What the website stores
Support requests store the email, selected product, category, platform, app version, subject, message, status, and our reply. Contact messages store the email, topic, product, and message. Product-note signup stores the email, selected interests, and consent time. Leaderboards store three initials, a game mode, a numerical score, and a date.
Cookies
This website sets only first-party cookies that keep a signed-in session working (including a separate admin session cookie for studio operators). They are HttpOnly, use SameSite=Lax, and are sent over HTTPS in production. We set no analytics, advertising, or cross-site tracking cookies, so there is no non-essential cookie to consent to. Signing out or letting a session expire ends them.
Organization workspaces
Workspace accounts store a name, email, one-way password hash, organization memberships and roles, app-access status, expiring invitations, secure sessions, organization-linked support records, and an activity history. Workspace data is selected from the signed-in user’s server-verified membership, not from a tenant name supplied by the browser.
What we do not ask for
Do not submit passwords, full payment-card numbers, government identifiers, medical records, or confidential business documents. The public leaderboard does not require a child account, location, photo, or public profile.
Why we use this information
We use it to answer requests, operate the selected service, send requested studio updates, prevent abuse, and understand whether product support is working. We do not sell personal information.
Children
Child-facing games are designed to minimize data. Newsletter, contact, support, and community submissions are intended for grown-ups. We do not provide open child chat on this website.
Storage and deletion
Website records are stored with the service database. To request correction or deletion, open a privacy ticket through the support center and identify the email used for the record. Peak Play Trivia account holders can also permanently delete their account and synced social data directly inside the app.
Peak Play Trivia mobile privacy
Peak Play Trivia can be played without an account. In guest play, daily quiz progress, XP, levels, achievements, lifetime statistics, response times, per-topic accuracy, local Rival Boards, settings, and friend-challenge configurations stay on the device.
Players may optionally create an account to use cross-device and social features. The production app uses its own Railway service and database. Peak Play then stores the email address, one-way password hash, secure session records, player name and handle, optional bio and card style, visibility choice, crew memberships and roles, expiring invitation records, separate Solo, Crew, and Public gameplay totals, topic accuracy and response-time totals, published public Peak Cards, player blocks, moderation reports, audit records, password-reset records, and support tickets. We use this information only to provide account, sync, crew, invitation, public-channel, moderation, security, and support functions. We do not sell this information or use it for third-party advertising or tracking.
Peak Play Trivia 1.0.0 build 6 and later do not offer external AI generation or ask for a provider API key. Daily climbs, route choices, and the climb journal run on the device. Legacy accounts may retain previously saved encrypted provider keys until account deletion; deleting the account also removes those keys.
Public posting is opt-in: a player must set their profile to Public and explicitly publish a structured score or milestone card. The public channel does not provide anonymous free-form chat. Signed-in players can report a card or block its author. Crew data is isolated by server-verified membership.
Players can permanently delete their account and synced social data from the Solo profile menu inside the app. Deletion removes the login, profile, statistics, public cards, memberships, invitations tied to the account, blocks, reports, password-reset records, encrypted AI keys, and account-linked support records. If the player owns a crew with other members, ownership transfers to another member; an empty owned crew is deleted.
Peak Play Trivia contains no advertising or third-party analytics SDK and does not track players across apps or websites.
Trivia game nights and arcade scores
In Peak Play Trivia build 8 and later, Better Together keeps partners' choices and predictions in memory during the current game; these answers are not uploaded, saved as a relationship profile, or sent to a leaderboard. Its optional share action includes only the combined game score and a game link, not names, prompts, or answers. Specialist Duel keeps the active match on the device. Deliberately sharing its result includes the two display names, chosen topics, and section and total scores, without question answers.
Echo Trail, Signal Switch, and Peak Precision save completed scores, the local player name, run summary, and date on this device. A player can deliberately share a result through Apple's share sheet; the shared summary includes the local name, game, score, run detail, and game link. Local pass-the-phone names are not automatically uploaded.
Optional Apple Game Center
Connecting Game Center is optional and begins only when the player chooses it. After connecting, completed arcade scores are submitted to Apple Game Center under the signed-in Game Center profile so the player can compete on worldwide leaderboards. Apple's gaming profile and leaderboard features are governed by Apple's privacy practices. Peak Play Trivia does not send couples' answers, local pass-the-phone names, email addresses, or question answers to Game Center.
