Skip to content

Trust & Safety

Privacy

How Matcha Interactive handles family accounts, child profiles, learning progress, first-party product analytics, payments, and communications.

Last updated: 21 August 2026

Our privacy baseline

Matcha Interactive ("Matcha", "we", "us") builds interactive stories and learning experiences for families. We design the service so an adult manages account, contact, consent, and payment actions while children can use age-appropriate experiences without being asked for unnecessary identifying information.

Our baseline is simple: collect what we need to operate and improve Matcha, keep child-facing defaults private, do not sell children's personal information, do not use children's activity for behavioural advertising, and do not build cross-site advertising profiles of children.

Information we collect

  • Family account information: account email and authentication information needed to create, sign in to, secure, and recover a Matcha account.
  • Reader profiles: information a parent or guardian chooses to add, such as a display name, avatar, locale, or timezone. Please use a nickname rather than a child's full legal name.
  • Learning and reading progress: product and content identifiers, saved page or activity progress, and recent activity needed to resume an experience and support learning features.
  • Family Pass information: plan, market, billing period, subscription status, payment-provider references, paid-through dates, and entitlement status. Matcha does not need to store full payment-card details to determine access.
  • Newsletter and support information: an email address voluntarily submitted by an adult for product updates and information included in messages sent to us.
  • First-party usage analytics: page or product viewed, story or activity identifiers, anonymous session-scoped identifiers, feature interactions, completion events, language, coarse device/viewport/network categories, campaign attribution, and performance measurements such as loading and rendering timings.
  • Security and technical logs: ordinary server information such as IP address, request timestamp, browser/device information, requested path, and error or abuse signals. These logs are operationally separate from our product-analytics event stream.

How our analytics works

We need detailed product evidence to make Matcha faster, clearer, safer, and more useful. Our child-safe analytics is therefore designed around events, sessions, content, and aggregate cohorts rather than persistent child identities.

  • Our first-party analytics endpoint is hosted under Matcha's own service rather than using an advertising tracker.
  • A random session identifier is scoped to the current browser session. We do not put an account ID, child-profile ID, email address, full name, exact age, school, precise location, advertising ID, raw prompt, photo, or voice recording into the product-analytics event record.
  • We measure funnels and outcomes such as story opened → started → completed, paywall → checkout → purchase, feature usage, narration failures, and performance metrics.
  • Persistent reading progress used to resume a story is stored as an operational product feature. We keep that separate from anonymous analytics and can calculate aggregate retention or completion statistics without copying child-profile identifiers into the analytics stream.
  • We do not use session replay, keystroke recording, cross-site tracking, or behavioural advertising technology on child-facing Matcha experiences.

Raw first-party analytics events are currently retained for up to 90 days. We may retain de-identified, aggregated daily statistics for longer so we can understand product quality and long-term trends without retaining raw session histories.

How we use information

  • Provide and secure family accounts, reader profiles, saved progress, and Family Pass access.
  • Authenticate users and prevent fraud, abuse, or unauthorized access.
  • Process and reconcile payment-provider confirmations.
  • Measure product reliability, accessibility, learning flow, engagement, and conversion so we can improve Matcha.
  • Run privacy-bounded product experiments and compare aggregate outcomes.
  • Send product updates when an adult has requested them and respond to support or privacy requests.
  • Meet legal, accounting, security, and regulatory obligations that apply to us.

Children's privacy

Parents or guardians should create and manage family accounts, reader profiles, newsletter signups, and purchases. Matcha does not intentionally ask a child to submit an email address or payment information. Please do not put a child's full legal name, school, address, phone number, precise location, or other unnecessary identifying information into a reader profile or support message.

Our child-facing baseline is high privacy by default. We do not sell children's personal information, use precise geolocation for analytics, or use a child's activity for targeted advertising. Read our dedicated Children's Privacy notice for a shorter parent-and-child explanation.

Legal bases and consent

Depending on where you live and the feature involved, we process information because it is necessary to provide the service you request, because we have a legitimate operational or security interest that does not override your rights, because an adult has given consent, or because the law requires it. Where applicable law requires parental or guardian consent for a child's use or data processing, we will use the parent-governed account flow and additional consent or age-assurance steps required for that market.

Service providers and international processing

We use service providers for hosting, authentication, payments, email delivery, and other infrastructure. They may process limited information only as needed to provide those services to Matcha. Payment information is handled by the checkout provider; Matcha receives the references and status needed to reconcile access. Because Matcha serves families globally, information may be processed in countries other than the country where you live. Where required, we use appropriate contractual, technical, or legal safeguards for those transfers.

Retention and deletion

We keep personal information only for as long as it is needed for the purpose described here, to maintain an active account or requested feature, or to meet legitimate security, accounting, fraud-prevention, and legal requirements. A parent or guardian may ask us to delete a family account, reader profile, progress, newsletter information, or other personal information. Some transaction or security records may need to be retained where the law requires it.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent where processing relies on consent. A parent or guardian may exercise applicable rights for a child. We will verify requests as reasonably necessary to protect the account and the child.

Contact us

For privacy questions, access or deletion requests, or concerns about a child's information, email [email protected]. Please tell us which Matcha account or adult email address the request concerns; do not send additional child identification unless we ask for the minimum information needed to verify the request.