How Machines Work ("we", "us", "our") provides an interactive educational web application that shows children how everyday machines work, using real 3D models, labelled diagrams and narrated explanations (the "Service").
For the purposes of the EU/UK General Data Protection Regulation (GDPR), the UAE Personal Data Protection Law (PDPL), the Saudi PDPL and similar laws, we are the data controller for the limited personal information described below.
Contact: privacy@myai-ebook.com
We keep this deliberately minimal. There are exactly three categories:
| What | Why | Who provides it |
|---|---|---|
| Email address | To send you the free access link and product updates you asked for | A parent or guardian, voluntarily, via our signup form |
| Signup metadata | Date/time of signup, and which page you signed up from — used only to measure whether our marketing works | Generated automatically |
| Basic server logs | IP address and user-agent, retained briefly for security and abuse prevention | Generated automatically by our hosting provider |
That's it. We do not ask for names, ages, birthdays, photos, location, school names, or anything else about your child.
To be unambiguous, the Service does not:
The Service is designed for children, and we treat that as a design constraint rather than an afterthought. Our approach is to avoid collecting children's data at all, which is the safest way to comply with children's privacy laws worldwide.
We comply with the Children's Online Privacy Protection Act. We do not knowingly collect personal information from children under 13. The Service contains no advertising, no behavioural tracking, and no mechanism by which a child could submit personal information. Where a parent or guardian contacts us, that information is provided by the adult.
Where consent is the legal basis for processing, and the data subject is a child below the applicable age of digital consent (16, or 13 where a Member State has lowered it), consent must be given or authorised by the holder of parental responsibility. Because we only collect an email address from the adult, this consent is obtained directly from the parent or guardian.
We design for the best interests of the child by default. Specifically: no profiling, no nudge techniques, no advertising, no data sharing by default, minimal data collection, and privacy settings that are protective from the outset.
Processing is limited to the minimum necessary, is carried out for a lawful purpose, and does not involve sensitive personal data. We do not process children's personal data.
Parents and guardians: if you believe your child has sent us personal information, email privacy@myai-ebook.com and we will delete it promptly — normally within 7 days.
We do not use advertising or tracking cookies, and we do not use any third-party cookie that follows you across websites.
The Service uses your browser's local storage for two functional purposes only:
This information stays entirely on your device. It is never transmitted to us and we cannot read it. Clearing your browser data removes it permanently.
We rely on a small number of processors to run the Service. Each is bound by contract to use your information only on our instructions:
| Provider type | Purpose | Data involved |
|---|---|---|
| Hosting / CDN | Delivering the website and 3D assets | IP address, user-agent (short-lived logs) |
| Email delivery | Sending the access link and updates you requested | Email address |
| Payments (when launched) | Processing purchases | Handled entirely by the payment provider — we never see card details |
We do not integrate social media pixels, advertising networks, session-replay tools, or cross-site tracking of any kind.
Our legal bases under GDPR are consent (for marketing email), legitimate interests (for security and aggregate measurement), and legal obligation where applicable.
We share personal information only in these narrow circumstances:
We never sell personal information. We do not share it with advertisers or data brokers.
| Data | Retention |
|---|---|
| Email address | Until you unsubscribe or ask us to delete it |
| Server logs | Up to 30 days |
| Local device storage | Until you clear your browser data — we have no copy |
Depending on where you live, you may have the right to:
To exercise any of these, email privacy@myai-ebook.com. We respond within 30 days, usually much sooner. There is no charge.
California residents (CCPA/CPRA): we do not sell or share personal information as those terms are defined by the CCPA, and we do not use it for cross-context behavioural advertising.
Our service providers may store data in countries other than yours. Where personal data leaves the EEA, the UK, or the UAE, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and, where applicable, the UK Addendum. You may request a copy of these safeguards by contacting us.
The Service is served over HTTPS with modern TLS. Access to collected data is restricted to the minimum number of people who need it. Because we deliberately hold almost no personal data, the consequences of any incident are inherently limited — but we still take it seriously and will notify affected users and regulators where required by law.
If we make material changes, we will update the date at the top and, where the change affects how we handle your information, notify you by email. Continuing to use the Service after an update means you accept the revised policy.
Questions, requests or complaints:
📧 privacy@myai-ebook.com
If you are in the EU/UK and are not satisfied with our response, you have the right to lodge a complaint with your national supervisory authority.