What Does Your Child’s Learning App Know About Them? A Children’s Privacy Guide for 2026
TL;DR: Free educational apps collect your child’s behavioral data (learning pace, error patterns, active hours) and link it to advertising identifiers. 7-question checklist + ready email template for your school — check privacy in 5 minutes.
Series: Clean Tech for Families · Article 5/6
Most free educational apps collect your child’s behavioral data — how long they spend on tasks, error patterns, active hours — along with the device’s advertising identifiers. In this article, you’ll learn what data popular apps collect, who sees it, what the law says (COPPA, GDPR), and how to check your child’s app privacy in 5 minutes. You’ll find a 7-question checklist and a ready-made email template for your school.
Tablet, math, gold star
Your daughter is sitting at the kitchen table. Tablet in front of her, elbows resting on the surface. She’s doing math exercises. Furrowed brow, finger on the screen, a moment of silence — and a gold star. A smile. Her shoulders relax.
You’re in the kitchen, rinsing a coffee mug. You hear a quiet “yes!” from behind the screen. You breathe out. Fifteen minutes of peace. She’s practicing, learning, engaged. Everything’s fine.
On the other side of the screen, a server is recording: how long she spent on each task, what time she practices, how quickly she learns, how many times she got it wrong, what tablet model she’s holding, which Wi-Fi network she’s using. Not to help her. To better target ads.
What data do free educational apps collect?
Most free educational apps for children collect behavioral data. This isn’t a secret — it’s a business model. But the scale of that collection is bigger than most parents realize.
A few facts to consider calmly:
- COPPA (US) expanded the definition of “personal information” in 2025 to include biometric data, and now requires separate, verifiable parental consent before collecting data from children under 13. This was the first update since 2013.
- GDPR (EU, Article 8) requires parental consent for processing a child’s data if they’re under 16.
- Common Sense Media consistently reports that most apps used by children share and sell their data to third parties.
- Many countries still lack dedicated legislation protecting children’s online privacy on par with COPPA — relying instead on GDPR or general data protection laws.
But let’s be honest: most of us click “Accept” without reading. And that’s normal. These documents are thirty pages long. They’re written in language that requires a lawyer to decode.
This isn’t about being a bad parent. It’s about a system that isn’t designed to help you.
Pause
You don’t have to check all your daughter’s apps right now. All you need is to know what to look for. Knowledge is the first step. The rest can wait.
What exactly do your child’s apps collect?
Let’s break it down. Calmly, step by step.
What data do they collect?
Educational apps can collect several layers of information. Each one seems harmless on its own. Together, they create a detailed profile.
Behavioral data — how long your child spends on a task, what error patterns emerge, what hours they’re active, how quickly they learn, when they get discouraged. This data reveals more about your child than their grades at school.
Device data — tablet model, OS version, location (down to the neighborhood), advertising identifier (IDFA on iOS, GAID on Android). The advertising identifier is essentially a “serial number” for your device in the advertising world — it lets companies link your child’s activity across apps.
Personal data — name, age, grade, school — if provided during registration. Sometimes collected indirectly from context.
A child’s digital footprint starts before they turn two. Research shows the average child has hundreds of data points in third-party databases before they even start school.
Who sees your child’s data?
That data can end up with:
- The developer — the company that collects it directly.
- Data brokers — companies that buy data in bulk and build advertising profiles.
- Advertisers — who use it for ad targeting. Not just within that app — across the entire ecosystem.
- Potentially: anyone who breaches the server. Data breaches happen regularly. If the data isn’t encrypted, it’s readable by an attacker.
Why does a child’s digital footprint matter?
An advertising profile built from childhood is something worth knowing about. Behavioral and health data about your child creates what researchers call a “digital dossier” — one that grows with your child, and that neither they nor you have control over.
But — don’t panic. You can influence what data your child leaves behind. It’s not about eliminating everything. It’s about knowing and making conscious choices.
What does the law say in 2026?
Regulations are changing. Slowly, but they’re changing.
- COPPA (US) — companies must obtain “verifiable parental consent” before collecting data from children under 13. New rules expand this to include biometrics.
- GDPR Article 8 (EU) — parental consent required for processing a child’s data if they’re under 16. Includes the right to data deletion.
- New US state regulations — Maryland “Kids Code,” Connecticut Age-Appropriate Design Act — are enforcing children’s privacy protections at the state level. The trend is growing.
- EU: CSAR (Child Sexual Abuse Regulation) — a controversial proposal that could require scanning of private messages. Organizations like the EFF and EDRi warn this threatens end-to-end encryption.
