Who operates the service
Openverse operates Fluency Lens. Questions may be sent to [email protected].
Website data
The website works without analytics. If privacy-safe analytics is enabled, we may send the page path, content group, a button placement, a destination category, and a temporary in-memory session identifier to PostHog in the United States. We configure person profiles off and do not enable replay, heatmaps, or autocapture.
Our site code does not send query strings, referrers, form contents, email addresses, passage text, child information, or free-form messages to analytics. Network providers may process standard connection data such as an IP address to deliver a request and protect their systems.
App data stored on the device
The manual-first app stores child nicknames, grade starting context, reading sessions, passage identifiers, word marks, WCPM, accuracy, and settings locally on the device. This reading content is not sent to our analytics providers. The app does not require a legal name, exact birth date, school, teacher, diagnosis, photo, or account.
The first release does not use the microphone or speech recognition. If optional recording or speech support is added later, it will require separate parent permission and this policy will be updated before collection begins.
App analytics
Release builds use PostHog for limited product analytics. PostHog may receive a randomly generated identifier scoped to the app installation, session information, app version and build, device model and type, operating system, locale, time zone, network state, and allowlisted product events such as app open, onboarding completion, starting or saving a reading check, viewing the paywall, purchase state, restore state, entitlement state, and local-data deletion.
We configure person profiles off and do not identify a person or account. We disable location enrichment, session replay, screen capture, element autocapture, surveys, push-event capture, and advertising tracking. Analytics events do not include child names, grade, passage text, word marks, scores, dates, file paths, or support messages.
Purchases
Apple processes App Store payments. RevenueCat may receive an anonymous app user identifier, product identifier, entitlement status, transaction state, and related purchase records needed to provide and restore subscription access. We do not receive full payment card details.
Children
The product is directed to the parent or guardian as operator. A child may read a passage beside the parent, but the child does not create an account, make a purchase, or enter contact information. Parents should use a nickname and avoid entering identifying information in any support message.
Sharing and sale
We do not sell personal information and do not use it for targeted advertising. We share limited data only with service providers needed to host the website, deliver support email, process purchases, or provide analytics under the limits described here, or when legally required.
Retention and deletion
Local app records remain on the device until the parent uses Delete all app data or removes the app, subject to the device's backup and deletion behavior. Delete all app data also resets the app's analytics identifier. Website analytics uses temporary identifiers. App analytics is retained according to our provider settings and may be aggregated for product analysis. Support email remains in our email system as needed to answer the request, maintain safety, and meet legal obligations.
Deleting app data does not cancel an Apple subscription. Subscription management remains available in Apple account settings.
Security
We use reasonable administrative and technical safeguards, minimize the data collected, and restrict website security policies. No system can guarantee absolute security.
Your choices
Parents can delete all local app data from Settings and manage subscriptions through Apple. For access or privacy questions about information held by us or our service providers, contact [email protected].
Changes
We will post material changes here and update the effective date. We will revise this policy before adding cloud accounts, advertising, required audio, or materially broader data collection.