1. Introduction
Word River is developed and operated by Fixie Labs ("we," "us," or "our"). Word River is a paid iOS application designed for parents and caregivers to track their child's speech and language development. The app allows you to create child profiles, log vocabulary milestones, and receive AI-powered insights to support your child's language growth.
This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data. We are committed to protecting your privacy and handling your data with transparency and care.
Important: Word River is intended for use by adults — specifically parents and caregivers. Children do not use the app directly. All data is entered and managed by the parent or caregiver.
2. Data We Collect
2.1 Account Information
When you create a Word River account, we collect:
- Email address — provided during email/password signup or shared through Apple Sign-In.
- Name — provided during signup or shared through Apple Sign-In.
- Authentication credentials — securely managed by our authentication provider (passwords are hashed and never stored in plain text).
2.2 Child Profile Data
When you create a child profile within the app, we collect:
- Child's first name — used to personalize the experience within the app.
- Child's date of birth — used to provide age-appropriate developmental context and milestones.
2.3 Word Tracking and Developmental Data
As you use the app, we store:
- Tracked words — words you log as part of your child's vocabulary.
- Consistency levels — your assessment of how consistently your child uses each word.
- Developmental notes — optional notes you add about your child's language development.
2.4 AI-Generated Data
When you use our AI-powered features, we generate and store:
- Weekly assessments — personalized summaries of your child's vocabulary progress.
- Word recommendations — suggested words based on your child's current vocabulary and developmental stage.
2.5 Device Diagnostics
We collect anonymous crash and performance data to maintain app stability:
- Crash reports — technical information about app errors (does not include personal data or child profile data).
- Device information — device type, operating system version, and app version (collected only in the context of crash reporting).
3. How We Use Your Data
We use the information we collect for the following purposes:
- App functionality — to provide core features such as word tracking, child profile management, and progress visualization.
- AI-powered insights — to generate personalized weekly assessments and vocabulary recommendations based on your child's tracked words and developmental stage.
- Crash analytics — to identify and fix bugs, improve app stability, and enhance the user experience.
- Account management — to authenticate your identity and secure your account.
We do not use your data for:
- Advertising or ad targeting.
- Selling or renting to third parties.
- User tracking or behavioral profiling.
- Any purpose unrelated to providing and improving Word River.
4. Third-Party Services
Word River uses the following third-party services to operate. Each service receives only the minimum data necessary to perform its function.
4.1 Supabase (Backend and Authentication)
- Purpose: Database hosting, user authentication (email/password and Apple Sign-In), and data storage.
- Data received: Account information, child profiles, tracked words, developmental notes, consistency levels, and AI-generated assessments.
- Location: United States.
- More information: Supabase Privacy Policy
4.2 Sentry (Crash Reporting)
- Purpose: Crash detection and error monitoring.
- Data received: Anonymous crash reports including device type, operating system version, app version, and technical error details. Sentry does not receive your name, email, child profile data, or any word tracking data.
- More information: Sentry Privacy Policy
4.3 AWS Bedrock (AI Processing)
- Purpose: Generating personalized weekly assessments and vocabulary recommendations using AI models.
- Data received: Your child's tracked vocabulary, consistency levels, developmental notes, age, and first name. This data is sent to AWS Bedrock for processing and is not retained by AWS after the response is generated.
- More information: AWS Privacy Policy
5. Data Storage and Security
5.1 Infrastructure
Your data is stored in a Supabase-hosted PostgreSQL database located in the United States. All data is encrypted in transit using TLS (Transport Layer Security).
5.2 Data Isolation
We use Row Level Security (RLS) policies at the database level to ensure that each user can only access their own data. This means your account data, child profiles, and tracked words are isolated from all other users by design.
5.3 Authentication Security
Passwords are securely hashed and managed by Supabase Auth. If you use Apple Sign-In, authentication is handled through Apple's secure identity framework. We never have access to your Apple ID password.
5.4 Our Commitment
While no system can guarantee absolute security, we take reasonable and appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction.
