Child data processing consent

The representative freely and in the child's interests permits the LARNES owner to process the listed data solely for the stated purposes.

Consent is separate from the Terms, Privacy Policy, offer, and other confirmed documents under Article 9(1) of Federal Law No. 152-FZ.

A separate consent is recorded for each child. Adding another child, purpose, or recipient category requires a separate representative action.

Opening this page, creating an adult account, holding a family role, or using the site does not constitute child-data consent.

The controller (оператор) is the platform owner whose name, individual-entrepreneur status, tax and registration numbers, address, and contacts appear on the Company details page.

The data subject is the specific minor named in the consent form. The representative is an adult acting for and in the interests of that child.

Where a school, network, or independent teacher uploads data as an independent controller, LARNES may act as a processor under their instructions. That controller determines its collection ground, family notice, retention, and request handling; this LARNES consent does not replace those duties.

Before processing, the following rules apply:

• for a child under 14, consent is given by a parent, adoptive parent, or appointed guardian;
• from age 14 to 18, LARNES obtains the teenager's own consent for ordinary personal data and, where processing is connected to a transaction or another scenario requiring approval, separate approval from a parent, adoptive parent, or trustee;
• an emancipated or married minor acts independently after full legal capacity is verified;
• another representative only where applicable law and a verified instrument expressly permit that consent.

Being a grandparent, other relative, invited family member, or adult account holder does not itself prove authority to consent.

The controller must verify authority before processing using a minimally sufficient method: civil-status information, birth or adoption certificate, guardianship authority act, or another lawful source. A full document copy is not retained without a separate need.

The representative confirms there is no established conflict of interest, restriction, or termination of authority and must report any change.

LARNES uses an adult family-account model: the child does not accept the Terms or receive an independent adult account.

For a child aged 14 to 18, the interface must obtain the teenager's own action and any required adult approval separately. Neither replaces the other.

At age 18, representative consent ceases to support new operations. Before continuing, LARNES obtains the adult user's own ground or deletes or anonymises data that is no longer needed.

The purpose is to create and maintain a non-public child profile in the family workspace, distinguish children in one family, and let the representative control selected relationships.

This purpose covers:

• first and last name and patronymic, if any;
• date of birth and sex;
• internal child, family, and linked-representative identifiers;
• the selected card colour and catalogue character avatar;
• profile creation, update, deletion, or hiding dates;
• family relationships and granted or terminated access.

Address, phone, email, passport, national insurance number, education documents, and a child photograph are not needed for the ordinary family profile and are not collected under this consent.

The purpose is to assign and perform learning activity, show progress to the child and authorised adults, and maintain schedules, attendance, and outcomes.

Processing may include:

• directions, programmes, topics, lessons, assignments, and selected parameters;
• homework assignment, current step, start and completion status;
• learning-programme position, status, progress, start, completion, and finish dates;
• schedule, group, teacher, organisation, enrolment, and enrolment status;
• attendance, absences, and lesson grades;
• internal links to an organisation's accrual, agreement, or payment record without the child's bank-card details.

Task sequencing and progress display do not make legally significant decisions about the child's rights, admission to education, or medical condition.

The purpose is to open an assigned lesson safely on a family or classroom device without disclosing an adult password.

Processing covers internal child, classroom, group, lesson, programme, device, and session identifiers; token hash, version and revocation status; session timestamps, device command, and lesson result.

A child browser session normally lasts up to 12 hours. A classroom device may remain enrolled for up to one year or until unbound; learning outcomes follow the relevant learning-workspace retention period.

Child data becomes available to a teacher, school, network, or another family member only after a separate role connection supported by the Platform.

Before confirmation, the representative must see the recipient, connection purpose, accessible data categories, and revocation method. Access may be granted only within the displayed scope; processing consent is not automatic permission for every invited adult to see all information.

A family role and legal-representative authority are different. An invited relative may receive only explicitly authorised access from a verified representative but gains no right to issue new consents for the child.

If an organisation obtained child data before a family connection, it is responsible for its ground and data-subject notice. LARNES may begin processing such data only after documented processing instructions are in place.

To link consent to the child, LARNES processes the representative's account ID, name, verified contact, asserted legal status, verification method and result, verification date, and authority status.

