Privacy Policy

Last updated: March 2026

This policy explains what information we collect, how we use it, and the choices available to parents and guardians.

1. Information We Collect

From the parent or guardian:

• Mobile phone number — used to create and sign in to your account via one-time password (OTP). We do not collect email addresses or passwords.

From child profiles (entered by the parent):

• Child's first name — used to personalise the reading experience.
• Child's age — used to assign an appropriate reading level.

Collected automatically during reading sessions:

• Audio recordings — when a child reads aloud, audio is captured by the device microphone and sent in real time to Microsoft Azure Cognitive Services for pronunciation evaluation. A copy of each page recording is also stored securely in our systems so parents can review their child's reading. See Sections 3 and 9 for details.
• Reading progress — which books and pages the child has read, accuracy scores, and session timestamps.
• Device information — device model, operating system version, and app version. This is collected solely for debugging errors and is not shared with third parties.

2. How We Use Information

• To provide the reading coach experience (pronunciation evaluation, progress tracking, reading level recommendations).
• To let parents view their child's reading progress.
• To diagnose and fix technical errors.

We do not use children's data for advertising, profiling, or marketing purposes. We do not sell or rent personal information to anyone.

3. Audio Processing & Microsoft Azure

Audio captured during reading sessions is sent to Microsoft Azure Cognitive Services (hosted in the Central India region) for real-time speech-to-text and pronunciation scoring. Microsoft processes this audio under their Cognitive Services data privacy policy. Audio is not retained by Microsoft after processing is complete.

A copy of each page recording is stored in Google Firebase Storage (encrypted in transit and at rest) and linked to the child's profile. These recordings allow parents to review their child's reading. Recordings are retained for as long as the child profile exists and are permanently deleted when the child profile or parent account is deleted (see Section 8).

4. Data Storage & Security

Account data, child profiles, and reading progress are stored in Google Firebase (Firestore), which provides encryption in transit and at rest. Access to data is restricted to the authenticated parent account.

5. Third-Party Services

We use the following third-party services:

• Google Firebase Authentication — phone OTP sign-in.
• Google Firebase Firestore, Cloud Functions & Cloud Storage — data storage (including audio recordings), server-side logic.
• Google Firebase Analytics (GA4) — anonymous usage analytics to improve the reading experience. We have disabled advertising ID collection and marked all analytics as child-directed. No advertising identifiers or interest-based profiles are created.
• Google Firebase Crashlytics — crash and error reporting to help us fix bugs. Crash reports include device model, OS version, and app version. They do not include names, phone numbers, or reading content.
• Microsoft Azure Cognitive Services — speech recognition and pronunciation scoring.

We do not use any advertising networks or social media SDKs. We do not share children's data with any other third parties for advertising or marketing purposes.

6. Children's Privacy (COPPA Compliance)

ZigZu is designed for use by children under 13 with parental involvement. We comply with the Children's Online Privacy Protection Act (COPPA):

• A parent or guardian must register using their phone number before a child can use the app.
• Child profiles are created by the parent, not by the child.
• We collect only the minimum information necessary to provide the reading experience.
• We do not collect location data, contact lists, photos, or device identifiers for advertising.
• Parents can review, modify, or delete their child's data at any time (see Section 8).

7. Parental Controls

Access to account settings and child profile management is protected by a parent gate (a maths question that young children cannot solve). Parents can:

• Add, edit, or remove child profiles.
• View reading progress for each child.
• Delete their account and all associated data.

8. Data Deletion

Parents can delete individual child profiles from within the app (Settings → Profile). To delete your entire account and all associated data, use the "Delete Account" option in Settings. You can also request data deletion by emailing us at info@anaplaylabs.com. We will process deletion requests within 30 days.

9. Data Retention

We retain account data, reading progress, and audio recordings for as long as the account is active. When a parent deletes a child profile or account, we permanently remove all associated data — including stored audio recordings — from our systems within 30 days.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify parents of material changes through the app. The "Last updated" date at the top reflects the most recent revision.

© 2026 ZigZu by ANA PlayLabs Global Private Limited