Privacy Policy

Last updated: 30 April 2026

Cueword ("we", "us", "our") is a product of Cue Learn Private Limited. This Privacy Policy explains how we collect, use, store, and protect information when you use the Cueword mobile application and related services (collectively, the "Service").

Cueword is designed for children in grades 3 through 10 (approximately ages 8-16). We take the privacy of children seriously and comply with applicable laws including the Children's Online Privacy Protection Act (COPPA), the General Data Protection Regulation (GDPR), and India's Digital Personal Data Protection Act (DPDPA).

1. Parental Consent

A child cannot create a Cueword account independently. Account creation requires a parent or guardian email address. By creating an account on behalf of your child, you consent to the collection and use of your child's information as described in this policy.

Parents and guardians may at any time:

Review the personal information we have collected about their child
Request deletion of their child's account and all associated data
Withdraw consent for further data collection

To exercise any of these rights, contact us at jeetesh.gulani@cuemath.com.

2. Information We Collect

2.1 Account Information

When a parent creates an account, we collect:

Parent/guardian email address
Child's first name
Child's age
Child's grade level (3-10)

2.1a Profile Photo (optional)

Parents may optionally upload a profile picture from the device's photo library to personalize the child's account. The image is stored in our backend (Supabase Storage) and is visible only within the child's own account. Profile photos can be removed at any time from Profile → tap photo → reset.

2.2 Learning Activity Data

As the child uses Cueword, we collect data generated during learning sessions:

Written responses — text the child writes during Writing activities
Voice recordings — audio recorded during Speaking activities (used for transcription and evaluation, then processed; raw audio is not permanently stored unless the parent opts in to progress tracking)
Quiz answers — responses to Vocabulary, Reading, and Listening questions
Scores and progress — activity results, XP earned, streak data, skill level progression
Session metadata — timestamps, session duration, activity completion status

2.3 Device and Technical Data

We automatically collect limited technical information for app stability and crash reporting:

Device type, operating system, and version
App version and build number
Crash logs and error reports
General locale/region (not precise location)

We do not collect precise geolocation, contacts, photos or media (other than a profile picture the parent explicitly chooses to upload), or browsing history.

3. How We Use Information

Purpose	Data Used
Provide personalised learning sessions	Name, grade, skill levels, activity history
Evaluate Speaking responses	Voice recordings (transcribed via OpenAI Whisper API, evaluated via OpenAI GPT)
Evaluate Writing responses	Written text (evaluated via OpenAI GPT)
Track progress and streaks	Scores, XP, session history
Display leaderboards	Name, XP (visible to other Cueword users)
Monitor app stability	Device info, crash logs (via Sentry)
Communicate with parents	Parent email address

4. Third-Party Services

We use the following third-party services to operate Cueword. Each processes data as described:

Service	Purpose	Data Shared
Supabase	Authentication, database, file storage	Account info, activity results, session data, profile photo (if uploaded)
OpenAI (Whisper API)	Speech-to-text transcription	Voice recordings from Speaking activities (sent via server-side proxy; API key is not exposed to the client)
OpenAI (GPT API)	AI evaluation of Writing and Speaking responses	Written text and speech transcriptions
Sentry	Error monitoring and crash reporting	Device info, error logs (no personally identifiable child data is included in crash reports)
PostHog	Anonymous product analytics — used solely to diagnose usability issues and improve the app experience	Anonymous event data (screen views, button taps, activity completion). A device-level identifier is used to correlate events within a single user's journey. We do not send the child's name, email, written responses, or voice recordings to PostHog.
Google Sign-In	Optional authentication	Google account email (parent's)
Expo / EAS	App builds and over-the-air updates	No user data; build and update infrastructure only
Firebase Cloud Messaging (FCM)	Push notifications (daily reminders, weekly digests)	Device push token. No personal or learning data is sent through push notifications.
RevenueCat	Subscription and payment management	Anonymous app user ID, subscription status, purchase receipts. Payment details are handled by the app store (Google Play / Apple) and are not shared with us directly.

We do not sell, rent, or share personal information with third parties for advertising or marketing purposes. We do not display advertisements in Cueword.

5. Data Sent to OpenAI

Voice recordings and written text are sent to OpenAI's APIs exclusively for the purpose of transcription and educational evaluation. This data is:

Transmitted via a secure server-side proxy (Supabase Edge Function) — the OpenAI API key is never exposed to the child's device
Used only to generate a response for the specific learning activity
Subject to OpenAI's API data usage policy, which states that API inputs and outputs are not used to train OpenAI models

6. Data Storage and Security

Account and learning data is stored in Supabase (hosted on AWS infrastructure)
All data is transmitted over HTTPS/TLS encryption
Database access is protected by Row Level Security (RLS) policies — users can only access their own data
API keys and secrets are stored server-side and are not included in the client application
We retain data for as long as the account is active. Upon account deletion, all associated data is permanently removed within 30 days.

7. Data Retention

Account data — retained while the account is active
Activity results and progress — retained while the account is active
Voice recordings — processed for transcription and evaluation, then discarded from the processing pipeline. Transcriptions are stored as part of activity results.
Crash/error logs — retained for 90 days in Sentry, then automatically deleted
Upon account deletion request, all personal data is purged within 30 days.

8. Account Deletion

You can delete your child's account directly from within the app by navigating to Profile → Delete Account. Account deletion permanently removes all associated data, including activity results, progress, skill profiles, and session history. This action cannot be undone.

Alternatively, you may request account deletion by emailing jeetesh.gulani@cuemath.com.

9. Push Notifications

Cueword may send push notifications (daily practice reminders, weekly progress digests) via Firebase Cloud Messaging. Notifications are delivered using a device push token stored in our database. You can disable notifications at any time through your device's system settings or the in-app notification toggle in Profile.

10. Children's Privacy (COPPA Compliance)

We do not knowingly collect personal information from children under 13 without verifiable parental consent
Account creation requires a parent/guardian email address
We collect only the minimum information necessary to provide the educational service
We do not serve behavioural advertising to children
We do not enable children to make personal information publicly available (leaderboards show first name and XP only)
Parents may request access to, or deletion of, their child's data at any time

11. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you or your child
Correct inaccurate data
Request deletion of data
Withdraw consent for data processing
Export your data in a portable format

To exercise any of these rights, email jeetesh.gulani@cuemath.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify parents via the email address associated with the account. The "Last updated" date at the top of this page indicates the most recent revision.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices:

Email: jeetesh.gulani@cuemath.com
Entity: Cue Learn Private Limited