Draft. This policy is being reviewed before PeekaSpeak launches and may change.
PeekaSpeak ("the app") is made by [Company legal name] ("we", "us"). This app is made for young children (ages 0 to 5) to use together with a parent or caregiver. We wrote this policy for parents. A short version is in the app under Privacy in plain words.
The short version
- Your child's photo, family photos and any voice recordings stay on your device. We never receive them.
- We do not show ads, use advertising IDs, sell data, or use third-party analytics or tracking.
- We keep only what we need to save your child's learning progress and run your subscription.
- You can see, change or delete everything, any time, from the parent area or by emailing us.
1. Who this policy covers
The parent or guardian who creates the family account ("you") and the children whose profiles you add. Only adults can create an account. Children use the app on a parent's device or on a tablet the parent links to the family account.
2. What we collect, and why
Information you give us about yourself
| Information | Why we need it |
|---|---|
| Email address and password (stored only as a secure hash), or your Apple or Google sign-in | To create and secure your family account and let you sign in on other devices |
| Whether you want product update emails (off unless you turn it on) | To send updates only if you asked for them |
| Your answers to setup questions about yourself, such as your role (mom, dad, caregiver) and how you heard about us | To word the app for you and to understand which channels work, in total, not per person |
Information you give us about your child
| Information | Why we need it |
|---|---|
| First name or nickname | So the app can greet your child and so you can tell profiles apart |
| Birth month and year (never the full date) and, if you tell us, how many weeks early your child was born | To pick age-appropriate games and to compare progress with a wide age range |
| Your answers to setup questions about your child, such as focus areas, speech level, daily routine, and whether they are homeschooled | To build and adjust your child's learning plan |
| Optional: whether your child has ADHD | Only to shape the plan |
| Learning progress: which games were played, the word practiced, the rating you tapped (tried, close, said it), the time, stars, streaks and "firsts" | To show you progress, adapt difficulty, and keep progress in sync across your family's devices |
Information created by devices
| Information | Why we need it |
|---|---|
| A random account ID for your family, and a random ID for each linked kid tablet | To keep each family's data separate and let a linked tablet sync |
| Technical information our server sees on each request (IP address, device type, app version, time) | To keep the service secure and working. Kept in server logs for 7 days only |
| Purchase and subscription status from Apple or Google, through our payment provider | To unlock the app for your whole family. We never see your card number |
Information that stays on your device and that we never collect
- Your child's photo and the avatar made from it
- Photos and names of family members you add
- Voice recordings, if your child records themselves (recordings are played back on the device and never uploaded)
- Your notification and reminder settings
Because this information never leaves your device, deleting the app removes it.
What we do not collect
We do not collect your child's full birth date, location, contacts, advertising identifiers (IDFA or Android advertising ID), or biometric data. We do not use facial recognition or voice recognition. Photos are never converted into face templates.
3. Children's privacy (COPPA)
The app is directed to children under 13, so we follow the U.S. Children's Online Privacy Protection Act (COPPA).
- Parents set everything up. Account creation, purchases, settings and links out of the app are behind a parent check ("For grown-ups") so a child cannot reach them alone.
- Parental consent. Before we store your child's information on our server, we ask for your consent when you create the family account and confirm it by email. You can withdraw consent at any time; we will then delete your child's information from our server.
- No conditioning. We do not require a child to give more information than is needed to play.
- No third-party sharing for ads or AI. We do not disclose children's information to third parties for advertising, for money, or to train AI models. If we ever wanted to share children's information with a third party for any reason other than running the service, we would ask for your separate consent first.
- Parental rights. You can review your child's information in the parent area, ask us for a copy, correct it, stop further collection, or delete it. Email privacy@peekaspeak.com and we will respond within 10 business days. We may ask you to confirm you are the account holder first.
4. Who we share information with
We do not sell or rent personal information. We share it only with service providers that help us run the app, under contracts that limit their use of it to providing their service to us:
| Provider | What it does | What it receives |
|---|---|---|
| [Hosting provider, country] | Runs our own server where family accounts and progress are stored | All server data listed in section 2, encrypted in transit |
| RevenueCat, Inc. (USA) | Manages subscriptions bought through Apple or Google | Your family account ID, purchase history, and basic device information (such as app version and an app-specific device identifier). Not your child's name, birth date, or progress |
| Apple and Google | App stores and payment, and Sign in with Apple or Google if you choose it | What their own privacy policies describe; they handle payment directly |
| [Email provider] | Sends account and consent emails, and update emails if you opted in | Your email address and the message |
| Cloudflare, Inc. (USA) | Hosts this website | Standard web request information (IP address, browser type) when you visit peekaspeak.com. The website uses no cookies or trackers |
We may also disclose information if the law requires it, to protect the safety of a child, or as part of a merger or sale of our business, in which case the new owner must keep this policy's promises or ask for your consent.
Sharing you choose. If you create a milestone card or a family link, you decide who gets it. Cards show your child's chosen share name, cartoon avatar and the milestone, never the photo of your child's face. A family link shows the timeline of "firsts" only, uses a hard-to-guess address, is not listed by search engines, and can be turned off at any time in the parent area.
5. How long we keep information
- While your account is open: we keep your child's profile and progress so the plan and progress history work.
- Detailed play history (each individual try): kept for 24 months, then summarized into totals and the detailed rows are deleted.
- Inactive accounts: if no one in the family signs in for 24 months and there is no active subscription, we email you, and then delete the account 30 days later.
- When you delete your account: we delete your account, all child profiles and progress from our server right away, and from backups within 30 days. We also ask RevenueCat to delete its record of your family. Apple or Google keep their own purchase records.
- Server logs: 7 days.
- Withdrawn consent: we delete the child's server data within 30 days.
6. How we protect information
We keep a written information security program. In short: all traffic is encrypted (HTTPS); passwords are stored only as hashes; each family can reach only its own data; kid tablets get a limited token that you can revoke; staff access is limited to what is needed; and backups are encrypted. No system is perfectly secure; if a breach affects your information we will tell you as the law requires.
7. Your choices
- Notifications: turn reminders off in the app or in your device settings.
- Update emails: unsubscribe from any email.
- Microphone, camera, photos: you can deny or revoke these permissions; the app still works without them.
- Delete your account: Parent area → Settings → Delete account and all data, or on the web at peekaspeak.com/delete-account, or by emailing us. Deleting your account does not cancel an App Store or Google Play subscription; cancel it in your store account settings.
8. Where PeekaSpeak is offered
PeekaSpeak is offered only in the United States for now. If we offer it in other countries, we will update this policy with the rights that apply there before we do.
9. State privacy rights
Depending on where you live (for example California, Texas, Utah, Louisiana), you may have extra rights to know, correct, delete, or appeal decisions about your data. You can use them by emailing privacy@peekaspeak.com. We do not sell or "share" personal information for cross-context behavioral advertising.
10. Changes
If we change this policy in a way that affects children's information, we will tell you in the app and by email, and ask for your consent again before using information in a new way. Where app store laws require it, we will also tell Apple and Google so they can ask for your renewed consent.
11. Contact
[Company legal name]
[Postal address]
privacy@peekaspeak.com