Privacy Policy

📋 Summary

What we do collect is anonymous and used only to make the app work better for families like yours. Here's the short version:

• We generate an anonymous device ID — not linked to you in any way
• We process speech audio during Knowledge Check quizzes to score attempts — audio is not stored
• Your child's avatar is chosen from presets — no photo is ever uploaded
• We never sell your data or share it with advertisers
• We never collect names, emails, accounts, or personal identifiers

🗂️ What We Collect

Anonymous Device ID

When you first open XpressUP, the app generates a random identifier for your device. This is not Apple's device ID — it is a random code we create ourselves. It is used only to keep track of your child's progress within the app. It is not linked to your name, Apple ID, email, or any other personal information.

Speech Audio

During Knowledge Check quizzes, XpressUP records a short audio clip from your device's microphone and sends it to OpenAI's Whisper service to score a spoken attempt. The audio is processed in real time and is not stored by XpressUP or retained by our servers after scoring is complete.

Learning Progress

Which symbols and languages your child has practiced, and how they've performed on Knowledge Check quizzes, is saved under your anonymous device ID. This allows the app to track progress and helps us understand which symbols and categories are working well.

Avatar Selection

When you set up a profile, you choose a preset avatar from a range of ages and styles. No photo is ever uploaded, requested, or stored — the avatar is simply a preset image chosen from within the app.

Child Profile Information

If you create a profile for your child (a display name and preferred languages), this information is stored locally on your device using encrypted storage. It is never transmitted to our servers and never shared with anyone.

🚫 What We Do NOT Collect

• Names, email addresses, or phone numbers
• Apple ID or any account information
• Location data or GPS coordinates
• Photos or camera access
• Contacts or calendar data
• Health or medical records
• Payment or financial information
• Browsing history or cross-app tracking data

⚙️ How We Use Your Data

The anonymous data we collect is used for three purposes only:

• To make the app work — playing words aloud and scoring quiz attempts in real time
• To show your child's learning progress inside the app
• To improve the symbol library and translations over time using anonymized usage patterns

🔗 Third-Party Services

XpressUP uses the following third-party services to function:

OpenAI Whisper — processes short audio recordings during Knowledge Check quizzes for speech scoring. Audio is sent to OpenAI's servers and processed in real time. OpenAI's privacy policy applies to this processing. Audio is not retained by XpressUP after scoring.

Anthropic Claude — assists with generating and reviewing translated content within the app. Anthropic's privacy policy applies. No personal information is included in these requests.

Railway — hosts our backend server that connects XpressUP to OpenAI and Anthropic. Audio and text pass through Railway's servers in transit but are not stored there.

👶 Children's Privacy

XpressUP is designed for young children, used with the guidance of a parent, caregiver, or educator. We take children's privacy extremely seriously.

Child profile information (a display name and preferred languages) entered by a caregiver is stored only on the device and never transmitted to our servers. Speech audio from quizzes is processed in real time and is not retained.

If you believe we have inadvertently collected personal information about a child, please contact us immediately at malliksanjibk@gmail.com and we will delete it promptly.

🗄️ Data Retention and Deletion

Learning progress saved under your anonymous device ID is retained to help track progress and improve the app over time. Because data is stored anonymously under a random device ID, it is not possible for us to identify which records belong to any specific person.

If you would like your device's data deleted, please contact us at malliksanjibk@gmail.com with your anonymous device ID (visible in the app's settings) and we will remove all associated records.

Child profile data stored on your device can be deleted at any time by uninstalling the app.

🔒 Security

All data transmitted between XpressUP and our backend servers is encrypted using HTTPS. Child profile data stored on your device uses iOS encrypted storage.

We do not store API keys, authentication tokens, or sensitive credentials on your device. All API calls are proxied through our backend server so your device never directly contacts OpenAI or Anthropic with credentials.

⚖️ Your Rights

Depending on where you live, you may have rights regarding your personal data including the right to access, correct, or delete data we hold about you. Because we collect only anonymous data, most of these rights apply in a limited way — but we are committed to honoring any reasonable request.

To exercise any rights or ask questions about your data, contact us at malliksanjibk@gmail.com.

📝 Changes to This Policy

We may update this privacy policy from time to time as the app evolves. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of XpressUP after changes are posted constitutes your acceptance of the updated policy.