To retry a failed score submission without losing a personal best, the app stores the Game Center player identifier and pending or confirmed best score locally. Pending scores remain tied to that Game Center profile and are retried only while that same player is authenticated. Guest scores completed before connecting stay local and are not retroactively assigned to the account. Local games and local leaderboards remain available without Game Center or a Peak Play account.
SumSpire mobile privacy
SumSpire 1.0 does not collect or transmit player data. It has no account, analytics, advertising, tracking, or third-party gameplay SDK. Campaign progress, local play counts, and sound, haptics, contrast, and room-symbol preferences stay on the device. SumSpire opens this policy or the support center only after the player explicitly taps the corresponding link.
QueueShift mobile privacy
QueueShift 1.0 does not collect or transmit player data. It has no account, analytics, advertising, tracking, or third-party gameplay SDK. Station progress, settings, hint state, and Daily Dispatch state stay on the device. QueueShift opens this policy or the support center only after the player explicitly taps the corresponding link.
Lane Alchemy mobile privacy
Lane Alchemy 1.0 does not collect or transmit player data. It has no account, analytics, advertising, tracking, or third-party gameplay SDK. Experiment progress, best squad values, settings, hint state, and Daily Reaction state stay on the device. Lane Alchemy opens this policy or the support center only after the player explicitly taps the corresponding link.
Boltloom mobile privacy
Boltloom 1.0 does not collect or transmit player data. It has no account, analytics, advertising, tracking, in-app purchases, or third-party gameplay SDK. Tapestry progress, best moves, settings, hint state, and Daily Weave state stay on the device. Boltloom opens this policy or the support center only after the player explicitly taps the corresponding link.
Doodle Bastion mobile privacy
Doodle Bastion 1.0 does not collect or transmit player data. It has no account, analytics, advertising, tracking, in-app purchases, or third-party gameplay SDK. Page progress, best ink, settings, trace state, and Daily Doodle state stay on the device. Doodle Bastion opens this policy or the support center only after the player explicitly taps the corresponding link.
Bright Flight mobile privacy
Bright Flight 1.0 does not collect or transmit player data. It has no account, analytics, advertising, tracking, in-app purchases, runtime AI, or third-party gameplay SDK. The local pilot profile, age band, per-skill practice estimates, separate flight-assistance estimate, adventure progress, Daily Bloom history, cosmetics, settings, and recent session summaries stay on the device. Family Challenge uses temporary local profiles and does not upload or publicly rank either pilot. Deleting local progress inside the parent area removes the Bright Flight profile and local event history from that device.
WhimWise mobile privacy
WhimWise is a local-first interactive story app. It has no account, advertising, tracking, analytics, or third-party gameplay SDK. Family profiles, character choices, reading progress, story decisions, workshop stories, settings, and local scores stay on the device. WhimWise does not send those items to Peak Play or a third party.
If a grown-up deliberately chooses a family portrait, WhimWise makes a resized local JPEG with source metadata removed. It discards the imported source data after conversion and does not alter the original photo in the family's library; the local portrait is excluded from cloud backup. Deleting the corresponding profile removes its portrait from the device.
Read With Me is optional. It requests Microphone and Speech Recognition access only when someone starts that feature, and it runs only when on-device speech recognition is available. WhimWise does not save or send microphone audio or the temporary transcript; the transcript is used in memory only to score the current reading. Optional narration also uses the device's speech features. On supported devices, the optional story-opening tool uses Apple Intelligence on device and does not supply portraits, profiles, or family names to it.
WhimWise offers non-consumable story and collection purchases through Apple StoreKit. Apple handles purchase approval, payment, and entitlement restoration through the Apple Account; WhimWise does not receive or store payment-card information, and it keeps no WhimWise purchase account or transaction database.
Leo Leaps mobile privacy
Leo Leaps does not collect player data. Child profiles, age selection, settings, learning progress, earned items, subject accuracy, and gameplay statistics stay on the device. The app has no account, advertising, tracking, analytics, or in-app purchases and works offline. Parent-gated links open the system browser only after a grown-up chooses them.
