Privacy Policy

WordSprout ("the app", "we", "us") helps a parent or guardian track a child's early vocabulary across one or more languages. An account is required to set up WordSprout. Your selected family’s journal syncs automatically with our cloud service. After setup, your saved journal remains available offline while you stay signed in; permitted changes sync when a connection is available. Sharing with other family members is optional. There is no switch to disable cloud sync.

Data Controller and Contact

The data controller for personal data processed through WordSprout is Kenneth Fernandez Prada, the developer that publishes WordSprout on Google Play and the Apple App Store.

• Privacy contact: korion2525+wordsprout@gmail.com
• Support: korion2525+wordsprout@gmail.com

What Data We Collect

When you use WordSprout, we process the following data as applicable to the features you use:

• Account information: the parent/guardian email address (used for sign-in and account identification).
• Child profile information: the child's profile name or nickname and birthdate, if provided (birthdate is used only to calculate developmental age / milestone ranges).
• Vocabulary content: words you enter, including each word's language, category, and the date added, associated with a child profile.
• Family and membership records: which accounts belong to a shared family, and each member's role.
• Purchase information: purchase status for a one-time upgrade or an existing subscription (processed by RevenueCat — see below). Our backend stores the verified access tier, product identifier, and purchase-event identifiers needed to keep family access in sync.
• Device identifiers: a push-notification registration token (Firebase Cloud Messaging) and a crash-reporting installation identifier (Crashlytics).
• Crash and diagnostic data: stack traces, error reports, device model, and OS version when the app crashes or hits a non-fatal error (Firebase Crashlytics).

How Data Is Stored

• Locally: all data you enter is stored on your device in a local database (encrypted on-device with SQLCipher on Android; protected by the operating system's file encryption on iOS). The saved journal is available offline after setup while you remain signed in.
• Cloud sync: your account email, child profiles, vocabulary content, and family records are stored in Google Firebase (Firestore) so they can sync across a family's devices. Data is encrypted in transit (TLS) and encrypted at rest by Google. Access is restricted by Firebase Authentication, Firestore security rules, and Firebase App Check attestation.

Third-Party Services and SDKs

• Firebase Authentication (Google): authenticates your account using your email address and sign-in tokens. No child data is sent to Auth.
• Cloud Firestore (Google): stores synced child profiles (first name, birthdate), vocabulary content, and family records as part of automatic family sync. Covered by Google's data processing terms.
• Cloud Functions for Firebase (Google): runs server-side sync, family-management, and purchase-verification logic.
• Firebase Crashlytics (Google): collects crash reports and diagnostic data — stack traces, non-fatal errors, device model, OS version, and a Crashlytics installation identifier (a device identifier) — so we can fix stability problems. Crashlytics deletes crash records after approximately 90 days.
• Firebase Cloud Messaging (Google): delivers push notifications about family activity. It processes a per-install device registration (push) token.
• Firebase App Check (Google): verifies that requests come from a genuine, unmodified app instance, using Play Integrity (Android) or DeviceCheck (Apple). It does not create a user-resettable advertising identifier.
• RevenueCat (RevenueCat, Inc.): manages one-time purchases, existing subscriptions, and premium access. If you start or restore a purchase, RevenueCat receives your purchase/subscription events and status, store receipts, and a pseudonymous RevenueCat App User ID (not your email). RevenueCat sends purchase-status events to our Firebase backend so we can verify and update family access, including after refunds. The relevant app store (Google Play or Apple) processes the payment as merchant of record; the app never receives your card details.
• Google ML Kit — On-Device Translation (Google): suggests translations of the words you enter. Translation runs entirely on your device. ML Kit downloads language models from Google once per language; the words you enter are not sent to Google.

Legal Bases for Processing (GDPR / UK GDPR)

• Performance of a contract: creating and operating your account, and syncing your child profiles and vocabulary content across your family's devices.
• Legitimate interests: crash and diagnostic reporting to keep the app stable, and app-integrity/security checks (Firebase App Check). You can object to processing based on legitimate interests.
• Consent: where consent is required — for example allowing push notifications. You can withdraw notification permission in your device settings.
• Compliance with a legal obligation: retaining limited transaction records for tax and accounting purposes.

