Privacy
Read which information the website and web apps use, where it is saved and who to contact about your rights. We also describe matters still needing clarification. Choose a topic for details about an individual app or service.
Nordic DTS is the controllerAsk about your information at privacy@nordicdts.com.
Controller
Nordic Digital Trust & Safety, CVR 43132547, Tendrup Møllevej 51, 8543 Hornslet, Denmark, is the provider and controller for Sprout’s processing of information. Nordic DTS publishes its name and CVR on its own company pages. Email privacy@nordicdts.com about privacy and rights.
When you visit the website
Vercel delivers the website. Your connection can include your IP address, the address you open and technical information from the browser. This is separate from app content. The exact operational and security data recorded, its purposes and lawful bases are not confirmed yet.
When you write to us
The contact form opens an email draft for you to send. We then receive your email address, message and other details in the email so we can respond. Use fictional examples in bug reports. The email provider and lawful basis need confirmation in the final policy.
Who receives information?
Most app content is processed on the device and is not automatically sent to Sprout, parents or external AI. Safe Browser’s online test instead sends rules and requests to its server and private Vercel Blob storage. Create your account with email in My apps. It remembers your app choices. Budget messages can be shared with a linked parent account. Parent codes are separate from the account. Sprout-chat in the open web test shares between two participants through its own private server store; other app data is not shared automatically. Vercel provides the website and test hosting. Processing roles, agreements, logs, the email provider and any transfers still need confirmation; fra1 describes the configured Blob region, not every provider data flow.
Emails and operational data
We have not yet set retention periods or precise deletion criteria for emails, bug reports, operational data or security data. This test information therefore gives no confirmed automatic deletion period. Do not send us private messages, sensitive child data or images.
Legal status of the test
Updated 13 October 2026. This information is not legal approval or a completed assessment of every requirement. Lawful bases, processor agreements, retention for email and logs, and any transfers outside the EEA still need confirmation. Use fictional data only for testing.
Most information stays on-devicePeople with access to the app and browser profile can read locally saved information.
Family
The app’s browser storage keeps names, relationships, optional phone numbers, agreements, meeting places and notes. You can choose to add a location to a meeting after granting browser permission. This does not provide live tracking or automatic location sharing.
Safe Keyboard
Check message processes text locally while the app is open. Text is not saved on reload or sent to an external AI service. You choose whether to copy your reply. This feature does not read keystrokes or messages in other apps.
Safe Camera
Photos you choose or take with the camera are processed on the device. Images, detections and classifications are not uploaded. Analysis files come from the app’s own address and may be saved on the device for reuse. Camera and mask preferences are stored in the browser. You choose whether to save an edited image copy on the device.
Plans and progress
Parent Coach saves your conversation plans, words, notes and follow-up. Gaming & Screen Time saves timers, agreements, budgets and purchases you enter. Learning saves tasks, steps, reflections and mission progress. This information stays on the device in each app’s browser storage.
For children
You choose which text or photo to open. Others with access to the app and the same browser profile can see what you save. Ask before saving something private about someone else. An adult can help you see or remove information. You do not need to send us private photos or messages to get help.
My apps and AI Check
My apps saves your app shortcuts in this browser. Removing a shortcut does not delete app data. AI Check processes text, image files and text read from images (OCR) on the device without uploading the content. Analysis files may be downloaded from the app’s own origin. Results can be inconclusive and do not prove who created the content.
App Blocker
Rules and test usage are saved in this browser. The parent code protects changes within App Blocker; it does not lock the phone. Testing does not measure real app usage or change other apps or browsers. The parent code is stored as a salted hash on the device and is not included in backups.
Profile Check
Saved checks, chosen profile links and your answers stay in the browser where you save them. Opening search links sends the query to the chosen platform or Google. An optional Bluesky lookup sends the username and IP address to Bluesky’s public service when you choose it. There is no automatic background search or identity verification.
Images shared to Safe Camera
When you use a supported Share to Safe Camera feature, the image file is saved temporarily on the device in IndexedDB under sprout-safe-camera-received-v1. A random ticket lets the receiving app tab retrieve the file. The ticket lasts up to two minutes. The file is deleted when the app retrieves it. Expired files are cleared the next time the inbox is used; there is no guaranteed background cleanup. This sharing does not upload the image to Sprout. Clear the app's site data to remove any files that remain.
Lesson plans in School
The lesson archive and local work in Sprout Educator stay in the teacher’s browser; downloaded copies are separate. My school uses separate Supabase sign-in with email, user ID and school access roles. The session is stored under sprout-school-auth- followed by the project ID and can refresh automatically. The mail service receives the sign-in email. Save to school sends the workspace’s plans, year overviews, groups, fictional pupil IDs and subject notes to private school storage in Supabase. Only authorised colleagues can read or edit. Local data is not transferred automatically, and unsaved school drafts stay only in memory. The school owner can archive and delete the school; clearing browser data or signing out does not delete server data. Versions and expired sessions have separate retention settings; operational logs and provider backups need separate clarification. A pupil code grants only a time-limited class session with an alias, messages and whether the Sprout page is open. The __Host-sprout-school-pupil cookie is HttpOnly, Secure and SameSite=Strict and lasts at most four hours. It does not grant access to teacher plans or notes. Test only with fictional data. Phone messages, location and Wi-Fi status are not collected.
Browser and chat use server storageSafe Browser rules and Sprout-chat messages use separate server stores.
