Privacy Policy

Last updated: October 12, 2026

The short version: Catluvy Learns is a learning app for children. There are no ads, no tracking, and no third-party analytics. We never ask for a child's full name, email, photo, location or contacts. A child's profile is just a nickname, an emoji "buddy" and their learning progress.

This policy explains what the Catluvy Learns apps for iPhone and iPad and the website at catluvy.com (together, "Catluvy Learns", "we", "us") collect, why, and the choices you have. It is written for parents and guardians.

What we collect

Information	Why
An anonymous device ID, created automatically when the app first opens. It is not linked to your name, email or Apple ID.	To save progress and settings so they're there next time, and to recognize a subscription on this device.
Player profiles: a nickname you type (we suggest a first name or nickname only), an emoji buddy, and settings such as voice, theme and language.	To show "Hi, Mia!" and keep each child's settings.
Learning progress: XP, levels, streaks, badges, best scores, and which lessons were played.	To track progress, award badges and pick up where a child left off.
Word lists a parent creates (for example, this week's school spelling words).	So children can practice them.
Family or class groups a grown-up chooses to create or join.	To show a leaderboard. Group members see only each child's nickname, emoji buddy and XP.
Subscription status (whether this device has Catluvy Pro, and when it renews), linked to the anonymous device ID.	To unlock Catluvy Pro.

What we don't collect

No full names, email addresses, phone numbers, photos, voice recordings, location, or contacts.
No advertising, no ad identifiers, no cross-app tracking, and no third-party analytics.
We never sell or rent information, and we never share it for advertising.
The app does not use the microphone or camera. Words are read aloud using recordings that come with the app, or the device's built-in voice.

Payments

Subscriptions are purchased through Apple. We never see or store payment card details. To check whether a subscription is active, the app uses RevenueCat, a subscription service, which receives the anonymous device ID and Apple's purchase receipt (no name or email).

Who processes data for us

Google Firebase (Firestore database, anonymous sign-in, web hosting), which stores the information above.
RevenueCat, which manages subscription status.
Apple, which handles purchases, refunds and subscription management.

These providers process data only to run Catluvy Learns, under their own security and privacy commitments.

Children's privacy

Catluvy Learns is designed for children, and we follow the principles of the U.S. Children's Online Privacy Protection Act (COPPA): we collect only what the app needs to work, and nothing that identifies a child in real life. Purchases, joining or creating groups, editing word lists and deleting players are behind a grown-ups check. We do not knowingly collect personal information from children beyond the nickname and learning progress described above. If you believe a child has entered personal information (for example a full name as a nickname), contact us and we will delete it.

Keeping and deleting data

We keep profiles and progress while the app is in use, so children don't lose their work. You can delete a player at any time in the app (Settings → Delete, after the grown-ups check), which deletes that player's profile and progress and removes them from any groups. To delete everything for your device, or if you no longer have the app, email us and we will delete it within 30 days.

Word lists. To keep the app safe for children, we keep a copy of each saved version of a word list, and lists you delete in the app are hidden rather than erased. We may review lists and hide one that contains inappropriate words or personal information. These copies are only visible to us, are used only for safety review and record-keeping, and are never shared or sold. A parent's request to delete their data always includes these copies: email us and we will permanently delete them within 30 days.

Security

Data is sent over encrypted connections (HTTPS) and stored with Google Firebase. Access rules let each device read and write only its own players. Group leaderboards are visible only to people who have the group's join code.

Changes

If we change this policy, we will update the date above and, for significant changes, tell you in the app.

Contact

Questions or requests: phamtek.ai@gmail.com