Privacy Policy

Last updated: September 1, 2026

This Privacy Policy describes what information EDmango LLC ("EDmango," "we," "us," or "our") collects through the EDmango AI service (the "Service"), how we use it, and the choices you have. EDmango AI is used by adults — parents, caregivers, and educators — to get AI-assisted support around a child in their care; it's the adult who creates an account and uses the Service, never the child.

1. Information we collect

Account information

When you create an account, we collect your email address and a password (handled by our identity provider - see section 4). We don't ask for or collect your name, date of birth, or any other contact information at signup.

Learner-profile information

If you create a learner profile, you may provide an optional first name (paired with a system-generated identifier, not a real surname) along with behavioral or developmental observations, and the conversation history you have with the Service about that learner. This is information you choose to share about a child, provided by you as the adult using the Service — the child never submits anything directly.

Messages and content

We collect the messages you send to the Service and the responses it generates, so we can provide the Service and maintain conversation context.

Technical and usage information

When you use the Service, we (and the analytics provider described below) automatically collect information such as: an approximate location derived from your IP address (country, and where resolvable, region/city); your browser, operating system, and device type; the pages you view and, where relevant, the links you click or files you download; and a randomly generated identifier stored in your browser to recognize repeat visits (see Section 5 Cookies & similar technologies). We do not collect or store your raw IP address for analytics purposes beyond what's needed to resolve that approximate location.

2. How we use information

• To provide, maintain, and improve the Service, including generating AI responses to your messages;
• To operate your account, including authentication and account security (e.g., two-factor authentication);
• To send you service-related communications, including account-dormancy warnings before any data would be affected, and — if you've opted in — product updates;
• To understand how the Service is used, in aggregate, so we can improve it (see Section 6, Analytics);
• To detect, prevent, and address technical issues, abuse, or violations of our Terms & Conditions.

3. How AI processing works

To generate a response, your message (and relevant context from the learner profile and conversation history, if applicable) is sent to our AI provider, Anthropic, for processing. Anthropic processes this information under its own commercial terms as our service provider — we don't currently make a specific data-retention or model-training commitment on Anthropic's behalf beyond what we actually have under contract with them, and we'll update this section if and when that changes. Older parts of a conversation are periodically condensed into a shorter running summary by a separate AI process, rather than being sent to the AI provider in full indefinitely — see Section 7 for how long we keep the underlying messages themselves.

4. Third-party service providers

We rely on the following categories of service providers to operate the Service:

We don't sell your personal information, and we don't share it with third parties for their own independent marketing purposes.

5. Cookies & similar technologies

Rather than traditional tracking cookies, the Service stores a small number of identifiers directly in your browser's local storage: a randomly generated visitor identifier (to recognize repeat visits for analytics), a session identifier (cleared when you close your browser), and — if you use a trusted- device option — a device-recognition token. You can clear these at any time through your browser's own settings; doing so may mean we no longer recognize your browser as one you've used before.

6. Analytics

We use Google Analytics to understand, in aggregate, how the Service is used — which pages are visited, what links are clicked, and general device/location trends. This helps us prioritize what to build and fix. Analytics data is sent from our own servers rather than directly from your browser to Google, but it still results in Google Analytics receiving an approximate location and device information for each visit, as described in Section 1.

7. How long we keep information

• Individual chat messages: periodically condensed into a shorter running summary and then deleted, generally within about a week of being sent. The running summary itself is capped in size; once it's full, the oldest entries drop out of the active summary but may remain available in an export you can request (see Section 8).
• A learner profile that goes untouched: we'll send advance-warning emails well before anything happens, and the profile is only suspended from active use (not deleted) after an extended period of inactivity — you choose whether to keep, retire, or delete it.
• An account with no sign-ins for an extended period: we'll send multiple advance- warning emails before deletion. If the account is ultimately deleted, it becomes inaccessible to you immediately and is removed from our live database straight away. Short-term database backups that still contain it expire on a rolling schedule, and no backup is retained for more than 30 days. Copies held in the storage systems of our cloud infrastructure provider are removed on that provider's own published schedule, which we do not control.

8. Your choices and rights

• Access & export: you can request an export of your account and learner-profile data, including archived conversation summaries, through the Service or by contacting us.
• Correction: you can update your learner-profile information directly in the Service at any time.
• Deletion: you can delete a learner profile, or request deletion of your entire account, at any time — through in-product controls where available, or by contacting us at help@edmango.com.
• Marketing emails: any marketing email we send includes an unsubscribe link. Account and security-related emails (like dormancy warnings) aren't marketing and will continue as long as you have an account.

Depending on where you live, you may have additional rights under local law (for example, under California or other US state privacy laws). Contact us and we'll do our best to help, regardless of where you're located.

9. Children's privacy

The Service is intended for use by adults and is not directed to children. We don't knowingly collect personal information directly from a child. Learner-profile information is provided about a learner by the adult using the Service, under that adult's own representation that they have appropriate permissions to share it (see our Terms & Conditions) — it is not collected from the learner. If we become aware that a child has directly submitted personal information to us (for example, by creating their own account), we'll delete it.

10. Data security

We use reasonable technical and organizational measures to protect your information, including encrypted connections and required two-factor authentication on your account. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

11. Where your information is processed

The Service is operated from the United States, and your information may be processed there and by service providers located elsewhere. By using the Service, you understand your information may be transferred to and processed in a country different from where you live.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.

13. Contact

Questions about this policy, or want to exercise any of the choices above? Reach us at help@edmango.com or through our Support page. EDmango LLC