Last updated: 8 October 2026
This policy explains what information ThinkLeo (“we”, “us”) collects when you use thinkleo.org, why we collect it, and the choices you have. If you have a question, email us at hello@thinkleo.org.
Our approach: collect as little as possible
ThinkLeo is used by parents and teachers of young children, so we design every feature to work with the least personal information we can. We do not sell personal information, we do not show advertising, and we do not use advertising or third-party tracking cookies.
Information you give us
- Your account: your name, email address, a password and whether you are a teacher, parent or homeschooler. Passwords are stored only as a secure one-way hash, so we can never see them.
- Your mobile number (optional): if you add one, we use it to send one-time sign-in or verification codes. We store the number and the country it belongs to. Codes are stored only in scrambled (hashed) form and expire quickly.
- Child profiles (parents and homeschoolers, optional): a nickname, the child’s birth month and year (never the full date of birth), an optional grade, interests and a cartoon avatar. We use these only to suggest suitable worksheets.
- Progress notes (optional): which worksheets you gave a child, whether they finished them, and any short note you add.
- Classes (teachers, optional): a class name, grade, subjects and, if you choose, the number of students. We never ask for students’ names.
- Messages: anything you send us by email.
Children’s information
ThinkLeo accounts are for adults. Children do not create accounts or sign in, and we do not knowingly collect personal information directly from children. For the child profiles that parents create, we apply these rules:
- Minimal by design: a nickname instead of a full name, a birth month instead of a date of birth, no photos, no school name and no contact details.
- Private to you: only the parent who created a profile can see it. Our staff tools do not show child profiles or progress notes.
- Easy to delete: deleting a child profile also deletes its whole history (assignments, check-ins and notes). Deleting a class works the same way.
- Kept out of our search records: child details are never added to the search records described below.
- Limited sharing for suggestions: if we use an AI service to improve worksheet suggestions, it receives only an age or grade and the titles of finished worksheets. It never receives a child’s nickname, notes, interests or any detail that identifies them.
Information collected automatically
- Activity in your account: worksheets you save, download or view recently, so you can find them again.
- Search records: the words typed into our search box, the number of results and the time. These records are not linked to your account, IP address or session. We use them to find worksheets people are looking for, and delete them after about 13 months.
- One essential cookie: a sign-in cookie that keeps you logged in and protects forms from misuse. It expires about a week after you sign in. We do not use advertising or analytics cookies.
- Server logs: like most websites, our hosting provider keeps short-term technical logs (such as IP addresses and error messages) to keep the service secure and working.
How we use information
- To run your account, deliver downloads and remember your saved worksheets.
- To send emails you need, such as email verification and password resets.
- To suggest worksheets that fit a child or class.
- To keep ThinkLeo secure, prevent abuse and fix problems.
- To improve our worksheets, using search records that are not linked to anyone.
Who we share information with
We share information only with service providers that help us run ThinkLeo, and only as much as they need:
- Hosting and database: our web hosting provider stores the site and its database.
- Email and SMS: our email service and SMS gateway deliver verification messages and codes.
- Sign-in providers (optional): if you choose to sign in with a service such as Google, it shares your name, email address and an account ID with us.
- Payment providers (only if paid plans are offered): payments are handled by the payment provider you choose. We never see or store full card numbers or mobile wallet PINs.
- AI service (optional): as described above, with no information that identifies a child.
We may also share information if the law requires it, or to protect the safety of our users.
How long we keep information
We keep your account information while your account is open. When you ask us to delete your account, we delete it and its data within 30 days, apart from records we must keep by law, such as payment records. Child profiles and classes you delete are removed straight away.
Security
The site uses HTTPS, passwords and one-time codes are stored only in hashed form, and access to the database is restricted. No system is perfectly secure, so please use a strong password that you do not use anywhere else.
Your choices and rights
- See and correct your details on your account page.
- Delete child profiles and classes yourself at any time.
- Ask for a copy of your data, or for your account to be deleted, by emailing hello@thinkleo.org.
Changes to this policy
We may update this policy as ThinkLeo grows. We will change the date at the top and, for important changes, let account holders know by email or on the site.
Contact
Questions about privacy? Email hello@thinkleo.org.