Polymath Learner (iPhone and iPad) privacy
Accounts and tenants. Polymath Learner for iPhone and iPad can be used without an account; progress then stays on the device. A grown-up may create an account on Polymath Learner's own Railway service and PostgreSQL database. The account stores the grown-up's email address, a one-way password hash, secure session records, and the tenant (a family or organization space) the grown-up belongs to. Tenant access is derived from server-verified membership, never from a name supplied by the device. Creating an account requires an adult; children never hold accounts of their own.
Learner profiles and cloud snapshots. Inside a tenant, a grown-up creates learner profiles with a name and an age. With an account, each profile's progress snapshot (answers, timing, assistance, difficulty ratings, journey and trophy state, Learner Type quiz answers, chosen experience mode) is synced to the tenant so it can be restored on another device. Snapshots are capped in size and contain no photos, audio, location, contacts, or learning-team conversation messages. Cloud snapshots can include discovery reflections, skill experiments, and family-entered school preparation. Optional adult relationship reflection stays on the device and is included only in a full private local backup.
Public leaderboards. Leaderboards are off until a grown-up opts a profile in. For a learner under 13 the grown-up chooses exactly three letters (which may not be the child's real initials) after passing the device gate and re-entering the account password; a teen or adult chooses a nickname of two to twelve letters or digits that may not be the name part of the account email. Both are checked against a bundled word list before they are accepted, so a handle the list rejects is refused at the moment it is chosen and never reaches a board. A board shows only that handle, the game, a best score or level, and a rank—never a name, age, email, or exact timestamp. Boards rank game scores and activity among players who opted in; they are not a measure of ability. Kid mode shows no public leaderboard. An under-13 profile opened by a grown-up in Adult mode uses only the child leaderboard audience. A signed-in grown-up can report a handle from any board; the report is stored with a ticket number for the studio to review, and filing it does not by itself change what the board shows. When three different grown-up accounts have reported the same handle on the same board, or the studio removes a handle itself, that handle becomes “PLAYER”, its opt-in is revoked, and that profile's scores are deleted from every board, so it stops appearing anywhere; coming back takes a fresh opt-in with new letters. A grown-up never has to wait for that: they can change a learner's letters or opt the learner out at any time, and opting out removes the handle and every score immediately.
Learner Type quiz. The quiz produces a four-letter code from the learner's own answers, optionally blended with a small share of the learner's own play in the app. It is a playful portrait, not a validated instrument, and it is never used to compare a learner with other people, to diagnose, or to gate any feature.
Founding 100. The first one hundred grown-up accounts created after launch receive a Founding rank number stored on the account. It is a cosmetic marker; it is retired, never reissued, when the account is deleted.
Email. The account email receives transactional messages only: a welcome note, email verification, password resets, and replies to support requests. Choosing “Sign out everywhere” revokes every session immediately and sends no email. Marketing email (the Summit Dispatch) is sent only when the grown-up turns on “Send me the Summit Dispatch” or subscribes on this website, and every issue carries a one-click unsubscribe. Turning the toggle off, unsubscribing, or deleting the account stops marketing email.
Tokens. Password-reset links expire after 30 minutes, verification links after 24 hours, and Summit Dispatch confirmation links after 7 days. Every link is single-use and stops working once used or expired; only a one-way hash of it is stored, and the raw link exists only in the email we sent you.
Retention. Account, tenant, profile, snapshot, and leaderboard records are kept until the grown-up deletes them or the account. Weekly leaderboard rows are pruned after 52 weeks; all-time rows are removed when a profile opts out or is deleted. Used and expired reset and verification links cannot be reused; their one-way hashes are retained only until the account requests its next link of that kind or is deleted, never longer than the account itself. Support tickets and contact messages follow the website retention above. Local-only progress on a device is deleted with the app.
Processors. Polymath Learner relies on three service providers acting on our instructions: Railway (hosting for the API, database, and this website), Resend (email delivery for the messages listed above), and an email-forwarding provider for the studio support mailbox. None of them may use the data for their own purposes. There is no advertising, tracking, analytics SDK, or in-app purchase in the app.
Deletion. A grown-up can delete the account from account settings inside the app or through a privacy ticket. Deleting the account permanently removes the account, its sessions, every tenant that has no other grown-up, every learner profile and cloud snapshot in those tenants, every leaderboard identity and score for those profiles, all verification and reset tokens, and the Founding rank, and it asks this website to unsubscribe the address from the Summit Dispatch. Learner Type answers and trophies live inside the snapshot and are deleted with it.
