Privacy

iStar is a practice app for children. We collect only what it needs to run, we don't show ads, and we never sell anyone's data.

What we collect

• From Google sign-in: the account's name, email address and profile picture link. We keep Google's sign-in tokens encrypted.
• Profile: the name, avatar and grade a student chooses.
• Learning: every answer (right or wrong, and how long it took), practices, which questions are learned, streaks, badges and stars.
• Shop: what a student buys with stars, when, and whether it was received or taken back.
• Sign-in sessions: the device's IP address and browser type, to keep accounts secure.
• Reminders (only if turned on): the browser's push address, to send the evening practice reminder.
• Usage analytics: pages visited and buttons tapped, through Google Analytics. Answers and children's names are never sent to it.

Why we use it

• To run practices, choose the next questions and review mistakes on later days.
• To show progress, streaks, badges, the weekly league and the stars shop.
• To let a parent see a child's stars and purchases.
• To keep accounts secure, and to fix and improve iStar.

Who else can see it

• Other students see a student's name, avatar and practice counts on the League page. Nothing else is shown to them.
• Share cards are created only when a student taps Share, and show their first name, avatar and that practice's results.
• Services that run iStar for us: Vercel (hosting, Singapore), Supabase (database, Singapore), Google (sign-in and Google Analytics), and the browser's push service (Apple, Google or Mozilla) if reminders are on. They process data only to provide their service.

We don't sell data, share it for advertising, or show ads.

Cookies and storage

• A sign-in cookie keeps a student signed in for up to a year on that device.
• Google Analytics sets its own cookies to count visits.
• The device remembers small settings, such as whether sound is on.

How long we keep it

We keep a student's data while their account is in use, so their progress and streaks carry on. When we receive a deletion request, we delete the account and its learning history.

Children and parents

iStar is made for children, used with a parent's or school's involvement. Parents can ask to see, correct or delete their child's data at any time. See For parents.

Your rights and contact

To see, correct or delete data, or ask anything about privacy, email contact@istar.fun. We'll reply within 30 days. If this policy changes, we'll update the date at the top of this page.