International Data Transfers

Firebase and RevenueCat process data on cloud infrastructure located in the United States. If you use the app from outside the United States, your data will be transferred to and stored in the US. These transfers are covered by the service providers' data processing terms and Standard Contractual Clauses (SCCs) or equivalent safeguards — see Google's data processing terms and RevenueCat's data processing addendum.

Data Retention

• Active-account data (account email, child profiles, vocabulary content, family records) is retained until you delete it or delete your account.
• Backups: residual copies in encrypted backups are purged within 30 days of deletion.
• Crash and diagnostic data: retained by Firebase Crashlytics for approximately 90 days, then automatically deleted.
• Subscription records: RevenueCat and the app stores may retain limited transaction records after account deletion where required for tax, accounting, and fraud-prevention purposes.
• Local data stays on your device until you delete it in the app or uninstall the app.

Your Rights

Subject to your local law, you have the right to access, rectify, erase, and port your data (the app provides CSV export and PDF snapshots), to restrict or object to processing, to withdraw consent at any time, and to lodge a complaint with your data protection authority (in the EU, your national supervisory authority; in the UK, the Information Commissioner's Office).

To exercise any of these rights, email korion2525+wordsprout@gmail.com. We may need to verify that the request comes from the email address on the account.

California Privacy Rights (CCPA/CPRA)

We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, and we have not done so in the preceding 12 months. California residents have the right to know what personal information we collect and how it is used, the right to delete personal information, and the right to opt out of sale/sharing (not applicable here, as we do neither). We will not discriminate against you for exercising these rights. Submit requests to korion2525+wordsprout@gmail.com.

Data Deletion

You have several ways to delete your data:

1. Delete All My Data (in the app: Settings → Delete All My Data) — permanently wipes your synced vocabulary content and child profiles from your device and from cloud storage, while keeping your account so you can start again.
2. Delete Account (in the app: Settings → Delete Account → confirm) — permanently deletes your account, your profile, all child profiles, all vocabulary content, and — if you are the only member of your family — the family itself. If your family has other members, their shared data is preserved and you are removed from the family. This action cannot be undone.
3. Web request — if you cannot use the app, follow the instructions at wordsprout.xyz/delete-account and email us from the email address on your account with the subject "Account deletion request".
4. Email — contact korion2525+wordsprout@gmail.com from your account email address.

Data is removed from live systems immediately (or as soon as we verify an emailed request) and purged from encrypted backups within 30 days. Crash logs age out of Crashlytics within approximately 90 days.

COPPA — Children's Privacy

WordSprout is designed for parents and guardians to track their children's vocabulary development. The app is not directed at children and is not intended to be used by children under 13. Only a parent or legal guardian should create an account and enter data.

We do not knowingly collect personal information directly from children. All data is entered and managed by the parent/guardian.

Parental Consent

By creating an account and entering data into WordSprout, the parent or legal guardian provides verifiable parental consent for the limited child profile data stored (first name and birthdate only). No child-identifying information is collected beyond what the parent voluntarily provides.

Data Collected About Children

• First name — used as a display label within the family.
• Birthdate — used solely to calculate developmental age milestones.
• Vocabulary words — entered by the parent, associated with the child's profile.

Third-Party Services and Children's Data

• Cloud Firestore (Google): stores child profile data (name, birthdate) and vocabulary entries as part of automatic family sync.
• Firebase Authentication (Google): authenticates the parent's account only; no child data is passed to Auth.
• Firebase Crashlytics / Cloud Messaging / App Check (Google): process the parent installation's diagnostic data and device identifiers, not child profile content.
• RevenueCat: receives purchase/subscription data and a pseudonymous ID for the parent's account only; no child profile or vocabulary data.
• Google ML Kit (on-device): translation runs on-device; nothing is transmitted.

No child data is sold, and no child data is used for advertising or tracking.

Deleting a Child's Data

A parent can delete an individual child, individual words, all synced data (Settings → Delete All My Data), or the entire account (Settings → Delete Account) at any time. See Data Deletion above.

Changes to This Policy

We will update this policy as the app changes and revise the "Last updated" date above. Material changes will be highlighted in the app or on the WordSprout website.

Contact

For questions, concerns, or data requests:

• Privacy: korion2525+wordsprout@gmail.com
• Support: korion2525+wordsprout@gmail.com