PRIVACY POLICY

1. WHAT WE COLLECT

From parents: Email address, name, password (hashed).

From children (via parent): First name, age, grade level, reading interests. No email, phone, photo, or location data is collected from children.

Usage data: Stories generated, reading time, words tapped for practice.

2. HOW WE USE DATA

To generate personalized stories calibrated to your child's reading level. To track reading progress and struggle words. To send account-related emails (welcome, password reset). We do not use children's data for advertising or sell any data to third parties.

3. COPPA COMPLIANCE

ReadHero is designed for use by parents on behalf of their children (ages 5-12). We require verifiable parental consent (parent creates the account). We collect minimal data from children. We do not condition participation on unnecessary data collection. Parents can review, delete, or refuse further collection at any time via the dashboard.

4. DATA STORAGE

Data is stored on Cloudflare's global infrastructure (D1 database, KV storage). Passwords are hashed using SHA-256. Session tokens expire after 30 days.

5. AI-GENERATED CONTENT

Stories are generated using Claude (Anthropic) for text and Gemini (Google) for illustrations. Your child's name and interests are sent to these services to generate content. No personal data is retained by these services beyond the generation request.

6. THIRD-PARTY SERVICES

Cloudflare (hosting), Anthropic (story text), Google AI (illustrations), Resend (email), Stripe (payments). Each service has its own privacy policy.

7. DATA DELETION

Delete a reader profile from the dashboard to remove all their stories, reading sessions, and struggle words. Delete your account by contacting support@readhero.com.

8. CONTACT

Privacy questions: support@readhero.com