Child Safety at Korva

Korva Academy is built for Year 6 children practising for selective-school entrance tests. We take the responsibility of having children use our service seriously. This page describes the protections we have in place.

The minimum-data principle

We collect the minimum amount of information possible about children. Specifically:

• A player profile carries one nickname, picked by the child from word lists we supply — two words, like “Swift Fox”. There is no field for a parent to type a name into, and a nickname can only be assembled from our own lists, so for any profile created from this point on we can state plainly that we do not hold the child's real name.
• Profiles created before this change still carry the first name the parent entered then. We prompt parents to move those to a nickname and it takes one tap, but we do not force it, so some older profiles still hold a real first name. When a parent does make the change, the old name is archived so it can be undone, stops being displayed, and stops being sent to our AI provider.
• There is no field anywhere for a surname, birthday, school, postal address, phone number, location or photo, so we do not collect them.
• Player profiles have no email addresses and no login passwords. They sit under the parent account.

Parents are always in charge

• Only an adult (18+) can create a Korva account. Account creation requires explicit consent.
• Parents see every session their child completes — full activity log with timestamps, questions answered, accuracy, and Fo-tutor chat transcripts.
• Parents control optional PIN protection, the daily practice-time limit, the difficulty ceiling and lock, and can delete player profiles or the whole account in one click.

What we never do

• We do not send marketing emails to children. There are no child-facing email addresses in our system.
• We do not show ads or sponsored content anywhere on the site.
• We do not use behavioural tracking cookies, advertising pixels, or third-party analytics scripts.
• We do not sell, lease, rent, or share child data with anyone for marketing — ever.
• We do not share child data with any third party for any purpose other than running the service. The complete list of who receives what, and which of them are overseas, is in the Privacy Policy.

The Fo AI tutor — scoped to study

Fo is the in-app tutor character that gives Socratic hints during practice. Fo is configured with a strict system prompt that:

• Only discusses the question on screen — not personal topics, not friends, not family, not the news.
• Never asks for the child's name, school, address, or any personal information.
• If the child types personal information, Fo is instructed not to acknowledge or repeat it, and to redirect: "Let's stay focused on the question — what part is tricky?". It is still stored. Every message a child sends to Fo is saved to the account so the parent can read the transcript, and it is sent to Anthropic in order to generate Fo's reply. Please tell your child not to type private details to Fo — the redirect stops Fo discussing them, it does not un-record them.
• The name on the child's profile is included in Fo's prompt so Fo can address them by it. That is the only profile detail sent.

Content quality

Every question shown to children passes through:

• A structure validator (the question matches a known ACER pattern, not free invention).
• A correctness verifier for abstract-reasoning questions (an independent AI solves the puzzle to cross-check the marked answer).
• Difficulty gating: a free structural check, and at the harder tiers an independent AI judge that must agree the item is what it claims to be. That judge is fail-closed — if it errors or cannot be reached, the content does not ship.

These checks reduce errors. They do not eliminate them, and AI-marked work can be wrong — see clause 9 of the Terms.

The "This looks broken" button on every question records the flag for manual review. Review is by hand and we do not commit to a turnaround time.

Reporting concerns

If your child encounters something inappropriate, harmful, or distressing in Korva, please:

• Use the in-app flag button so we can immediately retire the question.
• Email hello@korvaacademy.com.au with a screenshot if possible. We treat safety reports as our highest priority; our target response time is TO BE CONFIRMED complaint acknowledgement and resolution window.
• For online-safety concerns more broadly, the eSafety Commissioner (esafety.gov.au) is the Australian national body.

Australian context

Korva Academy is operated by TO BE CONFIRMED registered legal entity name and structure (14554829654) and is bound by the Privacy Act 1988 (Cth), including the Australian Privacy Principles. We follow the eSafety Commissioner's Safety by Design principles.

The Privacy Act's children's-data amendments take effect on 2026-12-10. This page and the Privacy Policy are being reviewed against them before that date.

Contact

Safety or privacy concerns: hello@korvaacademy.com.au.