This Privacy Policy explains how The Read Lab LLC ("we," "us," or "our") collects, uses, and protects information when teachers and students use Word Explorer ("the Application"). By using the Application, you agree to the practices described in this policy.

2.1 Student Data

Word Explorer collects and stores the following student information to provide educational services:

• Student first name or nickname (entered by the teacher)
• Selected avatar emoji
• Word assessment results (correct/incorrect responses per tier)
• Practice progress and mastery counts
• Current tier level

This data is stored in Supabase, a secure cloud database. We do not collect last names, birthdates, addresses, photos, or any other personally identifying information beyond a first name.

2.2 Teacher Data

Teachers create a numeric PIN stored locally on their device to protect the Teacher Dashboard. This PIN is not transmitted to our servers.

2.3 Technical Data

Standard server logs (IP address, browser type, timestamp) may be collected by Netlify, our hosting provider. We do not use this data to identify individual users.

We use the information collected solely to:

• Display student progress and assessment results within the application
• Allow teachers to track and manage student reading tiers
• Provide a personalized practice experience for each student

We do not use student data for advertising, marketing, analytics, or any purpose unrelated to providing the educational service.

Word Explorer is intended for use with children under 13 under the supervision of a teacher or school. We comply with the Children's Online Privacy Protection Act (COPPA) as follows:

• Student accounts are created by teachers, not by children directly
• We collect only the minimum data necessary to provide the educational service
• We do not share student data with third parties for commercial purposes
• Schools and teachers provide consent on behalf of students under the school official exception
• Parents may request deletion of their child's data at any time (see Section 6)

We do not sell, rent, trade, or share student data with any third party except as required to provide the service:

• Supabase — our secure cloud database provider stores student progress data. Supabase is SOC 2 Type 2 certified. See Supabase Privacy Policy.
• Netlify — our hosting provider. See Netlify Privacy Policy.
• Google Fonts — fonts are loaded from Google's servers. See Google Privacy Policy.

Word Explorer does not use advertising networks, analytics platforms, social media plugins, or any other third-party tracking services.

Parents and guardians have the right to:

• Review — request to see any personal information collected about their child
• Delete — request deletion of their child's data from our systems
• Refuse — direct us to stop collecting their child's information
• Correct — request correction of inaccurate information

To exercise these rights, contact us at privacy@thereadlab.com. We will respond within 30 days.

Teachers can also delete individual student records directly from the Teacher Dashboard at any time.

To the extent Word Explorer is used in a school setting, it is designed to support compliance with the Family Educational Rights and Privacy Act (FERPA). Student data is accessible only to the teacher who created the records and to The Read Lab LLC for the purpose of providing the service.

Schools or districts requiring a Data Processing Agreement (DPA) prior to deployment may contact us at privacy@thereadlab.com.

Student data is retained as long as the teacher keeps the student record active. Teachers can delete student records at any time from the Teacher Dashboard. Upon request, we will delete all data associated with a student within 30 days.

We protect student data using:

• HTTPS encryption for all data in transit
• Supabase Row Level Security policies
• No storage of sensitive personal identifiers (no last names, no passwords, no financial data)

We recommend teachers use only first names or nicknames for students and use the Teacher PIN to restrict dashboard access on shared devices.

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this document. For material changes affecting children's data, we will make reasonable efforts to notify teachers and schools.