# Privacy

**Nothing leaves the device.** This app has no accounts, no analytics, no
advertising, no third-party scripts and no server of its own. It never sends
anything anywhere; the only network requests it makes are to load its own files
(the page, the voice clips, the pictures) from wherever it is hosted, and after
the first visit it keeps a copy of those so it can run with no connection at all.

## What is stored, and where

Everything below lives in the browser (or installed app) on the device it was
made on, in the browser's own storage for this site. Nothing is copied off the
device unless a parent exports it on purpose.

- **Children and progress.** Names, chosen pictures, letters learned, stars,
  session history and settings. Stored in the browser's local storage.
- **Voice recordings.** If a parent records their voice (a child's name, letter
  sounds, or a whole voice pack), the recordings are kept in the browser's
  IndexedDB storage. They are played back only inside the app. They are never
  uploaded.
- **The microphone** is used only while a parent is recording, after the
  browser has asked for permission, and only on the parent screens. The app does
  not listen during play.

## Exporting and deleting

From the parent screen (hold **P** for three seconds, or press
**Ctrl+Shift+P**):

- "Export backup" writes a file with all children and progress to the device.
- "Export this voice (zip)" in the recorder writes the recordings to a file.
- "Reset this child's progress", "Delete recordings" and deleting a child
  remove the corresponding data from the browser.
- Clearing the browser's site data for this site removes everything at once.

## Children

The app is built for children aged roughly three to six and is designed so that
no personal information about a child is collected by anyone. A child's first
name is typed by a parent and is used only on the device, to greet the child
and to pick the letters taught first. No account is created and no information
is shared with the author or anyone else. This is how the app complies with the
spirit of children's privacy rules such as COPPA: there is simply no collection.

## Hosting

The free web version is served from a static host (Cloudflare Pages). Like any
web server, the host's edge may log the request for the page (IP address, time,
browser type) for operations and abuse prevention; the app itself adds nothing
to that, and the author does not run analytics on it. The installed and
downloaded versions make no requests at all once installed.

## The child's name and the voice

When you add a child, the app looks for a ready-made clip of that first name
among a pool of common first names bundled with each voice. In the web version
that lookup is an ordinary request for a file whose name is the first name in
lowercase (for example `names/mia.mp3`), so the host's edge logs may record it
like any other file request. Nothing else about the child is sent, and the
author does not read or keep those logs. If you prefer that no request carry
the name at all, use the installed or downloaded version, or record the name
yourself: a recording stays on the device and is used instead.

## Changes and contact

If this ever changes, the version number on the About screen changes with it
and this page says what changed. Questions: see the About screen inside the app
or the contact page at the address shown there.