Privacy & Security First
We're designing Primary Story with privacy-first foundations, guided by COPPA and GDPR principles as we roll out new features.
🛡️ Privacy & Security Certified
Primary Story maintains the highest standards of privacy protection for children
✅ Data encrypted in transit with limited data stored.
In development: Age verification with parental consent workflow.
Roadmap: Encryption at rest and automated retention policies.
Roadmap: Self-serve export/deletion and GDPR rights tooling.
Roadmap: Security monitoring and incident response playbooks.
Where We're Investing in Privacy
Our path to compliance readiness
COPPA-Aligned Safeguards
GDPR Readiness Plan
AI Content Safety & Filtering
AI Content Moderation
Every story is reviewed by our team today while we layer in automated safety filters.
Age-Appropriate Content
Prompts are crafted for elementary readers; automated reading-level checks are in development.
Parental Controls
Parents choose themes and can reset stories today; granular controls are on our roadmap.
Content Reporting
We handle safety reports via support today and are adding in-app flagging soon.
How we think about safety
What we check today
What we're building next
🔒 Advanced Security Implementation
How we protect your data
Data Encryption
TLS keeps data encrypted in transit today; managed at-rest encryption is on our roadmap.
Security Monitoring
We monitor system logs now and are implementing automated alerts for unusual activity.
Data Retention
We store only what's needed and are drafting formal cleanup and retention schedules.
Google API Services Data Practices
In compliance with Google API Services User Data Policy, we transparently disclose how we access, use, and protect Google user data in our application.
Google User Data Access
When users sign in with Google, we access the following Google user data solely for account creation and authentication purposes:
Data Storage: Google user data is encrypted and stored securely in our database. Data is retained until account deletion.
Google User Data Usage
We use Google user data in the following limited ways:
Authentication & Account Management:
- • Sign-in and account creation
- • Password reset and account recovery
- • Secure session management
User Experience:
- • Personalized greetings and profile display
- • Account communication and support
AI Content Generation:
- • Google Generative AI APIs are used to create personalized stories
- • No Google user data is transmitted to or processed by Google AI services
- • Content generation is based solely on user-selected themes and preferences
Data Sharing: Google user data is never shared with third parties except as required by Google APIs for authentication purposes.
Google Analytics
We use Google Analytics to understand how users interact with our application and improve the service:
Data Usage: Analytics data helps us improve app performance and user experience.
Data Retention: Google Analytics retains data for 26 months by default.
Opt-out: Users can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
Data Sharing: Analytics data may be processed by Google and shared with other Google services, but we do not receive personally identifiable information.
Meta Pixel (Facebook/Instagram)
We use Meta Pixel to measure the effectiveness of our Facebook and Instagram advertising campaigns:
Data Usage: Meta Pixel helps us understand which marketing channels work best so we can invest in the right places.
Data Collected: Page visits, button clicks, and sign-up events on our landing pages only.
Opt-out: You can manage cookie preferences below or opt out of personalized ads in your Facebook Ad Preferences.
Privacy: Meta Pixel only tracks visitors to our public landing pages before sign-up. Once authenticated, no advertising pixels track children's activity.
What privacy looks like today and what's next
Secure infrastructure basics
We use industry-standard encryption, access controls, and regular reviews to keep family data safe.
Clear, parent-managed data
Parents create and manage accounts today while we build a self-serve deletion and export flow.
No ads in the app
Children never see ads. We use limited tracking on landing pages to measure ad performance, but once signed in, no advertising pixels track activity.
Privacy reviews for new features
Every release goes through a privacy checklist so defaults stay safe without extra work from families.
Learning with experts
We follow guidance from child-privacy advisors and update our policies as regulations evolve.
Roadmap for ongoing audits
As our product grows, we'll schedule formal audits and public updates so families can track our progress.
Ready to Trust Us with Your Child's Learning Journey?
Be part of our early access group helping us build a privacy-first reading experience.