Privacy Policy

👋 Introduction

MindCraft ("we," "our," or "us") is committed to protecting the privacy of children and their families. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our reading education service, including our website, Minecraft mod, and related services (collectively, the "Service").

We comply with the Children's Online Privacy Protection Act (COPPA) and other applicable privacy laws. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

📊 Information We Collect

Information You Provide

• Parent/Guardian Account: Email address, name, password (encrypted), payment information (processed securely by Stripe)
• Child Profile: First name (or nickname), age, reading level preferences
• Voice Recordings: Audio of your child reading sentences aloud, processed for speech-to-text transcription

Information Collected Automatically

• Reading Progress: Sentences read, accuracy scores, words mastered, difficulty level progression
• Game Context: Minecraft biome, time of day, and nearby elements (used to generate contextual sentences)
• Session Data: Reading session timestamps, duration, and frequency
• Device Information: Operating system, Minecraft version (for technical support)

Information We Do NOT Collect

• Minecraft account credentials or login information
• Chat messages or social interactions within Minecraft
• Location data or GPS coordinates
• Photos, videos, or images of children
• Contact lists or social media profiles

🎯 How We Use Information

• Provide the Service: Generate age-appropriate reading sentences, validate reading attempts, track progress
• Personalize Learning: Adapt difficulty based on performance, focus on struggling words
• Parent Dashboard: Show reading statistics, progress reports, and achievements to parents
• Improve the Service: Analyze aggregate, anonymized data to improve our educational algorithms
• Customer Support: Respond to questions and troubleshoot issues
• Billing: Process subscription payments (handled by Stripe)

🔒 How We Protect Information

• Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
• Secure Authentication: Passwords are hashed and never stored in plain text
• Limited Access: Only authorized personnel can access personal data
• Voice Recording Processing: Audio is processed immediately for transcription and is not permanently stored
• Regular Security Audits: We regularly review and update our security practices

🤝 Third-Party Services

We use the following third-party services to operate MindCraft:

• Deepgram: Speech-to-text transcription of reading attempts. Audio is processed and immediately discarded. Deepgram Privacy Policy
• Google (Gemini AI): Generates educational reading sentences. No personal information is shared; only game context. Google Privacy Policy
• Clerk: Secure authentication for parent accounts. Clerk Privacy Policy
• Stripe: Payment processing. We never see or store your full credit card number. Stripe Privacy Policy
• Convex: Database hosting with encryption at rest. Convex Privacy Policy
• Vercel: Web hosting with enterprise security. Vercel Privacy Policy

👨‍👩‍👧 Parental Rights (COPPA)

As a parent or legal guardian, you have the following rights regarding your child's information:

• Review: Request to review all personal information we have collected about your child
• Delete: Request deletion of your child's personal information at any time
• Revoke Consent: Withdraw consent and stop further collection of your child's data
• Refuse Further Collection: Request that we stop collecting data while still allowing use of the service (with limited features)
• Export: Request a copy of your child's data in a portable format

To exercise any of these rights, please contact us at privacy@readingtutor.app or use the "Delete Child Data" option in your parent dashboard.

📅 Data Retention

• Voice Recordings: Processed immediately and not permanently stored
• Reading Progress: Retained while your account is active; deleted within 30 days of account deletion
• Account Information: Retained while subscription is active; deleted within 30 days of cancellation upon request
• Anonymized Analytics: May be retained indefinitely for service improvement (contains no personal information)

🚫 What We Never Do

• Sell personal information to third parties
• Use children's data for advertising or marketing
• Share data with third parties for their own marketing purposes
• Create advertising profiles based on children's behavior
• Contact children directly without parental involvement

🌍 International Users

MindCraft is operated from the United States. If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our Service, you consent to this transfer.

For users in the European Economic Area (EEA) or United Kingdom, we process data in accordance with GDPR requirements and rely on consent as our legal basis for processing children's data.

📝 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes affecting how we handle children's data, we will request new parental consent.

📧 Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: