Privacy Policy

CodeKlusters ("we," "us," or "our") operates the StoryTime mobile application ("App"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the App.

We are committed to protecting the privacy of all users, with particular care given to the privacy of children. By using the App, you agree to the practices described here.

This policy applies to parents and guardians who create and manage accounts, and to children whose profiles are created within the App by a parent or guardian.

We do not knowingly allow children to create their own top-level accounts without parental involvement.

Information you provide directly:

• Email address — account creation, login, and recovery
• Password (encrypted) — account authentication
• Child's name — personalising the child's profile
• Child's age — recommending appropriate content
• Child's gender — personalising the experience
• Child's reading level — matching stories to ability

Information generated through use:

• Reading history, activity progress, coins and diamonds earned, word bag contents, and level progression — for tracking and displaying learning progress

Payment information: We do not directly collect or store payment card details. All transactions are processed by Apple (iOS) or Google (Android). We receive only confirmation of transaction status and subscription state.

Technical information: We may collect basic technical data such as device type, OS version, and app version to maintain and improve the App.

• Create and manage your account and child profiles
• Deliver and personalise educational content
• Track learning progress across stories and activities
• Process and manage subscription status
• Send important account-related communications
• Improve the App's content, features, and performance
• Comply with our legal obligations

We take the privacy of children extremely seriously.

Parental control: All child profiles are created and managed by a parent or guardian.

Data minimisation: We collect only the minimum information necessary. We do not collect children's precise location, contacts, photos, or unnecessary personal data.

COPPA (USA): We comply with the Children's Online Privacy Protection Act. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

GDPR and UK GDPR: We process personal data about children on the legal basis of legitimate interests and parental consent. Parents have the right to access, correct, or delete their child's data at any time.

Saudi Arabia / PDPL: We comply with the Personal Data Protection Law (PDPL) of Saudi Arabia and applicable regional data protection requirements.

Your data is stored securely using Appwrite (a backend-as-a-service platform) and on-device using encrypted local storage. We implement appropriate technical and organisational measures to protect your personal information.

No method of internet transmission is 100% secure. Data may be stored on servers outside your country of residence — where this occurs, we ensure appropriate safeguards are in place.

We do not sell, rent, or trade your personal information. We may share only in limited circumstances:

• Service providers: Appwrite processes data on our behalf under contractual protections
• Payment processors: Apple and Google process payment information
• Legal requirements: Disclosure if required by law or court order
• Safety: Disclosure to protect the safety of any person or address fraud

We retain account and profile data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required by law.

Reading progress stored locally on your device is cleared when you uninstall the App.

Depending on your location, you may have the right to:

• Access — request a copy of the data we hold
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and data
• Restriction — request restricted processing
• Portability — request your data in a portable format
• Objection — object to certain types of data processing

Contact us at support@codeKlusters.com to exercise these rights. We respond within 30 days.

• Appwrite — backend, authentication, data storage
• Apple In-App Purchase — subscription billing (iOS)
• Google Play Billing — subscription billing (Android)
• Expo / React Native — app development framework

We encourage you to review each service's own privacy policies.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the App or via email. The "Last Updated" date at the top reflects the most recent revision.