We've written this in plain language rather than legalese, but it covers what the law requires. For the friendlier version of how we look after your child, see Trust & safety.
| Data controller | Pedro Javier Criado Serrano |
|---|---|
| Activity | PequeMissions — educational practice app for children aged 3 to 8, currently in a pre-launch validation phase |
| Contact | hola@pequemisiones.com |
| Website | https://pequemisiones.com/en/ |
We are not required to appoint a Data Protection Officer and have not done so: we do not process data on a large scale or handle special categories of data.
| What | Why | Legal basis | How long |
|---|---|---|---|
| Your email address and, if you fill them in, your child's school year, whether you'd pay and your comment (waiting list) | To notify you once when we launch, and to understand what families need | Your consent (Art. 6(1)(a) GDPR), given via the form checkbox | Until launch or until you unsubscribe; 24 months maximum |
| Family code (such as NUBE-K7M2-Q4RT), profile alias (the name or nickname you choose), year/level, exercises completed, results, badges and minutes of use | So missions sent by the adult reach the child's device, and the adult can follow their progress | Performance of the service requested by the adult (Art. 6(1)(b) GDPR) | While you use the app; deleted on request, and automatically after 24 months of inactivity |
| Message text written by the adult in a mission | To read it aloud to the child and check it is appropriate before they hear it | Legitimate interest in protecting the child (Art. 6(1)(f) GDPR) | With the mission; removed when completed missions are deleted |
| Exercise wording when the child asks for a hint (generated by the app; contains no personal data) and the hint returned | To give a hint about the method, and so the adult can see it in their panel | Performance of the service (Art. 6(1)(b) GDPR) | 12 months |
Data we never ask for: surnames, date of birth, photos, voice recordings, location, phone contacts or school details. Your child has no account and no password.
PequeMissions is designed for children aged 3 to 8, but the account holder is always an adult. Processing the data of a child below the applicable age of digital consent (14 in Spain, 13–16 depending on the country) requires the consent of the holder of parental responsibility. Therefore:
We don't sell data, don't share it for commercial purposes and don't run advertising. To make the app work we rely on these providers, acting as data processors that only process the data on our instructions, under their data processing terms:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and server functions | European Union (Ireland) |
| Anthropic | Checking messages before the child hears them, and generating the helper's hints | United States |
| GitHub Pages | Website hosting | United States |
We're upfront about this because it's the right thing to do, and because European AI rules require it:
This website uses no analytics, advertising or third-party cookies. No Google Analytics, no social media pixels, no profiling. That's why you won't see an annoying cookie banner.
The app does use your browser's local storage to remember profiles, gems and settings on your own device. This is strictly necessary for the app to work and doesn't require consent. You can clear it by clearing your browsing data (you'll lose local profiles).
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw your consent where that is the legal basis. Write to hola@pequemisiones.com telling us what you need and, if relevant, your family code. We reply within one month at most.
Since we hold no identifying data about the child, the fastest way to erase all their progress is to ask us to delete a specific family code: it is removed completely.
If you believe we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid, or to the supervisory authority in your own country.
Data travels encrypted (HTTPS) and the database enforces row-level access rules: without the family code, nothing belonging to that family can be read or modified. Even so, no system is infallible; if a security breach affected your data we would inform you and notify the supervisory authority within 72 hours, as the GDPR requires.
Site owner: Pedro Javier Criado Serrano · Contact: hola@pequemisiones.com (Art. 10 of Spanish Law 34/2002, LSSI-CE). The content of this website belongs to its owner. PequeMissions is an independent project: any mention of the ABN methodology is a descriptive reference to the "open calculation based on numbers" method and implies no affiliation with its authors or publishers.
If we change anything significant we'll update the date above and, where it affects you directly, tell you by email. The current version is always on this page.