Privacy Policy

Noora First Words

Last Updated: February 11, 2026

Noora First Words ("the App," "we," "us," or "our") is a vocabulary and speech learning application designed for young children. We are committed to protecting the privacy of our users, especially children. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

This App is intended to be used by children under the supervision of a parent or legal guardian. Accounts are created by parents or guardians — not by children.

1. INFORMATION WE COLLECT

1.1 Account Information (from the parent/guardian)

  • Email address
  • Password (stored in hashed form; we never have access to your plaintext password)

1.2 Usage and Progress Data

  • Records of which word challenges have been completed
  • Timestamps of completed challenges
  • This data is associated with your account to display your progress

1.3 Locally Stored Data (on your device only)

  • Cached audio files (pre-generated text-to-speech)
  • Cached video files and thumbnail images
  • Authentication session tokens
  • App preferences and settings (e.g., theme mode, voice detection sensitivity)

2. INFORMATION WE DO NOT COLLECT

  • Voice recordings or audio data: All audio captured by the microphone is processed entirely on-device for voice activity detection. Audio is NEVER transmitted to our servers, and temporary recordings are deleted immediately after on-device analysis.
  • Children's personal information: We do not collect names, photos, physical addresses, phone numbers, or any other personal information from children.
  • Location data
  • Device identifiers or advertising IDs
  • Contacts, photos, or other device data

3. HOW WE USE YOUR INFORMATION

We use the information we collect to:

  • Authenticate your account and maintain your session
  • Track and display your child's word challenge progress
  • Deliver educational content (videos, audio, images) through the App
  • Improve the App's functionality and user experience

We do NOT use your information for:

  • Advertising or marketing to children
  • Selling or renting to third parties
  • Profiling, behavioral targeting, or analytics directed at children

4. HOW WE STORE AND PROTECT YOUR INFORMATION

  • Account data and progress records are stored securely using Supabase, a cloud database platform with encryption at rest and in transit.
  • Passwords are cryptographically hashed and are never stored in plaintext.
  • Authentication tokens are stored locally on your device using secure asynchronous storage and are refreshed automatically.
  • We implement industry-standard security measures to protect against unauthorized access, alteration, disclosure, or destruction of data.

5. THIRD-PARTY SERVICES

The App uses the following third-party services:

a. Supabase (https://supabase.com)

  • Purpose: User authentication, database storage, and content delivery
  • Data shared: Email address, hashed password, progress records
  • Supabase Privacy Policy: https://supabase.com/privacy

b. Expo / EAS (https://expo.dev)

  • Purpose: App updates and distribution
  • Data shared: Minimal technical metadata for delivering over-the-air updates
  • Expo Privacy Policy: https://expo.dev/privacy

We do not share your personal information with any other third parties.

6. CHILDREN'S PRIVACY (COPPA COMPLIANCE)

We take children's privacy very seriously. Noora First Words is designed with a privacy-first architecture:

  1. The App is intended to be set up and managed by a parent or legal guardian. Only parents/guardians create accounts.
  2. We do not knowingly collect personal information directly from children under the age of 13 (or the applicable age in your jurisdiction).
  3. All audio/voice processing occurs entirely on the user's device. Children's voices are NEVER recorded, transmitted, or stored on our servers.
  4. Progress data (which word challenges were completed) is associated with the parent's account, not with a child's identity.
  5. The App does not contain advertising, in-app purchases, social features, or links to external websites accessible to children.
  6. If you believe we have inadvertently collected personal information from a child, please contact us immediately and we will promptly delete it.

7. DATA RETENTION

  • Account and progress data are retained for as long as your account is active.
  • You may request deletion of your account and all associated data at any time by contacting us (see Section 11).
  • Locally cached data (audio, video, thumbnails) can be cleared from within the App's account settings, or by uninstalling the App.
  • Temporary audio recordings created during speech challenges are deleted immediately after on-device processing — typically within milliseconds.

8. YOUR RIGHTS

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Request deletion of your data
  • Object to or restrict certain processing of your data
  • Data portability (receive your data in a structured format)

To exercise any of these rights, please contact us using the information in Section 11.

9. INTERNATIONAL USERS

If you access the App from outside the United States, your information may be transferred to and processed in the United States where our servers are located. By using the App, you consent to this transfer. We take appropriate measures to ensure your data is treated securely and in accordance with this Privacy Policy.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this policy. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

11. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: tbru [at] stanford [dot] edu
Website: https://heynoora.com