6. Data Retention and Deletion
6.1 Retention
We retain your data for as long as your account remains active. We do not impose time limits on data storage for active accounts, so your child's vocabulary history is preserved for as long as you find it useful.
6.2 Account Deletion
You can delete your account at any time from within the app. When you delete your account, all of the following data is permanently removed:
- Your account information (email, name).
- All child profiles.
- All tracked words, consistency levels, and developmental notes.
- All AI-generated assessments and recommendations.
Account deletion is irreversible. Once your data is deleted, it cannot be recovered.
6.3 Deletion Timeline
Account deletion is processed immediately upon request. Residual copies in encrypted backups may persist for a limited period consistent with our backup retention schedule, after which they are automatically purged.
7. Children's Privacy
Word River is listed in the Education category on the App Store. It is not listed in the Kids category and is not designed for use by children.
- Parents are the users. Word River is intended for adults — parents and caregivers who wish to track their child's speech and language development.
- Children do not use the app. The app is operated entirely by the parent or caregiver. Children do not interact with the app, create accounts, or enter any information.
- Parents enter data voluntarily. Any information about a child (first name, date of birth, vocabulary words) is entered by the parent at their discretion.
Because children are not users of the app and do not provide any information directly, Word River is not subject to the Children's Online Privacy Protection Act (COPPA). Nevertheless, we treat all child-related data entered by parents with the highest level of care and respect.
8. Your Rights
Regardless of where you are located, we believe you should have control over your data. You have the right to:
- Access your data — view all information stored in your account at any time through the app.
- Correct your data — edit your child's profile information, tracked words, and developmental notes directly within the app.
- Delete your data — delete your entire account and all associated data from within the app.
- Export your data — download your tracked word data as a CSV file for your personal records.
To exercise any of these rights, you can use the relevant features within the app or contact us at support@wordriver.app.
9. GDPR Compliance
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR).
9.1 Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract performance — processing necessary to provide the Word River service you have purchased (Article 6(1)(b)).
- Legitimate interests — processing necessary for crash reporting and app stability improvement, where such interests are not overridden by your rights (Article 6(1)(f)).
9.2 Your GDPR Rights
In addition to the rights listed in Section 8, you have the right to:
- Right to access (Article 15) — request a copy of the personal data we hold about you.
- Right to rectification (Article 16) — request correction of inaccurate personal data.
- Right to erasure (Article 17) — request deletion of your personal data (available via account deletion).
- Right to data portability (Article 20) — receive your data in a structured, commonly used, machine-readable format (available via CSV export).
- Right to restrict processing (Article 18) — request that we limit how we use your data in certain circumstances.
- Right to object (Article 21) — object to processing based on legitimate interests.
- Right to lodge a complaint — file a complaint with your local data protection supervisory authority.
To exercise any of these rights, please contact us at support@wordriver.app. We will respond to your request within 30 days.
9.3 International Data Transfers
Your data is stored in the United States. If you are located outside the United States, your data is transferred to the US for processing. We rely on standard contractual clauses and the data protection measures described in this policy to safeguard your data during such transfers.
10. California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information.
10.1 Your CCPA Rights
- Right to know — you may request that we disclose the categories and specific pieces of personal information we have collected about you.
- Right to delete — you may request deletion of your personal information (available via account deletion).
- Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights.
10.2 What We Do Not Do
- We do not sell your personal information to third parties.
- We do not share your personal information for cross-context behavioral advertising.
- We do not use or disclose sensitive personal information for purposes beyond providing the service.
10.3 How to Exercise Your Rights
You can exercise your CCPA rights by deleting your account within the app or by contacting us at support@wordriver.app. We will verify your identity before processing any request.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes:
- We will update the "Last Updated" date at the top of this policy.
- For significant changes, we will notify you through the app or via email.
- Continued use of Word River after changes take effect constitutes your acceptance of the updated policy.
We encourage you to review this policy periodically.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Fixie Labs
Email: support@wordriver.app
We aim to respond to all inquiries within 30 days.