Supporting-document details are collected only where necessary. A document image, passport data, and registered address are not added to the ordinary form automatically.

Verification data is used only to prove representation, resolve an access dispute, and demonstrate consent lawfulness.

Permitted automated operations are collection, recording, organisation, accumulation, storage, correction, retrieval, use for stated functions, provision of strictly defined role access, blocking, anonymisation, deletion, and destruction.

Manual processing is allowed for authority verification, family requests, support, incident review, or error correction.

Disclosure to the public is not permitted. A new purpose, data category, or recipient category requires a new ground and, where applicable, new separate consent.

Before processing begins, the primary profile and learning records must be hosted in the LARNES database on the production infrastructure described in the Privacy Policy. Initial recording, organisation, accumulation, storage, and retrieval of Russian citizens' data must use a database located in the Russian Federation.

The hosting and database provider receives access only under written processing instructions and only as needed for storage and maintenance. Its legal entity, address, country, and processing terms are stated in the Privacy Policy.

SMS.ru, Resend, Cloudflare Turnstile, advertising integrations, and Telegram do not receive a child's profile, date of birth, assignments, answers, or results under this consent.

No foreign service receives child personal data until necessity, country, and recipient are reviewed, Article 12 of Federal Law No. 152-FZ is satisfied, and the representative is separately informed.

This consent does not permit:

• marketing messages to the child or advertising targeting with child data;
• non-essential advertising or third-party behaviour analytics;
• public disclosure of name, photographs, video, audio, reviews, achievements, or results;
• lesson photo or video recording or image or voice recognition;
• health, diagnosis, disability, ethnicity, religion, or other special-category data;
• biometric personal data;
• transfer to undefined partners or cross-border transfer without a named country, recipient, purpose, and ground;
• creation of an independent adult account for the child.

Users must not enter such information into comments, answers, CRM, agreement templates, or free-text fields. If a future feature needs it, LARNES must first create a separate legal and technical framework.

Consent applies from the recorded affirmative action until the earliest of withdrawal, end of representative authority, profile deletion, purpose termination, or the child reaching age 18.

The ordinary family-workspace action archives the profile and allows restoration. Legal erasure starts through a separate /legal/data-request request after identity and authority are re-verified; only data supported by an independent ground and defined period remains.

After purpose termination or withdrawal, data based only on consent is destroyed within 30 days. If destruction is technically impossible, it is blocked and destroyed within no more than six months.

A limited consent, authority-verification, and withdrawal record is retained for three years after consent ends and, if disputed, until final resolution without continuing the withdrawn purpose.

The representative may withdraw through the provided child-profile control or send a request to the personal-data email or postal address on the Company details page.

The request must identify the representative, child, and consent. The controller re-verifies authority but does not request excessive passport data through unsecured email.

Withdrawal ends family processing based on this consent. If a school or teacher is an independent controller, LARNES must identify the request channel and follow that controller's documented instruction; LARNES consent cannot override its lawful retention period.

Ending one representative's access must not automatically erase the profile against another legal representative's valid consent or an education organisation's independent ground; disputed access is blocked during review.

The child, considering age, and legal representative may obtain processing information and data access, request correction, blocking or destruction, withdraw consent, and complain to Roskomnadzor or a court.

LARNES must explain processing to the child in age-appropriate language and consider the child's objection, especially from age 14, even where the legal action is taken by the representative.

The general request process and response periods are in the Privacy Policy.

Before the first child-profile save, the form must require legal-status selection, authority verification, review of data, purposes and recipients, a separate pre-unchecked box, and a create or confirm action.

An invitation cannot create a new profile before consent. If an existing child is selected, the representative separately confirms the specific connection and access scope rather than issuing repeated blanket consent.

For evidence, the controller must record the representative and child, legal status and authority-verification result, version, language and text hash, purposes, data and recipients, timestamp, scenario, affirmative action, IP address, session or device ID, status, and withdrawal.

If authority verification and the consent record are not created, LARNES does not save a new profile or start processing on this consent.

The representative must be able to view the accepted version, active or withdrawn consent, and current child-data access grants.

Consent applies together with the specific form naming the child and selected purposes. This public page without that action creates no consent.

If Russian and English versions differ for relations governed by Russian law, the Russian version prevails.