Enforcement is still weak. Most companies bury consent in their Terms of Service. But the direction is clear — regulators are starting to take children’s data seriously.
How to check your child’s app privacy: A checklist
We’ve prepared a list of questions you can ask your school or check in your child’s app settings. You don’t have to answer all of them at once. Asking even one question is already more than most parents do.
- Does the app have a privacy profile on the App Store / Google Play? (Look for “App Privacy” on iOS or “Data safety” on Android)
- Does it collect advertising identifiers (IDFA/GAID)?
- Does it require a child account with a name and age?
- Does it display personalized ads?
- Can I disable tracking in the app’s settings?
- Does the school use apps with a Student Privacy Pledge certification?
- Can I request deletion of my child’s data? (GDPR Article 17 gives you this right)
Ready-made email template for your school
If your child uses educational apps at school, you have the right to ask what data they collect. Here’s a ready-made template — you can copy it and send it as-is.
Subject: Question about educational app privacy
Dear School Administration,
As a parent, I would like to learn which educational apps are being used at the school and what data they collect about our children. Could you please provide:
- A list of apps and digital platforms used in teaching.
- Information about what student data each of them collects.
- Information about whether the school has signed data processing agreements with the providers of these apps (as required under GDPR / applicable data protection law).
I care about the safety of my child’s data, and I know you do too.
Thank you for your time and attention.
Sincerely, [Your name]
This email isn’t confrontational. It doesn’t accuse anyone. It simply asks. And asking is every parent’s right.
If you know other parents in the class — share this email. One parent asking is curiosity. Three parents asking the same question is a signal that the school should respond.
What’s the simplest step you can take today?
Pick up your child’s tablet. Open one educational app. Go to settings, look for a “Privacy” section. Check one thing: whether you can disable tracking. That’s it. You don’t have to change anything. Just seeing it is already a step.
Read more
- Article 1: If You’re Not Paying, You’re the Product. What About Your Child? — how to recognize what you’re really paying for in “free” apps
- Article 3: End-to-End Encryption for Families: A Jargon-Free Guide — how E2EE works and why family data deserves real protection
At ParentOS, your child’s data is encrypted end-to-end — even we can’t read it. We don’t collect behavioral data, we don’t show ads, we don’t sell profiles. If you’re looking for an alternative, see how it works at parentos.ai.
Frequently asked questions
What data do educational apps collect?
Educational apps can collect three layers of data: (1) behavioral data — how long your child spends on tasks, error patterns, active hours, learning pace; (2) device data — tablet model, location, advertising identifier (IDFA/GAID); (3) personal data — name, age, grade, if provided during registration. Combined, these create a detailed profile of your child.
How can I check what an app collects about my child?
Three quick steps: (1) On iOS, open the app’s page in the App Store and scroll to the “App Privacy” section. On Android, look for “Data safety” in Google Play. (2) In the app’s settings, look for a “Privacy” section — check if you can disable tracking. (3) Email your school asking for a list of apps and their data policies — you have the right to do this under GDPR.
Does GDPR protect my child’s data?
Yes. GDPR Article 8 requires parental consent for processing a child’s data if they’re under 16. GDPR Article 17 gives you the right to request deletion of your child’s data. In the US, COPPA (updated in 2025) requires verifiable parental consent before collecting data from children under 13. Enforcement remains imperfect, but the direction of change is clear.
Series “Clean Tech for Families”:
- Article 1: If You’re Not Paying, You’re the Product. What About Your Child?
- Article 2: Organic Software: How to Read an App’s Label
- Article 3: End-to-End Encryption for Families: A Jargon-Free Guide
- Article 4: Slow Tech: When Technology Slows Down Instead of Speeding Up
- Article 5: What Does Your Child’s Learning App Know About Them? (this article)
- Article 6: I Installed OpenClaw. Then I Checked What It Had Access To.
- Article 7: Who Sees Your Family’s Data? 7 Layers You Don’t Have to Think About
Sources:
- FTC, “Children’s Online Privacy Protection Rule — Final Amendments” (2025)
- Common Sense Media, “Kids and Data Privacy Report” (2023, 2024)
- GDPR Article 8 — Conditions applicable to child’s consent in relation to information society services
- Electronic Frontier Foundation, “Encrypt It Already” campaign (2026)
- Maryland Kids Code Act (2024), Connecticut Age-Appropriate Design Act (2025)
- EU CSAR proposal — European Digital Rights (EDRi) analysis
Calm families start with awareness.