Family data belongs to the family.

Who operates StarSeeker

Star Seeker Games, a DBA of Bare Getaways LLC operates playstarseeker.com.

This operator responds to privacy, parental-access, correction, export, deletion, billing, and support inquiries for the service and its providers. StarSeeker does not offer telephone customer support; those requests are handled only by email at support@playstarseeker.com.

Information we collect

How information is used

• Provide and personalize reading missions for the selected child profile.
• Keep each family's data separate and protect guardian-only controls.
• Show reading progress and guardian-selected response supports.
• Score a reading attempt kindly when a guardian has turned on voice coaching for a child, then discard the recording unless the guardian separately authorized the same speaker's Tadamo learning-copy import.
• Process subscriptions, prevent repeated trial abuse, and provide billing support.
• Detect abuse, repair errors, protect the service, and control provider costs.
• Send account verification, password-reset, privacy, and billing messages to the guardian.

We do not sell child or guardian information, run behavioral advertising, or use child information to advertise to a child.

Service providers

StarSeeker uses service providers only to operate the product:

• Supabase for guardian authentication and family data storage.
• Stripe for trial, payment, invoice, and billing-portal services.
• Hostinger for hosting, DNS, and account email infrastructure.
• Sentry for privacy-scrubbed reliability and error monitoring when enabled.
• Microsoft (Azure AI Speech) to assess a prompted reading attempt when, and only when, a guardian has turned on voice coaching for that child, or to assess a short background reading clip when the guardian has also turned on optional Open Radio; StarSeeker sends the recording solely to produce that assessment and does not keep a plaintext copy or transcript.
• Anthropic may receive only the curated target text, assessment band, and attempt number to produce short coaching copy. Anthropic does not receive the child's recording or transcript, and StarSeeker uses deterministic copy if the service is unavailable.
• Tadamo, the linked companion communication app, receives a qualifying prompted recording only if a guardian has separately signed Tadamo's current agreement and enabled speech processing, third-party disclosure, training-audio retention, and StarSeeker Recording Import for that same speaker. The imported take stays quarantined until guardian review.

These providers receive only the information needed for the requested function. We do not authorize them to use child information for advertising. Outside of consented voice coaching, public family accounts do not send child profile, progress, or prompt data to external artificial-intelligence providers.

Voice coaching (guardian-consented)

Voice coaching starts off and requires the guardian's separate affirmative consent, disclosed on the child-setup screen; a guardian can turn it off from the family account at any time. On first use, the child must also tap the clearly labeled radio choice before StarSeeker asks the browser for microphone access. After the radio is on, the microphone opens automatically only during a clearly announced speaking turn, shows a visible listening indicator, and closes when that turn ends — unless the guardian also turns on Open Radio, it never listens elsewhere. StarSeeker sends that prompted recording to Microsoft Azure AI Speech solely to produce a pronunciation assessment. Without the separate Tadamo authorization below, StarSeeker immediately discards the recording after assessment and keeps no recording or transcript.

StarSeeker stores only the assessment's non-audio learning results, such as the feedback band, coverage, and word-level verdicts. A guardian can turn voice coaching off at any time. The change blocks the child's next prompted recording; a request already in progress may finish. A child profile works fully by tap and AAC-friendly responses whether or not voice coaching is on.

Open Radio is a separate, optional, off-by-default background-listening feature under the guardian's control. If the guardian turns it on, then only while readable text is on screen does StarSeeker capture short background clips of up to 10 seconds each to hear the child reading aloud; a visible listening indicator shows whenever the background microphone is open, and capture pauses while game audio is playing or a speaking turn owns the microphone. A clip with no speech is discarded on the device. A clip with speech is sent to Microsoft Azure AI Speech for the same pronunciation assessment and is discarded after assessment: StarSeeker keeps no recording or transcript from it, and it is never copied to Tadamo. Only non-audio learning results, such as which on-screen words were read confidently, are kept. The guardian can turn Open Radio off at any time; the change takes effect before the next background clip.

For a speaker also linked to Tadamo, a qualifying prompted take is copied into Tadamo's private review queue only if the guardian separately signed Tadamo's current agreement and enabled all four required current Tadamo import and retention choices for that same speaker. If the first delivery fails, StarSeeker stores only the exact outbound request encrypted with AES-256-GCM for retry, for no more than 24 hours. No plaintext audio, prompt, transcript, encryption key, or provider response is written to that queue. The ciphertext is deleted on successful delivery, revocation, profile or account deletion, expiry, or any integrity or decryption failure. A guardian must confirm or correct the prompt label before training. Tadamo may retain a kept copy for up to 24 months to train a private, per-speaker Azure Custom Speech model. Revocation queues the imported copy and provider artifacts for deletion, with 30 days as the outside completion limit.

Guardian choices and rights

A verified guardian can:

• Review child profile, progress, settings, and learning records.
• Correct profile and placement information.
• Request an export of family data.
• Delete a child profile or close the family account.
• Turn voice coaching on or off for any child profile; turning it off blocks the next prompted recording, while a request already in progress may finish.
• Turn optional Open Radio background listening on or off; turning it off takes effect before the next background clip.
• Refuse future optional collection if a separately noticed feature is ever introduced.

Send a request from the guardian account email to support@playstarseeker.com. We will verify the requester before disclosing or deleting child information.

Retention and deletion

Child profiles and learning records remain available while the family account is active. Closing the family account first terminates StarSeeker billing and then removes the family's active guardian, child, consent, progress, session, and game records from Supabase and the application database.

Root-only application backups are retained for no more than 14 days. Deleted records may also remain temporarily in encrypted or access-restricted infrastructure backups until the hosting provider's backup cycle overwrites them. Backups are used only for disaster recovery; a restore must reapply completed deletion requests before the service resumes.

Stripe keeps payment, invoice, and transaction records under its legal and financial obligations. StarSeeker may retain detached Stripe identifiers, required fraud/security records, and a one-way trial-eligibility marker so a deleted account cannot repeatedly claim a free trial. Those retained records are not used to recreate a child profile or for advertising.

The purposes, business need, deletion trigger, and maximum backup window for each category are set out in the Data Retention and Deletion Policy, which is part of this Privacy Policy.

Security and account separation

Guardian accounts use verified email authentication. Family data is restricted by database row-level security, child profiles are visible only inside the family account, sessions are stored as hashes, and payment details remain with Stripe. No internet service can promise zero risk; StarSeeker limits collection and maintains controls intended to reduce both likelihood and impact.

Policy updates

If a material change affects child information or an existing guardian choice, StarSeeker will provide direct notice to the guardian and request new consent when required. The effective date at the top identifies the current version.

Children's direct notice

The shorter notice shown during guardian setup is available on the Children's Privacy Notice page.