Privacy Policy

1. What we collect

We collect only what the Service needs to work:

• Account data — the parent/guardian's email address, name, and a securely hashed password.
• Child profile data — the child's first name or nickname and exam level. We do not ask for a child's surname, birth date, address, phone number, photo, or school.
• Learning progress — XP, scores, streaks, badges, answers given in games, and practice-exam results, so we can show progress and adapt practice.
• Speaking recordings — when your child uses speaking practice, the recording is sent transiently to our AI provider to generate pronunciation feedback and is not stored permanently. We keep the feedback (scores and tips), not the audio.
• Payment data — handled entirely by Stripe. We never see or store full card numbers; we keep only the subscription status and payment history needed for your account.
• Technical data — basic logs and privacy-respecting analytics (page views, feature usage) to keep the Service reliable.

2. How we use data

We use this data to:

• run the Service: accounts, games, progress tracking, badges, practice exams;
• generate AI feedback on speaking and writing practice;
• send transactional email (receipts, account notices, progress updates) and — to the account email only — occasional product emails you can opt out of;
• understand which features help kids learn so we can improve them.

3. What we never do

We never sell or rent personal data. We never show third-party advertising — anywhere, and especially not to children. We never use children's data for marketing. We never store your child's speaking recordings permanently.

4. Service providers (processors)

We use a small set of well-known providers to run the Service. Each receives only the data needed for its job:

• Supabase — database, authentication, and secure file infrastructure.
• Stripe — payment processing and billing.
• Google Gemini — AI feedback on speaking recordings and written stories (processed transiently, not used to train models on your data under our API terms).
• OpenAI and ElevenLabs — text-to-speech voices for listening and speaking games (we send text to be spoken, not your child's data).
• Resend — sending transactional and account email.
• Cloudflare — website hosting, CDN, and security.

5. Children's privacy

Children use Flyers English under an account created and managed by a parent or guardian, who consents to the child's use and to this policy on the child's behalf. We collect the minimum about the child (first name/nickname, level, and learning progress). Parents can review the child's progress at any time in the parent dashboard and can delete all of it by deleting the account.

6. Data retention

We keep your data while your account is active. If your subscription ends, your child's progress is kept so nothing is lost if you return — but you can delete it at any time (see below). When an account is deleted, personal data is removed from our live systems promptly and from backups within a bounded retention window.

7. Your rights and deleting your data

You can access and correct your data in the app, and you can delete your account and all associated data (including your child's progress) yourself from Account → Settings. Deletion also cancels any active subscription. If you prefer, email info@flyersenglish.com and we will do it for you.

Depending on where you live, you may have additional legal rights (access, portability, objection). Email us and we will honor them.

8. Security

Data is encrypted in transit, access is restricted by row-level security and least-privilege service roles, and payments never touch our servers (Stripe handles them end to end). No system is perfectly secure, but we design so that a single failure exposes as little as possible.

9. Changes to this policy

If we change this policy in a material way — especially anything about children's data — we will email account holders before the change takes effect.

10. Contact

Privacy questions or requests: info@flyersenglish.com. We reply to every message.