Privacy Policy
The short version
- PlayFaylo is a reading, grammar, vocabulary and writing program for students in grades 1 to 5.
- A parent, guardian or teacher signs up with an email address. Students sign in with a made-up username and password. Students are never asked to type their name, email, birthday, photo or location. A parent or teacher can set an optional first name or nickname for a login.
- We do not show ads, we do not sell or share personal information, and we do not build profiles of students for advertising.
- While a student is signed in, we save their lesson progress and count how long they actively use the site. We use this only to show it to the parent or teacher and to improve how easy the site is to use. We never sell it or use it for ads.
- You can ask us to show or delete your information at any time at royalberrycompany@gmail.com.
1. Who we are
PlayFaylo ("PlayFaylo", "we", "us") is operated by Royal Berry Company, Los Angeles County, USA. This policy explains what information we collect through playfaylo.com (the "Service"), how we use it, and the choices available to you. It applies to parents, guardians, teachers and students who use the Service.
2. Information we collect
| What | Why we collect it |
|---|---|
| Parent, guardian or teacher email address, given when you sign up for a free trial or subscription. | To send the confirmation link and sign-in help (password reset) links, set up and manage the account, and contact you about the account or the Service. |
| Student login: a made-up username, a password (stored only in scrambled, one-way form), the time of the last sign-in, and whether the login is on, off or locked. | To let the student sign in, keep the account secure, and show the account holder whether the login has been used. |
| Account details: account name, plan (trial or paid), trial dates, and an optional private note an administrator may add to a login. Please do not put a child's full name in a note. | To run the trial and subscription, and to help adults tell logins apart. |
| Network address (IP address) and basic request data. Our hosting provider processes these to deliver and protect the Service. We also keep a short-lived, one-way scrambled version of the network address to limit abuse, such as many sign-up emails sent from one place. | Security, fraud prevention and keeping the Service running. |
| Learning progress: which lessons and activities a student has completed, saved to the student's login. It does not include names or what the student types. | So a student can pick up where they left off on any device, and so the parent or teacher can see progress. |
| Usage activity: for each day, how many seconds a student actively used the site and how many times they signed in. We count time only while a page is open and in use. | To show the parent or teacher how much a student has used the site, and to understand which parts of the site are used so we can make it easier to use. We do not use it for advertising or to build profiles. |
| Display name: an optional first name or nickname that a parent or teacher types for a student login. If none is set, the student sees their username instead. Please do not use a full name. | To greet the student on screen. It is kept with the student login and deleted with it. A copy is also kept in that device's browser while the student is signed in. |
| Contact form messages: the name, email address, optional phone number and message you type into our Contact form. | To read and answer your message. We email it to our team and do not keep it in our database. |
| Sign-in cookie. One essential cookie keeps a student signed in for up to 12 hours. We do not use advertising or analytics cookies. | To keep the sign-in working. It is strictly necessary for the Service. |
3. What we do not do
- We do not show advertising, and we do not use information for targeted or behavioral advertising.
- We do not sell personal information, and we do not share it for cross-context behavioral advertising.
- We do not ask students to type their own names, email addresses, birthdays, photos, voice recordings or precise location.
- We do not build profiles of students for advertising or for any purpose other than providing and improving the Service.
- The Service has no chat, messaging or public posting between users.
4. How we use information
- To create and run accounts, free trials and student logins.
- To send transactional emails, such as the sign-up confirmation link and the link we send when a parent or teacher asks to reset a student login.
- To save lesson progress, show progress and usage to the account holder, and understand how the Service is used so we can improve its usability.
- To keep the Service secure, prevent abuse and fix problems.
- To respond to your questions and requests.
- To follow the law.
5. Who we share information with
We share information only with companies that help us run the Service, and only as needed for that purpose:
- Cloudflare: hosting, our database and security protection.
- Resend: delivery of emails, such as the confirmation link, password reset links and messages sent through our Contact form. It receives the email addresses and message content.
Subscriptions are not open yet. Before we collect any payment information, we will update this policy. We expect a payment processor to handle card details so that we do not see or store full card numbers.
