Privacy Notice
Last updated: 5 November 2026
This notice explains what personal data Iwona Bak ("we", "us") collects when you use My First Reading Adventure, why we collect it, who we share it with, and the choices you have. It applies to parents and to the children they use the app with.
1. Who is responsible for your data
Iwona Bak is the data controller of the personal data described here. Our trading name is My First Reading Adventure. You can reach us at the email address shown on your purchase receipt.
2. Data we collect, why, and our legal basis
- Account data — your email address and sign-in credentials, and your password hash. Used to create and secure your account and to let you restore access. Legal basis: performance of a contract.
- Child profile data — the first names and emoji avatars you choose for your children, their lesson progress, completed dates, stars, badges and certificate records. Used to show each child their own map, badges and report. Legal basis: legitimate interests (providing the app you signed up for).
- Content you type or record — questions you ask the parent helpers, themes you enter for story makers, your child's typed answers, and audio you deliberately record for the "tell it back" helper. Used only to generate the answer you asked for. Legal basis: consent, which you can withdraw by not using the feature or deleting the item.
- Usage and technical data — device and browser type, IP address, and basic error and security logs. Used to keep the app working, prevent abuse and fraud, and fix faults. Legal basis: legitimate interests (security and service reliability).
We do not sell personal data, and we do not use it for advertising.
3. Where progress is stored
Lesson progress, saved stories, rereading dates and voice preferences are kept in your browser's own storage on the device you read on. Clearing that device's browser data removes them, so please keep a printed report if you want a lasting copy.
4. Who we share data with
- Our service providers and sub-processors — hosting and delivery of the app, the language model that writes AI answers and transcribes audio you record, error monitoring, and email delivery. They act on our instructions and only for these purposes.
- Our Merchant of Record, Paddle — for selling the subscription, payment and billing, tax compliance, invoicing, refunds and customer service enquiries. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns.
- Professional advisers — our lawyers and accountants, when they need to advise us.
- Authorities — where we are required by law, or to protect someone's vital interests.
5. AI helpers and your child
When you use an AI helper, the words you type (and any audio you record) are sent to our language-model provider so it can reply. Please avoid typing details you would not want shared — for example a full address, school name, or medical information. The model's replies are educational suggestions, not professional advice.
6. How long we keep data
We keep account data while your account is open, and progress data while you use the app. Payment records are kept for as long as tax and company law requires. When we no longer need something, we delete it or make it unidentifiable. You can delete a child profile, a saved story, or your whole account at any time.
7. Security
We use appropriate technical and organisational measures: encrypted connections, access controls, least-privilege access to systems, and logging of security events. No method of transmission or storage is perfectly safe, so we also keep only the data we need.
8. International transfers
Some of our providers operate outside the UK and the European Economic Area, so your data may be transferred there. Where it is, we rely on recognised safeguards such as adequacy decisions and standard contractual clauses, together with the providers' own security measures.
9. Your rights
Subject to the law that applies to you, you can ask to: access your data; correct it; delete it; restrict or object to processing; receive your data in a portable format; withdraw consent where consent is the basis; and, where relevant, object to automated decisions. You can also complain to your data protection authority. We reply within one month. To make a request, email us at the address shown on your purchase receipt.
10. Children
The app is designed for a parent or guardian to use alongside a child. We do not knowingly collect more personal data from a child than the app needs, and a parent or guardian controls the child's profile, names and saved content. Please supervise your child while using the app.
11. Cookies and similar storage
The app uses browser storage (localStorage) for essential purposes only: keeping you signed in, remembering your child profiles, progress, saved stories and voice preferences, and remembering your cookie or consent choice if we add one. We do not use marketing or advertising cookies, and we do not use cross-site tracking cookies.
12. Changes to this notice
If we change this notice we will update the date at the top and, for material changes, tell you in the app or by email.