Privacy Notice

1. Data controller

Kim Parra, United States, is the data controller responsible for personal data collected through this website. Contact: parrakim7@gmail.com.

2. Personal data we collect

• Account data — parent or guardian name, email address, password credentials, and account settings.
• Learner data — a child's first name or nickname, grade level, and practice progress such as words mastered, scores, and reading fluency results.
• Assessment and enquiry data — answers submitted in the reading screener, questions posted to the parent community, and messages you send us.
• Transaction data — subscription plan, order and receipt identifiers, billing country, and payment status. Full card details are handled by Paddle and never reach our servers.
• Technical data — IP address, device and browser type, pages viewed, and cookie or local-storage identifiers used to keep you signed in and remember practice settings.

3. How and why we use it

We use personal data to create and secure accounts, deliver and personalise the practice program, track learning progress and report it to parents, process subscriptions and refunds, answer support enquiries, send program information you request, prevent fraud and abuse, and comply with legal obligations. Our legal bases are performance of a contract, your consent (for marketing emails, microphone use in the fluency check, and non-essential cookies), our legitimate interest in running and securing the service, and legal compliance.

4. Who we share data with

We share personal data with the following categories of recipients:

• Paddle.com Market Ltd — our Merchant of Record and payment processor, which handles checkout, billing, tax, invoicing, and refunds.
• Hosting and database providers — used to run the website and store account, progress, and enquiry data.
• Email delivery providers — used to send account, progress, and information emails.
• Authorities or advisers — where required by law or to establish or defend legal claims.

We do not sell personal data or share it for cross-context behavioural advertising.

5. Children

Accounts are created and controlled by a parent, guardian, or educator. Children use the program under that adult's account, and community posts use a nickname rather than a real name. A parent may review, correct, or delete their child's data at any time by emailing us.

6. Retention and security

We keep account and progress data while your account is active and for up to 24 months afterwards, and transaction records for as long as tax and accounting law requires. Data is stored on access-controlled, encrypted-in-transit infrastructure with row-level database access rules.

7. Your rights

Depending on where you live, you may request access to, correction of, deletion of, or a portable copy of your personal data, object to or restrict certain processing, withdraw consent, and opt out of marketing emails at any time. Email parrakim7@gmail.com and we will respond within 30 days. You may also complain to your local data protection authority.

8. International transfers and changes

Our providers may process data in the United States and the European Union under appropriate safeguards such as standard contractual clauses. We may update this notice; changes are posted here with a new "last updated" date.