How we protect your family's data
Syllaboo ("we," "us," or "our") is a reading companion app for children ages 5 to 10, published under the Apple App Store Kids Category. This Privacy Policy explains how we collect, use, and protect information when you and your child use Syllaboo.
By creating an account, you agree to this Privacy Policy. If you do not agree, please do not use Syllaboo.
Syllaboo is operated by Syllaboo Inc., based in California, United States. If you have any questions, contact us at privacy@syllaboo.app.
Syllaboo is designed from the ground up to comply with the Children's Online Privacy Protection Act (COPPA) and Apple's Kids Category requirements.
When you create an account, we collect:
When you create a child profile, we collect:
No other personal information is collected about your child.
During reading sessions, we collect:
If you subscribe to Syllaboo Premium, purchase transactions are handled entirely by Apple through In-App Purchases. We receive a subscription status (active/inactive) and expiration date from our payment processor (RevenueCat). We never see or store your payment card details.
| Category | Collected? |
|---|---|
| Advertising identifiers (IDFA) | Never |
| Device fingerprints | Never |
| Location data | Never |
| Contacts or address book | Never |
| Photos or camera access | Never |
| Browsing or search history | Never |
| Third-party tracking data | Never |
| Audio recordings (stored) | Never |
| Data | Purpose |
|---|---|
| Parent email | Account management, password resets, weekly progress reports, important service updates |
| Child first name | Personalization within the app (greeting the child, reports to parents) |
| Reading session data | Tracking progress, calculating accuracy, generating parent reports, adapting difficulty level |
| Voice audio (real-time) | Real-time speech-to-text conversion to detect word pronunciation accuracy |
| Subscription status | Determining which features and stories are available |
We do not use any collected data for advertising, marketing to children, or sale to third parties.
We use a limited number of trusted third-party services to operate Syllaboo. Each is chosen for its privacy practices and necessity to the app's functionality.
| Service | Purpose | Data shared |
|---|---|---|
| Clerk | Parent authentication (sign in, sign up) | Parent email, encrypted password |
| Supabase | Database and data storage | Child profiles (first name, avatar), reading session data, parent account info |
| Deepgram | Real-time speech-to-text processing | Streaming audio (processed in real time, never stored by Deepgram or by us) |
| RevenueCat | In-App Purchase and subscription management | Anonymous subscription status (no payment details) |
| Apple (Sign in with Apple) | Parent authentication (optional sign-in method) | Name (if allowed by user), email (real or Apple private relay), unique user identifier |
| Apple (App Store) | Payment processing for subscriptions | Handled entirely by Apple — we never receive payment details |
All third-party service providers operate under signed data processing agreements (DPAs) that contractually require them to:
DPA status for each provider:
| Provider | DPA Status | Where to Access |
|---|---|---|
| Supabase | Signed | supabase.com/legal/dpa |
| Clerk | Signed | clerk.com/legal/dpa |
| Deepgram | Signed | deepgram.com/privacy |
| RevenueCat | Signed | revenuecat.com/dpa |
We do not use any advertising networks, behavioral analytics platforms, or social media SDKs. Specifically, we do not use Firebase, Google Analytics, Mixpanel, Amplitude, Facebook SDK, or any similar service.
We have configured all services to process and store data in the United States. Below is how each service handles data residency:
mip_opt_out setting, which ensures audio data is retained only for the duration necessary to process each request and is not stored for model improvementYou control how long we keep your child's reading history. In the Parent Hub settings, you can choose a retention period of 30 days, 90 days, 1 year, or indefinite. Data older than your chosen retention period is automatically deleted.
If you delete your account, all associated data (parent account, child profiles, reading history) is permanently deleted within 30 days.
Syllaboo requires microphone access to listen to your child read aloud. Here is exactly how we handle it:
Syllaboo may send push notifications to the parent's device only to share milestones and progress updates. Examples:
We never send push notifications to encourage or pressure children to return to the app. We never send guilt-inducing messages such as "You haven't read in 3 days!" Notifications can be disabled at any time in the app settings or your device settings.
Syllaboo does not display advertisements of any kind — no banner ads, interstitial ads, rewarded video ads, or native ads. This is a hard requirement of the Apple Kids Category and a core principle of our app.
We do not use any third-party analytics or tracking tools on child-facing screens. We do not collect, share, or sell advertising identifiers (IDFA), device fingerprints, or behavioral data for advertising purposes.
We do not sell, rent, or share your personal information or your child's data with any third party for marketing or advertising purposes.
As a parent or legal guardian, you have full control over your family's data:
View all of your child's reading history, session data, and profile information in the Parent Hub.
Download all data associated with your account and your children's profiles from the Parent Hub settings.
Delete individual children's reading session data, or delete your entire account and all associated data, from the Parent Hub settings. Deletion is permanent and cannot be undone.
You may revoke your consent at any time by deleting your account or contacting us at privacy@syllaboo.app. Upon revocation, we will delete all data associated with your account within 30 days.
Manage or disable push notifications at any time through the app settings.
Choose how long reading history is kept (30 days, 90 days, 1 year, or indefinitely) in the Parent Hub settings.
Syllaboo offers a free tier and an optional Premium subscription. All purchases are handled through Apple In-App Purchases.
Syllaboo contains minimal links to external websites (such as this privacy policy, our terms of service, and support contact). All external links are located behind a parental gate — a child cannot tap a link that leaves the app without an adult solving a verification challenge first.
We are not responsible for the privacy practices of external websites. We encourage you to review the privacy policies of any third-party sites you visit.
We do not sell or rent personal information. We may share limited data only in these circumstances:
We will never share data with advertisers, data brokers, or any party for marketing purposes.
In the unlikely event of a data breach that affects your personal information or your child's data, we will:
We maintain security monitoring and incident response procedures to detect and respond to potential breaches as quickly as possible.
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights regarding your personal information:
To exercise any of these rights, contact us at privacy@syllaboo.app. We will verify your identity before processing your request and respond within 45 days as required by law.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and/or through a prominent notice in the app before the changes take effect.
We will never reduce your rights or your child's protections without obtaining fresh consent. The "Effective" date at the top of this page indicates the most recent revision.
If you have questions about this Privacy Policy, your data, or your child's privacy, please contact us:
We aim to respond to all privacy-related inquiries within 48 hours.