Privacy Policy

Last updated: 3 May 2025

This document explains how Read Not Guess LLC (“we”, “our”, “the App”) collects, uses, and protects your information. Review it with legal counsel before publication.

1. Who we are

Read Not Guess LLC is the publisher of the Read Not Guess iOS application. You can reach us at [email protected].

2. Information we collect

Account details – parent e-mail address, hashed password, Sign in with Apple token, subscription status.
Child profile – nickname, age or school year, reading level. Pseudonyms are welcome.
Learning activity – words attempted, errors, lesson completions, in-app preferences.
Audio samples – short voice clips if the reading-aloud feature is switched on. Disabled by default.
Device and diagnostics – device model, iOS version, crash logs, coarse region. Advertising identifiers are reset to zero-link; we do not track users.
Support correspondence – e-mails and messages you send us.

We do not collect precise location, contact lists, photos, or payment-card numbers.

3. How we use your information

Provide core features such as account creation, progress tracking, and device sync.
Personalise lessons and feedback.
Diagnose bugs and improve performance through aggregated analytics.
Reply to support requests.
Prevent fraud and meet legal obligations.

4. Legal bases (GDPR / UK GDPR)

Contract – delivering the service you request.
Legitimate interest – product quality and security.
Consent – marketing e-mails and any processing of child audio; consent may be withdrawn at any time.

5. Sharing and disclosure

We never sell personal data. Information is shared only with:

Service providers bound by confidentiality agreements:
- Firebase / Google Cloud for authentication, database, analytics, and crash reporting
- OpenAI for optional pronunciation feedback (clips are processed transiently and not used for model training)
- Apple for in-app purchases and Sign in with Apple
Authorities if lawfully required or to enforce our terms.

All vendors must use industry-standard security and, where necessary, Standard Contractual Clauses for international transfers.

6. Retention periods

Account, child profile, and learning activity – until you delete the account or after 24 months of inactivity.
Audio samples – 30 days, then automatically deleted.
Crash and analytics data – 14 months.
Support correspondence – up to 2 years.

You may request earlier deletion at any time.

7. Security measures

Data in transit is protected with TLS 1.2 or higher; at rest with AES-256 encryption. Access is role-based, logged, and restricted to authorised staff. We conduct regular security reviews and penetration tests.

8. Your rights

Where applicable, you may:

Access a copy of your data.
Correct inaccuracies.
Delete your account and associated data.
Receive a portable copy of certain information.
Object to or restrict specific processing activities.

Use the in-app Privacy menu or e-mail [email protected] to exercise these rights.

9. Children’s privacy

The App is intended for use by parents, guardians, and educators. We process limited child data solely for educational purposes and only with verified parental consent. The App contains no advertising and no external social-sharing features for children.

10. International users

Servers are located in the United States. By using the App, you consent to the transfer and processing of your information in the US and any other jurisdiction where our providers operate, subject to appropriate safeguards.

11. Changes to this policy

Material changes will be announced in-app and by e-mail at least 14 days before they take effect. Continued use of the App after the effective date constitutes acceptance of the revised policy.

12. Contact

Questions or concerns? E-mail [email protected].