Privacy Policy

Adult account information

We store the signed-in adult’s verified email, optional name, service-message language, subscription state, and consent evidence. Clerk handles passwords and sign-in credentials; Stripe handles payment-card details.

Learner and practice information

A learner profile can include a first name or nickname, age, settings, practice languages, consent status, assigned sentences, accuracy and missed-word results, progress, achievements, and coarse Minecraft context such as biome category. We do not collect Minecraft login credentials, chat, GPS, contacts, or social profiles.

Microphone and speech processing

When a learner reads aloud, the mod captures audio in memory and sends it through MindCraft to Deepgram for transcription or speech playback. MindCraft does not write raw audio to its database or file storage. The derived transcript is used inside the scoring transaction and is not stored on new attempt records; scores, expected sentence, missed words, and a short-lived hashed anti-replay receipt can be stored. Every Deepgram child STT and TTS request sets mip_opt_out=true. xAI child audio is disabled unless a future endpoint passes a separate verified zero-data-retention launch gate.

Service providers

Convex stores application data and files; Vercel runs web requests; Gemini receives bounded learning facts for sentence generation and adult-authored support text for assistant replies; OpenAI may moderate or generate adult-requested skin content only when that held feature is enabled; Resend may deliver cataloged essential account messages when sending is enabled. Slack, our internal operations channel, receives an opaque ticket reference for support escalations, not the parent’s message text, and a sign-up notice that carries the new account’s email address so we can welcome and support new families. Historical provider or log copies can follow provider retention and may require manual follow-up.

Export, correction, deletion, and closure

Signed-in adults can create a portable JSON export, request correction, delete a learner, or request account closure from Account → Data and privacy. Learner deletion immediately blocks new learner writes, then revokes devices and continues in resumable batches. Account closure pauses when a subscription, refund, dispute, referral balance or payout, or paid skin transaction still needs resolution. Clerk identity deletion happens last.

Retention and backups

Learning and support data is kept while needed for the account and deleted through the lifecycle above. Speech receipt metadata is bounded to eight days. Compatibility telemetry is aggregate-only and bounded to 90 days. Export files expire within seven days. Consent evidence is pseudonymized instead of retaining a learner name. Minimized billing, refund, dispute, payout, fraud, and complaint-suppression records may remain for an approved legal or safety period. Managed backups and operator snapshots can temporarily contain deleted data; opaque deletion receipts are used after a restore, and production backup retention remains an owner launch-evidence gate.

Your choices

You can review, export, correct, delete, revoke consent, or refuse further learner collection. Some service features stop when required data or consent is removed. Contact the privacy address below if the in-product workflow does not cover your request.

Children and parental consent

The account holder must be an adult. A parent or guardian creates every learner profile, controls it, and can review, export, correct, or delete it at any time. Learners do not hold accounts. We collect a first name or nickname, an age, practice settings, and practice results for each learner. Reading audio is processed in memory and is not stored. We ask the parent to verify an email address and to accept this policy before the first learner profile is created, and again when this policy changes. We treat this as the parent's verifiable consent under the United States Children's Online Privacy Protection Act and as parental authorization for learners under the digital consent age in the European Union, the United Kingdom, and other countries. We do not show advertising to learners, do not sell learner information, and do not use it for profiling beyond adjusting reading difficulty.

Legal bases and controller (EU, EEA, UK, Switzerland)

For people in the European Union, the European Economic Area, the United Kingdom, and Switzerland: MindCraft Reader, contact privacy@mindcraftreader.com, is the controller of your personal data. We process the adult account, subscription, and support data to perform our contract with you; learner practice data and microphone audio on the basis of the parent's consent, which can be withdrawn at any time in Account → Data and privacy; security, abuse prevention, and product safety data on the basis of our legitimate interest in running a safe service for children; and billing records to meet legal obligations. Withdrawing consent stops future learner collection and does not affect processing that already happened.

International transfers

Our providers process data in the United States. Where the law of your country requires safeguards for that transfer, we rely on the European Commission's standard contractual clauses (and the United Kingdom addendum) in our provider agreements, and on the EU-US Data Privacy Framework where a provider is certified under it. You can ask us for a summary of the safeguards that apply to a provider.

Your rights in the EU, EEA, UK, and Switzerland

If you live in the European Union, the European Economic Area, the United Kingdom, or Switzerland, you have the right to access your personal data and your learners' data, to correct it, to have it erased, to restrict or object to processing, to receive it in a portable format, and to withdraw consent. Most of these are self-serve in Account → Data and privacy; export produces a portable JSON file, and deletion runs within the service and at our providers as described above. For anything else, email privacy@mindcraftreader.com and we respond within one month. You also have the right to lodge a complaint with your national data protection authority.

California privacy rights

If you live in California: in the last twelve months we collected identifiers (email, name, account and device identifiers), account and subscription information, learner profile and practice information as described above, and internet activity limited to what running the service requires. We collect it directly from you and from the mod on your device, use it only for the purposes in this policy, and disclose it only to the service providers listed above under written contracts. We do not sell personal information and we do not share it for cross-context behavioral advertising, including information about learners under 16, so we have no "Do Not Sell or Share" choice to offer. You have the right to know, delete, and correct your personal information, and we will not discriminate against you for exercising a right. Use Account → Data and privacy or email privacy@mindcraftreader.com; an authorized agent may act for you with written permission. We do not track people across other companies' sites, so browser Do Not Track and Global Privacy Control signals do not change what we do.

Other United States state rights

Residents of other United States states with privacy laws (for example Colorado, Connecticut, Texas, Utah, and Virginia) have similar rights to access, correct, delete, and export their data, and to opt out of sales, targeted advertising, and profiling. We do none of those three. Use the same request channel; if we decline a request you may appeal by replying to our decision.

Cookies

The website uses only the cookies that sign-in and payment need: Clerk sets a session cookie when you sign in, and Stripe sets cookies on its own checkout and portal pages. We set no advertising or analytics cookies and load no third-party trackers, so no cookie banner is required for our own cookies.

Provider policies

• Deepgram MIP and request opt-out
• xAI security and zero data retention
• Clerk privacy
• Stripe privacy
• Convex privacy