We may also disclose information if the law requires it, to protect the safety of a child or others, or in connection with a sale or reorganization of our business (in which case this policy's protections will continue to apply to the information).
6. Children's privacy
PlayFaylo is meant to be used by children under the supervision of a parent, guardian or teacher. Accounts are created by an adult. We ask the adult to confirm their email address and to confirm that they are a parent, guardian or teacher who is 18 or older.
We do not knowingly collect personal information from a child beyond the generated username, the scrambled password, the sign-in time, and the saved progress and daily usage totals described above. If you believe a child has given us personal information, contact us at royalberrycompany@gmail.com and we will delete it.
Parents and guardians can, at any time: ask to see what we hold about their child's login; ask us to delete it; and ask us to stop any further collection by turning the login off.
7. Schools and teachers
When a teacher or school sets up student logins, we treat any student information we hold as being provided for school purposes. We use it only to provide the Service. We do not use it for targeted advertising, do not build profiles of students for non-school purposes, and do not sell it. We keep it protected with reasonable security and will delete it when a school or district asks us to. Schools that need a data privacy agreement can contact us at royalberrycompany@gmail.com.
8. How long we keep information
| Information | Why we keep it | How long |
|---|---|---|
| Unconfirmed sign-up links | So you can confirm your email | Until used or for 24 hours; removed in our daily cleanup. |
| Short-lived network-address logs (scrambled) | Abuse prevention | About 2 days. |
| Saved lesson progress and daily usage totals (time and sign-ins per day) | To show progress and usage and improve the Service | Progress is kept while the account exists and is deleted with it. Daily usage totals older than about 13 months are deleted automatically. Trial data is deleted about 90 days after the trial ends. |
| Password reset requests: a one-way scrambled copy of the link code | To let a parent or teacher reset a student login | 1 hour, or until the link is used. Expired links are deleted automatically. |
| Free-trial account: parent email, student login and account details | To run the trial | During the trial. If the account does not become a paid subscription, it is deleted automatically about 90 days after the trial ends. |
| One-way scrambled version of an email address that has used a trial | To allow one free trial per email. It cannot be turned back into the email address. | For as long as we offer free trials. |
| Contact form messages | To answer you | They live in our email inbox. We delete them when we no longer need them to help you, usually within 12 months. |
| Paid account information | To provide the Service | While the subscription is active. We delete it within 30 days after cancellation or a deletion request, except records we must keep by law (such as billing records). |
Deleted information may remain in our providers' backups for a limited time before it is overwritten.
9. Security
We use safeguards that fit the type of information we hold, including encrypted connections (HTTPS), one-way scrambling of passwords, limits on repeated sign-in attempts, and restricted access to our administration tools. No system is perfectly secure, so we cannot guarantee absolute security.
10. Your California privacy rights
If you live in California, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) may give you these rights, subject to legal exceptions:
- to know what personal information we collect, use and disclose;
- to delete the personal information we collected from you;
- to correct inaccurate personal information;
- to opt out of the sale or sharing of your personal information (we do not sell or share personal information, and we have not done so in the past 12 months);
- to limit the use of sensitive personal information (we use account log-in details only to provide the Service); and
- not to be treated unfairly for using these rights.
Categories we collected in the last 12 months: identifiers (name and email address, username, optional phone number if you send us a message), account log-in credentials (scrambled password), and internet or network activity (sign-in times, daily usage time, saved lesson progress and abuse-prevention logs). We collected them from account holders and from their use of the Service, and used them for the purposes in section 4. We disclosed them only to the service providers in section 5.
How to make a request: email royalberrycompany@gmail.com from the address on the account, or write to Los Angeles County, USA. We may ask you to confirm your identity, for example by replying from the account email. We aim to respond within 45 days. An authorized agent may make a request for you with your written permission.
Do Not Track. We do not track visitors across other websites, so we do not need to respond to "Do Not Track" or similar browser signals.
Shine the Light. We do not disclose personal information to third parties for their own direct marketing.
11. Changes to this policy
We may update this policy. We will post the new version here with a new effective date. If a change is material, or changes how we treat children's information, we will email the account holder before it applies.
12. Contact us
Royal Berry Company
Los Angeles County, USA
Email: royalberrycompany@gmail.com