicit safeguarding rules (no personal information requests, no off-topic content, age-appropriate language). Chat transcripts for child profiles stay on-device and are never shipped to a server in a form a human would read.
Your rights
- Export the full record we hold about your account at any time (Profile → Account → Export data).
- Permanently delete your account and every profile inside it (Profile → Account → Delete account). This removes everything from our database; Stripe billing records are retained on Stripe's side per their own policy.
- Request more information or raise a concern by emailing privacy@mindfulgaminguk.org.
Cookies & storage
We use HttpOnly session cookies for sign-in and short-lived usage-grant cookies to authorise AI calls. We also use browser localStorage to keep your settings, current profile, and chat transcripts on your device. Optional, consent-based analytics (Google Analytics) run only if you accept them in the app — we never load analytics before you say yes, and never for child profiles. We do not use cookies for advertising or cross-site tracking.
Changes
We will update this notice when the app's data practices change and refresh the "Last updated" date at the top.