Privacy, for your family.
Updated 21 September 2026
Who is responsible
EntrepreKid is operated by MB Skydis, Perkūnkiemio g. 53, LT-12144 Vilnius, Lithuania. For privacy requests contact info@mbskydis.com. This notice applies to EntrepreKid and Young Boss Lab, separately from FutureSchool.
What we collect and why
Parents provide their name, email, password, family membership and billing details. Passwords and child PINs are stored as hashes. Child profiles contain a first name or nickname, age, country, language, interests, experience, available time, materials, budget and parent support. We store private projects, mission submissions and attachments, AI conversations and feedback, reported business results, and screen-minute history to provide and adapt the service. We record consent and essential security and billing events. Do not submit exact addresses, school names, customer identities, identity documents, payment credentials or sensitive personal information.
Legal bases and parental permission
We use parent account and billing information to perform our agreement, consent for the child’s learning profile and AI processing, legal obligations for financial records, and legitimate interests in keeping the service secure. An adult guardian creates each child profile and explicitly permits its use. Learning requires a paid, verified parent account. Parent identity and permission may require further verification depending on the child’s country and age. You may withdraw child consent and delete the profile in the parent dashboard. This stops child access; cancel billing separately.
AI and service providers
OpenAI processes the relevant profile context, recent work, conversations, and supported attachments to generate missions, guidance, moderation and evaluation. We do not send parent billing details to the coach. API requests disable response storage; child AI processing remains disabled until Zero Data Retention is verified for the API project. This is not a promise that AI is error-free. Google Cloud hosts the application and database in the United States. Stripe handles payment details and subscriptions; we do not store card numbers. Amazon SES delivers account emails. Providers may process data outside the EEA; applicable processor agreements and international-transfer safeguards must cover that processing. We do not sell children’s data, publish child profiles, serve behavioural advertising, or use child work to train our own AI models.
Who can see a child’s work
The child can access their own learning space. Both accepted parents in the family can read all children’s missions, submissions, attachments, conversations, feedback, progress, business entries and reward history. The account owner controls billing and the other parent’s access. Authorized operators can access operational records for security and support; access is restricted. Uploaded work is private and requires a family session to download. There is no public child directory or social feed.
Retention, export and deletion
Learning records remain available while the profile is retained, including after a subscription ends, so families can export their work. Archiving preserves data and disables child login. Permanent child deletion removes the profile, files, work, conversations and reward history from the active database. Backups may retain copies for up to 30 days; legally required billing and consent evidence may be kept longer. Contact us to close the parent account or request a complete family export. Essential account cookies expire after seven days. Security rate-limit records expire and are periodically removed.
Your rights and cookies
You may request access, correction, deletion, restriction, portability, withdraw consent, or object where applicable by emailing info@mbskydis.com. We may verify your authority before sharing family data. You can complain to Lithuania’s State Data Protection Inspectorate (vdai.lrv.lt) or your local supervisory authority. We use only essential authentication cookies and a language selection in the URL. No advertising or optional analytics cookies are used.