Privacy

Right now this site collects nothing about you. There is no analytics, there are no cookies, there is no sign-up form and there is no account to make. You can read every page without telling us anything.

Two things are worth knowing anyway. Your web host can see that you visited — that is true of every website, and ours is named below. And the AI runs inside your browser, so what your child types into it is answered on their own machine and never reaches us.

Nothing.

There is no analytics script on any page — not ours and not anyone else’s. There are no cookies. There is no tracking pixel, no session recording and no advertising tag. Nothing on the page reports back that you were here.

The typefaces, the images, the scripts and the AI’s own runtime are all served from this website rather than from anyone else’s. That is a privacy decision before it is a speed one: loading a file from a third party sends that company your address every time the page opens. Reading this site makes no request to any other company at all.

Both parts of it run inside your browser. The reading voice speaks on your own machine, and the part of the course that answers your child’s questions answers on that same machine. What your child types is not sent to us, and it is not sent to anyone else. There is no microphone — the site speaks, it does not listen.

The files have to arrive first, once. That download is a real connection to another company, and it is the next section on this page — we would rather write it there than let it sit behind the word “offline”.

Your child’s work and the reasons they write only reach your account when you press save. That is the one thing that leaves the device, and it leaves because you chose to send it.

None of it is required. Every chapter can be finished with the AI switched off — if your child’s machine cannot run it, or you would rather it did not, your child gets pre-written answers instead and the chapter still works.

The model files have to arrive once, and that is a real connection. The first time your child presses read-aloud, and again the first time they use the part that answers questions, the browser downloads model files from Hugging Face (huggingface.co), a company that hosts open models — a few hundred megabytes for the voice, and a few gigabytes for the one that answers questions. Like any file host, it can see the request and the address it came from. It is not told who your child is, what they asked, or that the request has anything to do with a child — it is asked for a file.

After each download the files stay in your browser and that connection is not made again. We intend to serve those files from this website like everything else, and when we do, this page changes in the same release and that company leaves the list below.

The AI’s model files, in your browser’s cache. They are large — a few hundred megabytes for the voice, and a few gigabytes if your child uses the part that answers questions — and they are kept so that your child does not download them again. Clearing your browser’s site data deletes them, and costs you nothing except that next time they download again.

Two small flags, under keys beginning hba., recording whether this device turned out to be able to run each of those two layers. They exist so the site does not offer your child something their machine cannot do.

None of it leaves your device, none of it is backed up, and we cannot read it. It is not a cookie and it is not used to recognise you.

We cannot delete your browser’s storage for you. Clearing site data in your browser’s settings removes all of it, and switching to a different browser means none of it comes with you.

• Cloudflare — hosts this website and delivers it to you. Like any web host it processes your IP address and your browser’s request in order to answer it, and keeps short-lived logs for security and abuse prevention.
• Hugging Face (huggingface.co) — hosts the AI’s model files, and sees the request only when your child first uses one of those two layers. Nothing is sent to it except a request for a file.

That is the whole list for reading the site. Writing to us reaches three more, because mail does not carry itself.

One address is published, [email protected], and one person reads it. There is no contact form and no other endpoint — for a product used by children under 13, one fewer place to send things is one fewer thing to account for.

• Cloudflare — routes mail sent to that address.
• Google — holds the mailbox it is forwarded into.
• Resend — sends our reply.

Please do not send us photographs of your child or things your child has written. We have not built anywhere safe to put them, and a mailbox is not that place. If you send one anyway, we delete it within 30 days of dealing with your message.

You cannot yet. The prices on the home page are published so that you can decide before you are asked for anything, but there is no checkout, no payment form and no button that takes money. Nothing on this site can charge you today.

When checkout opens, payment will be handled by Paddle, which becomes the seller of record and will see what any payment processor sees. This page will name it in the same release as the button.

The course is for children aged 7 to 11, so almost every child using it is under 13. Today we hold nothing at all about any child, because there are no accounts and nothing to save into.

When accounts arrive, they will belong to a parent, not to a child. Nothing about a child will be collected until a parent has been verified and has ticked, separately:

• that their child’s work and words may be saved into the parent’s account;
• optional — that questions the child types may be sent to an outside model provider to be answered. Every activity can be completed without the AI, so declining this costs nothing;
• optional, and one piece at a time — that a particular piece of work may be shown on a public wall.

A gift does not change who consents. If someone buys the course for your family, they get a code — not an account. The parent who will actually be there opens the account and gives consent, and the person who paid is told nothing about the child afterwards.

Today: nothing, except correspondence. Email is kept for 24 months from the last message in a thread. Anything a child sent us by accident is deleted within 30 days.

When accounts and the portfolio arrive, this is the rule we intend to publish, and it is written down now so that the code has to match it:

• The portfolio lives as long as the account does. Delete the account and it goes with it. Ending a subscription deletes nothing — what your child has already made stays.
• Export and delete are buttons you can press at any time, not something we send you when a period runs out. What your child makes is yours to take away whenever you want it.
• A deletion request is completed within 30 days, and that includes our backups, which roll on a 35-day cycle.
• Your email address is kept while the account exists. Purchase records are kept for 5 years, because tax law requires it.
• A piece shown on the public wall comes down when the account is deleted, or whenever you ask. The wall is not a separate permanent display.

An account nobody uses does not keep a child’s work forever. If there is no subscription and nobody has signed in for twelve months, we email you, wait thirty days, and then delete it — and that email has a complete export attached, so the work reaches you before it leaves us. A live subscription is never dormant, whether or not anyone has signed in.

Twelve months is four whole seasons. If your child has missed all four, the reason we were keeping their work has run out — and we would rather say that plainly than hold a child’s photographs indefinitely because nobody asked us to stop.

Accounts, the portfolio, checkout, and the public wall. None of them exist today, and neither does the part of the course that answers questions — the reading voice is running, that one is not. It is described above because it is decided, not because it is running. Each one changes this page in the same release as the code, not afterwards.

The business is in Australia. The companies named above operate internationally, so information handled by them may be processed outside Australia. That is inherent in using them, and it is why the list is kept as short as it is.

Write to [email protected] to ask what we hold about you, to correct it, or to have it deleted. One person reads that address and will answer you.

If we handle it badly you can complain to the Office of the Australian Information Commissioner. If you are in the UK or the EU, your local data protection authority can take a complaint too.

The date at the top is the date the words last changed. When the site starts doing something new, this page changes in the same release as the code — not afterwards.