Children's Privacy Notice

TotMaiSus knowingly serves children, so protecting them is our most important job. This notice explains exactly what we collect from a child, how we ask for your consent, and how you can review or remove your child's data at any time.

We collect only the minimum needed to deliver lessons to your child:

• First name and last initial.
• Birth year (not a full date of birth).
• School grade.
• Learning activity needed to run the service, such as attendance, progress, grades, and homework.

We do not ask a child under 16 for any of the following:

• An email address, phone number, or home address.
• A photo (pupils use illustrated avatars, never photos).
• A full date of birth or personal numeric code (CNP).
• Precise location or advertising identifiers.

We use a child's data only to deliver the learning service you signed them up for — such as running their lessons, tracking their progress, and issuing certificates. We never use it for advertising, and we never sell it.

You, the parent or legal guardian, create your child's account. Before the account becomes active, we ask for your verifiable consent using one of these methods:

• Verifying a payment card through a secure, low-cost card check.
• Confirming consent from within a paying account that has already verified a card.

We record your consent (the method, date, and policy version) in an append-only log, and only then does your child's account activate. Consent is always executed by you — never by the child.

We do not share a child's personal data with third parties for their own purposes. We use trusted service providers only to run the platform (for example, hosting and our database), under data-processing agreements that protect the data.

We never show behavioral advertising to children, we never use advertising trackers on pupil screens, and we never sell a child's data.

For children under 16, the AI learning companion is off by default. You must turn it on for each child. When it is on, every conversation your child has is readable by you, and the companion is guided to redirect sensitive topics back to you and to never ask for personal data or off-platform contact.

As the parent, you are always in control:

• You can review the data we have collected from your child.
• You can withdraw your consent at any time with one click in your parent settings.
• When you withdraw consent, we suspend the child's account and offer to export and delete their data.

To review, export, or delete your child's data, use the privacy tools in your account. Manage your data & privacy requests

We keep a child's data only while it is needed for the service, or as the law requires for safety and audit records. When you ask us to delete your child's account, we offer an export first, then remove activity data and anonymize the child's identity while keeping the limited records the law requires.

Questions about your child's privacy, or want to review or withdraw consent directly? Email us at contact@totmaisus.ro. HAMMER STUDIO PRODUCTION S.R.L., Bd. Timișoara nr. 103E, Corp A, Sc. 2, Et. 3, Ap. 130, Sector 6, 061327 București, România.