Privacy Policy

What we store, what we do not, and who processes what.

Version 2026-08-24

Draft — awaiting review. This document has been prepared but not yet approved. Please do not rely on it until this notice is removed.

This policy explains how personal data is handled in Learning Game Studio.

The short version: teachers have an account that holds no name and no email. Learners never sign in and nothing about them is stored at all.

Controller

Blue Elephants Solutions Pte. Ltd. 160 Robinson Road, #14-04 Singapore Federation Centre, Singapore 068914 Email: contact@blue-elephants-solutions.com Phone: +65 9821 7914

1. Learners — nothing is stored

This is the central design decision of the product, not a setting.

Learners do not sign in, are not asked for a name, an email or an age, and are not tracked. We do not set analytics cookies, we do not fingerprint devices, and we do not record IP addresses against play.

When a game is played we increment counters on the game itself: how many times it was opened, how many times it was completed, the sum of scores, and the sum of star ratings. These are totals on the game, not records about a person. There is no row anywhere that represents an individual learner, so there is nothing about a learner to export, correct or erase.

Star ratings are limited to one per game per device by a marker stored in the learner's own browser. That marker never reaches our servers.

2. Teachers — what an account holds

When you sign in with Google or Microsoft we receive an identifier for you from that provider. We convert it immediately into a one-way SHA-256 hash and store only the hash. We do not store your name, your email address, or your profile picture, and the hash cannot be reversed to recover them.

An account therefore consists of: the hashed sign-in identifier; which provider you used; an optional display alias if you set one; your plan, credit balance and role; your default game language; the date you created the account and the date you last signed in; whether and when you accepted these documents; and which plan you first expressed interest in.

We also hold the games you create: their titles and descriptions, the text extracted from documents you upload, images you upload, the generated game files, your chat messages, and build and usage records.

3. Documents and descriptions go to AI providers

To generate a game we send your description and the full extracted text of any document you upload to third-party AI providers. This is the core function of the service and cannot be switched off.

The providers currently used are listed in the app on the create screen, read live from our model routing so the list cannot go stale. At the time of writing they are Anthropic, OpenAI, Moonshot AI, ElevenLabs and Meshy.

Do not upload documents containing personal data or confidential information. The service is not designed for it, and you would be sending that data to those providers.

4. Legal bases

Where the GDPR applies, we rely on: performance of a contract (operating your account and generating your games); legitimate interests (keeping the service secure and working, and understanding which plans are of interest); and consent where we ask for it.

5. Cookies

One strictly necessary cookie keeps you signed in. It carries a signed session and nothing else. We use no analytics, advertising or tracking cookies, which is why the app asks you to acknowledge the cookie notice rather than asking you to choose.

6. Retention

Account and game data is kept until you delete it or close your account. Deleting your account removes the account, its games, their files and the hashed identifier — after which signing in again produces a completely new account with no link to the old one. Aggregate play counters that are already anonymous may remain.

7. Your rights

From Settings you can export everything we hold about you as a JSON file, correct your display alias, and delete your account and all its data. You can also contact us at contact@blue-elephants-solutions.com to exercise any right available to you, including objecting to processing or complaining to your local supervisory authority.

Because we never learn who you are, we may be unable to identify you from anything other than your signed-in session — so requests generally have to be made from within the app.

8. International transfers

We are established in Singapore and our AI providers operate internationally, so data is processed outside the EEA and the UK. Where required, transfers rely on the appropriate safeguards offered by those providers.

9. Changes and contact

We will update this policy as the service develops and will give notice of material changes.

Blue Elephants Solutions Pte. Ltd. 160 Robinson Road #14-04 Singapore Federation Centre Singapore 068914 Email: contact@blue-elephants-solutions.com Phone: +65 9821 7914