Safe Browser
The open web test saves rules and requests on a private server. Setup may also include the child’s name and age setting. Bookmarks stay in the browser. Page text is processed temporarily; full pages are not stored. The server uses Vercel Blob in fra1 (Frankfurt). It also stores text fingerprints, salted code and key hashes, and session hashes. Rules from a local test server are not moved to the online test automatically.
When Safe Browser fetches a page
Permitted addresses are fetched through Safe Browser’s server. The website provider may receive the server’s IP address and the requested address. The reader does not send the website’s cookies, parent key or a referrer. It does not load page scripts or images either. A request without cookies does not make your browsing anonymous.
Safe Browser’s device cookie
Safe Browser’s online test uses __Host-sprout_browser_workspace to select this browser’s private workspace on the server. It does not grant parent access and is not a Sprout login. The cookie is HttpOnly, Secure and SameSite=Strict, applies to the whole app origin and is set with Max-Age=31536000 (one year). The period is renewed when the server sets the cookie again. Expiry or clearing does not delete server data. This cookie is separate from the website’s cookie notice and a Sprout account session.
Sprout-chat: server data
Sprout-chat is available in the open web test. The test is for text between two participants. Messages are saved separately in a private Vercel Blob store in fra1 (Frankfurt), with cleanup every hour. In the configured test, accepted message text, withholding markers and send results are stored on the server. The parent code is stored as a salted hash, and access and invitation secrets are stored as hashes. No names, email addresses or phone numbers are collected. Unsent drafts are not saved to disk. The room expires after 24 hours and holds the latest 48 messages; expiry is not physical deletion. Removing the contact clears the conversation, and code-protected deletion removes content and access through a deletion marker. Expired rooms and deletion markers are cleaned up automatically every hour. An incomplete job returns 503 and needs follow-up; logs and backups need separate confirmation.
Sprout-chat’s session cookie
Sprout-chat is available in the open web test. In the web test, __Host-sprout_chat is used as an essential session cookie for up to 24 hours: HttpOnly, Secure, SameSite=Strict and Path=/. It is separate from Safe Browser and Sprout sign-in and is not used for analytics or marketing. Expiry does not delete the room’s server data; physical deletion takes place during cleanup every hour; an incomplete job returns 503 and needs follow-up.
The account saves app choicesBudget messages can be shared with a linked parent account.
Your Sprout account
Your account in My apps uses Supabase for email sign-in, your user ID and app shortcuts. It does not automatically retrieve private content from the other apps. Your sign-in session is saved on the device under sprout-account- followed by the project ID and can refresh automatically. Signing out ends the session on this device. It does not delete your account or server data. The mail service receives the address and content of your sign-in email. Contact privacy@nordicdts.com about your account, retention and deletion. If you save a new over-budget purchase in Gaming, the parent account can receive a message under Account → Messages in My apps. This also applies when you change the purchase’s game, amount, date or month. This applies only to linked child access or the parent account’s own entries. Independent accounts (15+) do not send to parents. Internal identifiers link the message to the account and device. It contains the game, amount, purchase date (or month if no date was entered), budget and overspend, recording and receipt times, and the child’s device name or the label Your account. Free notes and the purchase’s free-text title are not sent. Pending messages stay in a local sending queue and can be retried for up to seven days after they are recorded. A server receipt means the message is saved on the account, not that it has been read. Later changes or deletion of the purchase do not alter an already saved message. Sprout does not retrieve bank data or purchases from games or scan old purchases automatically. A budget message does not prove that a purchase lacked permission. There is no push or email, and Sprout does not block payments. The child’s messages, photos and location are not automatically shared. Budget messages are stored privately in Supabase. Messages and related retry identifiers more than 90 days old are cleared during later use of the message feature. This is not guaranteed deletion exactly after 90 days.
Calendar information
Calendar shows a 30-day window for your account and the child access you manage. It saves activity type, time, duration and status. Automatic recording of new Sprout timers and completed tasks is off. A parent must enable it for child access. Adults can always enter time manually, including YouTube time. These are your own entries; Sprout does not monitor the phone or YouTube. Change opt-ins and delete entries in Calendar → Settings. Existing app data is not imported automatically. The 30-day window is not a deletion deadline.
Access and delete informationLocal information, server data and downloaded copies need separate deletion.
Who can see data, and how long is it kept?
Information on your device stays until you delete it or clear browser data. Downloaded copies need to be deleted separately. In Safe Browser’s web test, choose Slet Browser-data (Delete Browser data) under Data og forældrekode (Data and parent code). You need parent access, the current code and confirmation. This removes the name, age setting, rules, requests, approvals and access data from the current server workspace. Device bookmarks and downloaded copies remain. The server keeps the workspace’s hashed address, a deletion marker and timestamp without automatic cleanup so old tabs cannot restore the content. This deletes app data; provider logs and backups need separate confirmation. Clearing cookies does not delete server data and may leave you unable to access it. Use fictional test data only. Email privacy@nordicdts.com about server data and your rights.
Your rights
Email privacy@nordicdts.com about access, correction, erasure, restriction, objection or a copy of information where those rights apply. If processing relies on consent, you can withdraw it. You can complain to the Danish Data Protection Agency at datatilsynet.dk. Sprout does not automatically receive information stored on your device and cannot erase it for you. Safe Browser’s server data is separate; a parent can delete the current workspace’s app data with Slet Browser-data (Delete Browser data). A deletion marker and timestamp remain; local bookmarks and downloaded copies must be deleted separately.