For Parents & Guardians
Information for parents and guardians of users under 16
Dear Parent or Guardian,
Thank you for considering BrainUs LK as a learning platform for your child. We take children's privacy and safety very seriously. This document explains what information we collect from students, how we use it, and what rights you have as a parent or guardian.
Why We Need Parental Consent
Legal Requirements Under Sri Lankan Law
PDPA 2025 Compliance: The Personal Data Protection Act No. 9 of 2022 as amended by Act No. 22 of 2025 requires us to obtain verifiable parental consent before collecting, using, or disclosing personal information from children.
For Children Under 13
Legal Requirement: International child privacy laws (including COPPA principles) and Sri Lankan data protection law require verifiable parental consent before we can collect personal information from children under 13.
Why this matters: Children under 13 are considered particularly vulnerable to privacy risks and may not fully understand the implications of sharing personal information online.
For Children 13-15
Best Practice: While not always legally required, we strongly encourage parental involvement for students aged 13-15 to ensure safe and responsible platform use.
Enhanced Protections: This age group receives additional privacy protections including age-gated social features and parental notification options.
Age Verification
You are NOT required to provide ID cards or other sensitive documents. We verify your child's age using their date of birth provided during registration.
Privacy-Friendly Approach: We designed our consent process to protect your privacy while meeting legal requirements.
How the Consent Process Works
Step 1: Your Child Enters Their Date of Birth
- If under 16, they are informed that parental consent is required
- Account creation pauses until you provide consent
Step 2: You Receive an Email
- We send a detailed email to the parent/guardian email address your child provides
- Email includes:
- Link to this Parental Consent Information page
- Link to our full Privacy Policy
- Summary of what data we collect and why
- Clear consent button
Step 3: You Review and Consent
- Click the secure consent link in the email
- Review all information carefully
- Provide electronic consent by clicking "I Consent as Parent/Guardian"
- Confirm your email address
Step 4: Your Child Can Use BrainUs LK
- Once you consent, your child's account is activated
- You receive confirmation email with Parent Dashboard access
- You can modify settings or withdraw consent anytime
Ongoing Communication
- Monthly progress summary emails (optional)
- Immediate notification if your child changes privacy settings
- Alerts for friend requests or social feature usage (if enabled)
Your Rights as a Parent or Guardian
Under the Personal Data Protection Act 2025 and international child privacy standards, you have comprehensive rights regarding your child's personal information:
1. Right to Review
You can:
- View all personal information we have collected about your child
- Access their learning progress and performance data
- See their friend list and social interactions
- Review their cookie transactions and spell purchases
How: Log in to the Parent Dashboard or email parents@brainus.lk
Response Time: Within 1 month (extendable to 3 months for complex requests with notification)
2. Right to Correct
You can:
- Update incorrect information in your child's profile
- Change privacy settings on their behalf
- Modify consent preferences
How: Parent Dashboard > Profile Settings or contact parents@brainus.lk
3. Right to Delete
You can:
- Request deletion of your child's account and all associated data
- Choose between anonymization (keeps aggregate stats) or permanent deletion
- Expect deletion within 30 days of your request
Note: Some data may be retained for legal compliance (e.g., payment records for tax purposes for 7 years)
How: Parent Dashboard > Delete Account or email parents@brainus.lk with "Account Deletion Request" in subject line
4. Right to Control Collection
You can:
- Refuse further collection of your child's information
- Disable optional features (social features, leaderboards, analytics)
- Limit what data is publicly visible
- Withdraw consent at any time
How: Parent Dashboard > Privacy Settings
5. Right to Data Portability
You can:
- Download all your child's data in a portable format (JSON)
- Transfer data to another educational platform
- Receive data within 30 days of request
How: Parent Dashboard > Download Data or email parents@brainus.lk
6. Right to Appeal (PDPA 2025)
New Right: If you are dissatisfied with our response to your request:
- You have the right to appeal to the Data Protection Authority of Sri Lanka
- We will inform you of this right with our response to your request
- We will provide the Authority's contact details
- The Authority can investigate and order remedial action if necessary
Contact for Appeals: Data Protection Authority of Sri Lanka (contact details to be published when Authority is fully established)
Privacy Settings You Can Control
As a parent, you can control:
Profile Visibility
Public, Friends Only, or Private
Academic Info
Hide/show school, grade, subjects
Stats Display
Hide/show XP, level, accuracy
Activity Feed
Hide/show recent quiz attempts
Achievements
Hide/show earned badges
Leaderboards
Opt in or opt out
Friend Requests
Enable/disable social features
Analytics
Allow or block usage tracking
Data Retention
| Data Type | Retention Period |
|---|---|
| Active account data | Duration of account |
| Quiz history | 2 years (then anonymized) |
| Parental consent records | Until child turns 20 years old |
| Payment records | 7 years (legal requirement) |
| Inactive accounts | Deleted after 3 years of inactivity |
You can request earlier deletion at any time.
Withdrawing Your Consent
You can withdraw consent at any time:
Immediate Effects:
- Your child's account is suspended
- No new data collection occurs
- Your child cannot log in
Your Options:
- Pause Account: Temporarily suspend without deleting data (up to 90 days)
- Delete Account: Permanently remove all data (within 30 days)
- Re-consent: Change your mind and re-activate the account
How: Parent Dashboard > Withdraw Consent or email parents@brainus.lk
Frequently Asked Questions
Q: Is BrainUs LK safe for my child?
A: Yes. We implement industry-standard security, age-appropriate privacy defaults, and active moderation to ensure a safe learning environment.
Q: Can I see what my child is doing on the platform?
A: Absolutely. The Parent Dashboard shows their quiz history, progress, friend list, and all activities.
Q: What if I don't want my child on leaderboards?
A: Leaderboards are opt-in only for children under 16. You control this setting completely.
Q: Can I delete my child's account if we stop using it?
A: Yes, you can delete their account anytime, and we will remove all data within 30 days.
Q: Do you share data with my child's school?
A: No, we do not share data with schools unless you explicitly request and authorize it.
Q: What happens when my child turns 16?
A: At age 16, your child can manage their own consent, but you will still have access to the Parent Dashboard if you choose. We will notify you 30 days before their 16th birthday.
Contact Us
We are here to help!
Get in Touch:
- Parent Support Email: parents@brainus.lk (dedicated parent support team)
- Response Time: Within 48 hours
- Location: Colombo, Sri Lanka
Legal Compliance
BrainUs LK is fully committed to compliance with Sri Lankan and international child privacy laws:
Sri Lankan Law
- Personal Data Protection Act No. 9 of 2022 as amended by Act No. 22 of 2025 (PDPA 2025)
- Section 17: Timely responses to rights requests (1-3 months)
- Section 19: Clear appeal procedures to Data Protection Authority
- Section 20: Designated Data Protection Officer (may be external contractor)
- Section 26: Lawful cross-border data transfers with safeguards
- Section 52: 36-month compliance timeline (we aim for earlier compliance)
- Consumer Affairs Authority Act: Consumer protection for educational services
- Computer Crimes Act: Protection against online threats and abuse
International Standards
- GDPR Principles: European data protection best practices
- COPPA Principles: U.S. Children's Online Privacy Protection Act standards
- EU Age-Appropriate Design Code: Child-safe design principles
Thank You
Thank you for trusting BrainUs LK to support your child's education. We are committed to providing a safe, engaging, and effective learning experience.
If you have any questions or concerns, please don't hesitate to reach out to our dedicated parent support team at parents@brainus.lk.
Sincerely,
The BrainUs LK Team
For more detailed information about our data practices, please review our complete Privacy Policy and Terms of Service.