Privacy Policy

In short

• There is no account and no sign-up. Little Firsts works the moment it opens.
• Reading progress, word collections and settings are stored locally; your operating system may include them in a backup you enabled.
• We use no advertising and no tracking — no ad identifiers (IDFA / AAID), no third-party ad or analytics SDKs that profile your child.
• Child profiles and reading activity are local. We do not send children’s names or reading activity to RevenueCat, and we do not use behavioural advertising or tracking across apps or websites.
• The app works fully offline after stories are installed.
• The upcoming version 1.0.2 shares limited purchase and technical information with RevenueCat. It does not send child profiles, reading progress or word collections. Store purchases, OS backups and optional crash reports are described below.

Who we are

Little Firsts is made and operated by Endless River ("we", "us", "our"). If you have any question about this policy or your family’s privacy, email us at hello@endlessriver.xyz.

Built for children, privacy-first

Little Firsts is designed for young children (around ages 4 to 6) and is meant to be used together with a parent or guardian. We designed it to align with children’s-privacy rules such as the U.S. Children’s Online Privacy Protection Act (COPPA) and the GDPR (including provisions on children, sometimes called GDPR-K), and with the App Store and Google Play family policies.

Child profiles and reading activity are local. We do not send children’s names or reading activity to RevenueCat, and we do not use behavioural advertising or tracking across apps or websites.

What stays on the device

Everything Little Firsts remembers lives in a database on your device: which stories you’ve opened, the words your child has met (the First Words collection), the base and target languages you picked, narration and bedtime preferences, and app settings.

Little Firsts does not upload this. There is no Little Firsts account, no sign-in, and no cloud sync operated by us. We cannot see any of it.

What we don’t collect

Because "we care about privacy" means nothing on its own, here is the specific list. Little Firsts contains:

• No analytics, telemetry or usage-tracking SDKs that build a profile of your child.
• No advertising, no ad identifiers (IDFA / AAID), and no third-party ad networks.
• No accounts, no social logins, and no access to contacts, photos, the camera, the microphone or your location.
• We do not sell or rent personal data. The limited purchase information processed by RevenueCat is described below; child profiles and reading activity are not shared with it.

Stories and downloads

The current app includes 31 illustrated stories, with narration in all six languages, bundled with the installation. Reading and listening work offline. Content is delivered through the app store when you install or update the app; the app does not download stories during reading.

Purchases and subscriptions

Payments are handled by Apple’s App Store or Google Play. We and RevenueCat do not receive your card details. The upcoming version 1.0.2 offers a weekly subscription or a one-time lifetime purchase for all 31 stories. Existing monthly and yearly purchases remain supported.

RevenueCat can receive product and transaction identifiers, purchase history and access status through server notifications from Apple and Google, including purchases made with older app versions. These records support purchase validation and paid access; they do not include child profiles or reading activity.

Starting with the upcoming version 1.0.2, RevenueCat processes store receipts or purchase tokens, product and transaction identifiers, purchase history and entitlement status, a randomly generated anonymous app identifier, and limited technical information such as app/OS version, locale and currency. Its service also receives ordinary network connection information, such as an IP address. The SDK may contact RevenueCat when the app opens or checks access, including before a purchase.

We use this information to validate and restore purchases, prevent fraud, maintain paid access and view purchase and subscription reports. We do not associate the anonymous identifier with a child’s name, profile, reading history or word collection. Advertising identifier collection and SDK diagnostics are disabled; no advertising attribution or third-party analytics integrations are configured.

RevenueCat acts as our service provider for this processing. See RevenueCat’s privacy information. An internet connection is needed to purchase, restore or refresh store status. Previously verified access is kept locally: a subscription lasts until its recorded expiry, and a lifetime purchase has no subscription expiry. Reading installed stories does not require a connection.

Crash reports

The current app does not send crash reports to Sentry or another crash-reporting service. Technical errors are logged locally; child profiles and reading activity are not transmitted.

Notifications

We do not operate a remote push-notification service. Reading and bedtime preferences remain local and do not send notification data.

Permissions

The current app does not request access to your location, contacts, photos, camera or microphone, or ask for notification permission.

The parent zone

Settings that aren’t for little fingers — choosing languages, managing a subscription, bedtime and privacy options — sit behind a simple parent gate. This keeps a child inside the stories and keeps grown-up choices with the grown-ups.

Your rights and control

You control the local reading data directly:

• Clear the word collection and progress in the app, or delete the app to remove its local data. Manage any OS backups in your device settings.
• Manage or cancel a subscription in your App Store or Google Play account.
• Change reading, language and bedtime preferences in the parent settings.

For requests to access, correct or delete purchase records processed on our behalf, contact hello@endlessriver.xyz. We may need a store transaction reference to locate a record; do not send card details or a child’s information. Records may be retained where needed to provide purchased access, prevent fraud or meet legal obligations. Deleting the app does not cancel a store subscription or automatically delete store or RevenueCat records.

Purchase and access records are kept while needed to provide or restore valid purchased access; lifetime access records have no automatic expiry. To request deletion, email us with “Little Firsts purchase-data deletion” and the store transaction reference. After identifying the record, we request removal of its purchase and technical data from RevenueCat, except information we must retain for legal obligations. Store transaction records are held separately by Apple or Google under their policies. A deletion request does not cancel a subscription; future purchases or restoring access may create new purchase records.

International users

The stores and RevenueCat process limited purchase data in their own jurisdictions; RevenueCat uses hosting in the United States. Any optional OS backup or crash reporting is handled by the relevant provider. Child profiles and reading activity are not sent to RevenueCat.

Changes to this policy

If we change this policy, we’ll update the "Effective" date above and flag any material change here or in the app. Continuing to use Little Firsts after a change means you accept the updated policy.

Contact

Questions about privacy? Email us at hello@endlessriver.xyz.