Privacy Policy

What we collect

When a parent creates an account, we store the parent's email address and a progress blob— a JSON snapshot of the child's learned words, earned stars, and Mochi's growth stage. We collect no personally identifiable information about the child: no name, no age, no photo, no voice recording.

Why we collect it

The progress blob exists solely to sync Mochi's progress across devices. If a family uses a tablet at home and a phone on the go, the child's stars and learned words follow them seamlessly. Nothing is sold, shared with advertisers, or used for any purpose beyond this sync.

Who can see it

Only the signed-in parent can read or write their own row. We enforce this at the database level with Supabase Row Level Security (RLS): every read and write query is automatically filtered by the authenticated user's ID. No other user — and no FirstWords employee — can access your data through the application.

How to delete your data

You can permanently remove your account and all associated cloud data at any time by tapping Delete accountin the Account section of the app settings. Deletion is immediate and irreversible. The app will continue to work offline on the current device — the local copy of your child's progress is not affected.

Alternatively, email us at privacy@firstwords.app and we will delete your data within 30 days.

GDPR (European users)

If you are located in the European Economic Area, you have the right to access, correct, or erase your personal data, and to object to or restrict processing. To exercise any of these rights, use the in-app deletion button or contact us by email. We do not transfer personal data outside the EEA except where necessary to operate our hosting infrastructure (Supabase, hosted in the EU-West region).

COPPA (US users)

FirstWords is directed at parents, not children under 13. We do not knowingly collect personal information from children under 13 directly. Accounts are created by parents or guardians only — the in-app sign-in flow explicitly states "Parents only — no kid accounts." If you believe we have inadvertently received information from a child under 13, please contact us immediately so we can delete it.

Contact

Questions about this policy? privacy@firstwords.app