Note for parents and reviewers. This policy was drafted with AI assistance and is published for review. We strongly recommend reading it in full, and we are having it reviewed by a qualified attorney before our public launch. If you spot something that needs clarification, please email privacy@rocketphonics.com.
Privacy Policy
Effective date: April 22, 2026 · Last updated: April 22, 2026 · Version 2026-04-22
RocketPhonics (“RocketPhonics”, “we”, “us”, “our”) is operated by Junzi Tech Solutions LLC. We build a children's phonics and early-reading game — The Pattons Moving Adventure — available on iOS, Android, and the web. This policy explains, in plain language, what information we collect, how we use it, who we share it with, and the rights you and your child have.
By creating an account or using RocketPhonics, you agree to this Privacy Policy and the practices described below.
1. What we collect
We collect only what we need to run the game, keep kids' progress safe, and let parents manage their subscription.
From parents / account holders
- Account info— email address, hashed password (or a Google / Apple OAuth identifier if you sign in with those), and an optional display name.
- Contact preferences— whether you have opted into product updates or tips emails.
- Subscription & payment info— processed by Stripe. We store your subscription status, plan, renewal date, and the last 4 digits of your card and card brand. We never see or store your full card number or CVV.
- Parental consent records— the timestamps and version numbers of the Privacy Policy and Terms you accepted, and a record that you completed the parental-consent verification step.
From child profiles (created and controlled by the parent)
- A display name or nickname chosen by the parent.
- An age band(e.g., 4–5, 6–7) so we can show age-appropriate content.
- An optional avatar selected from our built-in set.
- Gameplay progress— which chapters and levels the child has completed, scores, which phonics sounds they have mastered, and how long they spent in a level.
Automatically collected
- Device and diagnostic info— device type, operating system, app version, language, crash logs, and general IP-address-level region (country/state). This is used to keep the app working and prevent abuse. We do not use persistent advertising identifiers.
- Essential cookies on the website (session / auth cookies, and a
cookie_consent_v1cookie that records your cookie preferences). See our Cookie Policy for the full list.
We do not collect geolocation data, contact lists, photos, microphone audio, or camera content from children.
2. How we use it
We use the information above only to:
- Deliver the game and save your child's progress across devices.
- Generate parental reports and progress summaries in the parent portal.
- Process subscriptions, renewals, refunds, and gift redemptions.
- Send transactional email (receipts, gift codes, password resets, account notices, parental-consent verification).
- Respond to support questions.
- Detect bugs, fix crashes, and improve the app.
- Enforce our Terms of Service and prevent fraud or abuse.
We do notuse your data, or your child's data, to train machine-learning models. We do not sell personal information. We do not share data with data brokers. We do not show third-party advertising inside the app, and we do notuse your child's data for behavioral advertising anywhere.
3. Children under 13 (COPPA)
RocketPhonics is designed for children ages 4–7 and complies with the U.S. Children's Online Privacy Protection Act (“COPPA”).
- Children do not create their own accounts. A parent or legal guardian creates the account and adds child profiles under it.
- Before we collect any information from a child, the parent must (a) confirm they are 18+, (b) accept this Privacy Policy and our Terms of Service, and (c) complete a parental-consent verification step (currently an email-plus confirmation link, an FTC-approved method). A child profile cannot be created until this is complete.
- We collect only the information needed for the learning experience — display name, age band, gameplay progress, avatar choice.
- We do not enable free-form chat, user-to-user messaging, photo uploads, or any other feature that would let a child share personal information with strangers.
- We do not use child data for advertising, profiling, or ML training.
4. Parental rights
As the parent or guardian, you can at any time:
- Review what we have stored for you and each of your child profiles.
- Correct any information that is wrong.
- Delete a child profile, which removes their gameplay data within 30 days.
- Delete your entire account, which removes all associated child profiles and gameplay data within 30 days.
- Export a copy of your account and child data in a portable format.
- Revoke consent for any further collection by deleting the account.
You can do most of this directly from the Account section of the parent portal. For full exports or deletions, email privacy@rocketphonics.com from the email on file and we will complete the request within 30 days.
5. Retention
- Active accounts: we keep your data for as long as your account is active.
- Deleted accounts: parent and child personal data are deleted within 30 days, and backups that may contain it are rotated out within 90 days.
- Payment & tax records: we retain minimal billing records (transaction IDs, amounts, invoice metadata) for up to 7 years where required by tax or accounting law.
- Anonymous analytics:we may keep aggregated, non-identifying usage metrics (e.g., “average completion rate for Chapter 2, Scene 4”) indefinitely to improve the curriculum. These cannot be linked back to you or your child.
6. Service providers and third parties
We share the minimum information needed with a small number of processors, each of which is contractually bound to protect your data. All of these providers are based in the United States.
| Provider | Purpose | What we share |
|---|---|---|
| Supabase | Database, authentication, storage | Account info, child profiles, progress data |
| Stripe | Subscription and gift-code payment processing | Email, subscription status, payment tokens (Stripe handles the card itself) |
| Resend | Transactional email (receipts, consent verification, password reset) | Email address, minimal email body content |
| Vercel | Website and API hosting | Request metadata (IP, user agent), server logs |
We publish a data-processing agreement (DPA) or link to each provider's DPA on request — email privacy@rocketphonics.com.
We do not share data with advertisers, data brokers, or any third party for marketing purposes.
7. Data security
We take reasonable, industry-standard steps to protect your data:
- TLS (HTTPS) for all data in transit.
- Encryption at rest for our database and file storage via our provider.
- Row-level security (RLS)so one parent's data cannot be read by another parent.
- Hashed passwords— we never store passwords in readable form.
- Least-privilege access for staff, with audit logs.
No system is perfectly secure. If a breach ever affects your personal information, we will notify you without undue delay and, where required by law, within 72 hours.
8. International users
RocketPhonics is operated from the United States, and our servers and processors are located in the United States. If you access the service from outside the U.S., your information will be transferred to and processed in the U.S. Where required (for example for EU or U.K. users), we rely on the standard contractual clauses and equivalent safeguards to protect that transfer.
EU / U.K. / California residents have additional rights under GDPR and CPRA — including the right to access, correct, delete, restrict processing, and lodge a complaint with a supervisory authority. To exercise those rights, email privacy@rocketphonics.com.
9. Changes to this policy
If we make material changes to this policy, we will:
- Update the Effective date and Last updated fields at the top.
- Email account holders at least 14 days before the change takes effect.
- Ask you to re-accept the new policy in the parent portal if the change affects what we collect or how we use it.
Previous versions are archived at website/content/legal/ in our public repository.
10. Contact
Questions, requests, or COPPA-related concerns:
For general support, use hello@rocketphonics.com.