Privacy notice

Who this is for

RAVE-O Home is a service for parents and guardians. The adult creates the account, signs in, and runs the lessons with their child.

What we store

• Your email address, to sign you in and to reply if you write to us.
• Your settings: the lesson level you chose, and whether you finished the introduction.
• Your child’s lesson record, which is about the lessons and never about who your child is: the lesson and step you are on, the coins earned, the placement and unit check results (words right, seconds, words per minute, and the result band), the treasure quiz points, and a record of each step: when you moved on or went back, when help was used, when a coin was earned or work was checked, and how you rated each session. This shows us where lessons are hard.
• A security log, kept for one year: sign-ins and requests for sign-in codes (the time, IP address and browser type, with a coded stand-in for your email, never the address itself), and that a result was saved or a setting changed, without the result.
• Sign-in codes, stored scrambled and deleted a day after they expire.
• On this device only: your place in each lesson, coins, unsent drafts and display settings. They are cleared when you sign out or when someone else signs in on the device.

What we never store

Nothing that identifies your child: no name or nickname, no birthdate, no grade, no school, no photos, no voice or camera, and no text your child typed. The only things the app saves that you type are your email, your invite code and the sign-in codes we email you. The practice finder’s search runs on your device: what you type there is never sent or saved. The characters’ voices are pre-recorded clips; no speech, analytics, advertising or AI service runs while you use the app.

Who handles it for us

• Vercel runs the app.
• Neon holds the database.
• Resend sends the sign-in emails.
• Upstash counts sign-in attempts to stop abuse. It holds scrambled keys only, never your email or IP address, and they expire within a day.
• GitHub holds encrypted nightly backups for 30 days.

Where and how long

Data is stored in the United States. It is kept until you delete your account. A sign-in that never entered an invite code is deleted after 30 days. You can delete your account at any time from the account page, with a code we email you, or by emailing us. Deleting removes everything listed above at once; the encrypted backups age out within 30 days.

Children’s privacy

The service is operated by the parent. We do not collect personal information from children: the lesson record above belongs to your account, and you can delete it. By entering your invite code you confirm that you are the parent or guardian and consent to the storage described here.

Contact

Nido Learning Company, Sacramento, California. Questions: support@nidolearning.com.