Learning team in version 2.0. IQ/EQ course practice, hints, lesson choices, mood check-ins, short self-reflections, and learning-team conversations are saved separately on this device for the active learner. The learning team can read that learner's saved school practice, circuit activity, and Learner Type portrait to choose helpful next steps. These records are not uploaded to the Polymath service or included in its cloud snapshot. Conversations retain up to 24 recent messages; tutor observations retain up to 3,000 recent events. Clear chat removes the saved conversation on this device.
On-device AI. When Apple's on-device Foundation Models are available, the learning team uses them for educational responses. The app supplies the learner's age, recent conversation, curated teaching context, and summaries of that learner's saved practice to the on-device model. It does not send them to an external AI provider, ask for an AI API key, or use Private Cloud Compute. When the model is unavailable or cannot respond, authored guided coaching remains available and is labeled accordingly. Automated helpers are educational tools, not human parents, friends, therapists, or standardized IQ/EQ assessments.
Menu choices. Local menu visits help choose among equally useful activities and explain what the learner explored. They do not alter quiz results or generate an intelligence or personality score. Turning off “Learn from menu choices” in My learning picture removes saved menu visits and stops collecting them. Self-reflections can be updated. Deleting the local learner profile or app removes its local tutor record.
Leo Polymath (Mac preview) privacy
Leo Polymath is local-first and has no advertising, behavioral tracking, third-party analytics, account system, cloud sync, or automatic sharing. Guardian consent, separate learner profiles, answers, timing, assistance, progress, observations, imported parent-directed records, and reports remain in the app's local storage. A parent controls any deliberate export, backup, or sharing. The in-app policy provides the exact controls and limits for the reviewed build. Polymath Learner for iPhone and iPad is covered by the separate mobile section above.
Peak Play Sports privacy
Peak Play Sports is a private, local-first sports practice companion. It has no ads, tracking SDK, public child profile, or automatic media upload. Profiles, workouts, selected practice media, analyses, journals, coaching evidence, pickup games, league records, and progress remain under the athlete or family's control. Camera, microphone, and photo access are requested only after the related feature is started. Foreground location is requested only for an outdoor workout and is not used in the background.
Apple Health integration is clearly identified before Apple's permission sheet. With permission, Peak Play can read recent workouts, distance, duration, heart rate, and active energy and can save a completed Peak Play workout to Apple Health. Saving an outdoor workout can include its route, as the app explains before Apple’s permission sheet. Apple Health details stay on the device unless the user explicitly uploads a private, media-free tenant backup. They are never sent to AI providers, ads, analytics, or public leaderboards.
An adult, parent, guardian, coach, or team operator may optionally create an account on Peak Play Sports' own Railway service and database. The account stores an email address, one-way password hash, secure session records, organization membership, audit records, and a media-free structured backup selected by the user. The backup can include profiles, derived analyses, workouts and precise routes, Apple Health-derived workout summaries, journals, nutrition check-ins, Body Scan results, plans, friends, challenge records, pickup-game finals, league rosters, and box scores; it never includes source photos or videos. Tenant access is derived from server-verified membership. In-app account deletion removes the tenant backup and encrypted provider keys without deleting local device data.
Peak Play Sports 3.3.0 build 35 and later provide local coaching without external AI generation or provider API keys. The interactive Film Lab example runs locally and is kept separate from athlete records, health data, and private backups. Legacy accounts may retain previously saved encrypted provider keys until account deletion; deleting the account also removes those keys.
Connecting Apple Game Center is optional and begins only when you choose it. After connecting, Peak Play submits two aggregate totals — weekly active minutes and lifetime Peak Points — and any achievements you earn, under your Game Center profile. Health-derived records are excluded from those totals, and Peak Play does not send workouts, routes, journals, media, or your email address to Game Center. Apple’s handling of your Game Center profile is governed by Apple’s privacy practices.
The optional account service runs on Railway (hosting and database), and account email such as password resets is delivered through Resend. Those providers act only on our instructions and never receive your photos or videos. On the device itself, you can remove an athlete profile or an individual session at any time, and deleting the app removes the remaining on-device Peak Play data; workouts you saved to Apple Health are managed in the Health app.
Unreleased products
Unreleased portfolio concepts collect no player data. Their product pages describe development plans, not available services.