Privacy Policy
Last updated: September 23, 2026
¡Ya Leo! is an AI-powered Spanish reading app designed primarily for children ages 3 and up, operated by Grow Forward MC LLC. This Privacy Policy explains what information we collect, how we use it, and how we protect your child's privacy. We are committed to complying with the Children's Online Privacy Protection Act (COPPA), Apple's App Store Guidelines for Kids, and applicable data protection laws.
COPPA Compliance
¡Ya Leo! is designed for children under 13. A parent or guardian must create an account and provide verifiable consent before any child data is collected. Children do not create their own accounts — all child profiles are created and managed by the parent. We do not collect more information from children than is reasonably necessary to provide the educational services described below.
Information We Collect
Parent/Guardian Information
- First and last name (collected at signup for account identification and communication)
- Email address (for account login and communication)
- Authentication credentials (password stored securely by our database provider, or Apple sign-in token)
- Parent's birth year (used as the lock for the parent area) and account settings such as app language and subscription status
Child Information (provided by parent)
- First name (used to personalize the reading experience)
- Age, grade level, and Spanish proficiency (used to select appropriate content difficulty and instruction language)
- Profile photo/avatar (optional, uploaded by parent)
- Reading preferences (speed, voice, display settings, daily goals, schedule)
- Reading activity data (books read, pages completed, time spent, comprehension quiz scores, fluency metrics such as words per minute and accuracy)
- Learning progress (phonics lesson completion, difficult words encountered, streaks, badges, star rewards, and virtual items earned with stars)
How We Use This Information
- To provide personalized Spanish reading lessons and book recommendations appropriate for the child's level
- To track reading progress, lesson completion, and comprehension so parents can monitor development
- To generate age-appropriate AI reading hints and conversational tutoring when the child needs help
- To provide text-to-speech narration of books and lessons
- To allow parents to view reading reports, fluency charts, and difficult words for their children
Third-Party Services
To provide our educational features, we share limited data with the following services. No third party receives your child's data for advertising or marketing purposes.
ElevenLabs
Receives book text and lesson words for text-to-speech audio generation. Does not receive any child-identifying information (no name, age, or ID).
Anthropic (Claude)
Receives book text, an age range (never the child's name or exact age), and the child's answers during reading hints and the post-reading chat with Leo. Spoken answers are converted to text on the device before being sent. Also used by administrators to write book text and comprehension questions. Used solely to generate educational guidance. Anthropic does not use this data to train their models.
OpenAI
Used by administrators only for generating book illustrations. Does not receive child data during normal app usage.
Google (Gemini)
Used by administrators as an alternative option for generating book illustrations. Does not receive child data during normal app usage.
Apple (iOS)
Provides Sign in with Apple (if you choose it) and processes App Store subscription payments. On iOS devices, Apple's native speech recognition (SFSpeechRecognizer) processes the child's voice on-device or through Apple's servers for read-aloud features. Subject to Apple's Privacy Policy.
Vercel
Our hosting and serverless functions provider. Processes API requests (text-to-speech, AI tutoring, book creation) on secure cloud servers. Does not store child data. Subject to Vercel's Privacy Policy.
Supabase
Our database and authentication provider. Stores all app data (accounts, child profiles, profile photos, reading sessions) on secure cloud servers. Subject to Supabase's Privacy Policy.
RevenueCat
Manages Premium subscriptions. Receives your account's ID number (not your name or email) and your App Store purchase and subscription status. Does not receive any child information. Subject to RevenueCat's Privacy Policy.
Google (Fonts)
The app loads its fonts from Google's font servers, which receive the device's IP address as part of the request. No personal or child information is sent. Subject to Google's Privacy Policy.
Voice & Speech Data
When your child uses the read-aloud feature, the app listens through the device microphone to match spoken words against the expected text. On web browsers, speech recognition is processed locally by the browser. On iOS, Apple's native speech recognition is used (on-device or via Apple's servers). In all cases, audio recordings are processed in real time and are never stored by our app or our servers.
Offline Usage
¡Ya Leo! can function offline for previously accessed content. When offline, all lesson content, reading progress, and speech recognition work locally on the device. No data is transmitted to any server while offline. Reading progress is saved locally and synced when connectivity is restored.
Local Device Storage
The app stores reading preferences, lesson progress, and cached book content on your device using standard browser storage (localStorage and IndexedDB). This data stays on the device and is not accessible to other apps or websites.
Data Retention
We retain child profile data and reading activity for as long as the parent account is active. When a parent deletes a child profile, all associated data (reading sessions, lesson progress, difficult words, streaks, and badges) is permanently deleted from our servers. Parents can delete their entire account and all associated data at any time from Settings in the app, or by contacting us.
Parental Rights
- Review all data collected about your child by viewing the Parent Dashboard and Reading Report within the app
- Delete any child profile and all associated data directly from the Parent Dashboard
- Request a complete copy of your child's data by emailing us
- Delete your entire account and all associated data from Settings in the app, or by emailing us
- Withdraw consent at any time by deleting child profiles or closing your account
Data Security
We protect your data using HTTPS encryption for all data in transit, secure authentication with hashed passwords, row-level security policies that ensure parents can only access their own family's data, and API keys stored securely on our servers (never exposed to the client app).
No Advertising or Tracking
¡Ya Leo! does not contain any advertising. We do not use third-party analytics, tracking pixels, or advertising SDKs. We do not sell, rent, or share personal information with any third party for marketing or advertising purposes. The app does not contain links to external websites accessible to children.
Subscriptions & Billing
If you subscribe to ¡Ya Leo! Premium, payment is charged to your Apple ID account at confirmation of purchase. Subscriptions automatically renew unless cancelled at least 24 hours before the end of the current billing period. You can manage or cancel your subscription at any time in your device's Settings > Apple ID > Subscriptions. If a free trial is offered, any unused portion of the trial is forfeited when you purchase a subscription.
AI-Generated Content
¡Ya Leo! uses artificial intelligence services to generate and enhance educational content, including book text and comprehension questions (Anthropic Claude), book illustrations (OpenAI and Google Gemini), text-to-speech narration (ElevenLabs), and conversational tutoring with Leo, our AI reading companion (Anthropic Claude). All AI-generated content is designed for age-appropriate educational use. While we take care to ensure quality and appropriateness, AI-generated content may occasionally contain imperfections or unexpected variations. Parents are encouraged to review content with their children.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes to how we handle children's data, we will notify you via email or a prominent notice within the app. The updated policy will include a new "Last Updated" date at the top.
Contact Us
If you have questions about this Privacy Policy, want to review or delete your child's data, or wish to exercise any of your parental rights, please contact us:
Grow Forward MC LLC
2950 Clay St #201, San Francisco, CA 94115
ya-leo@growfmc.com