隐私政策

1. About this policy

Lala Words ("we") offers simple language-learning mini games for children and families. This policy explains what information is handled when you use Lala Words. It is written for parents and guardians.

2. Built for children: we don't collect personal data

Children use Lala Words without an account. We do not ask for or collect from children:

• names, email addresses, phone numbers or photos
• voice recordings or camera access
• precise location
• advertising identifiers or tracking cookies

3. Data saved only on your device

To remember progress, Lala Words stores the following in your browser (localStorage and IndexedDB). This data stays on your device and is never sent to us:

• kids' profiles on this device: an optional nickname, a picture and a daily goal
• game history, scores, stickers and badges
• words to practice (review list)
• a copy of pages and pictures, so games keep working without a connection
• settings: language to learn, sound, voice, theme, timer
• a language cookie (NEXT_LOCALE) so the site opens in your language – strictly necessary, no tracking

4. Deleting data

Open the grown-ups area and choose "Delete all progress", or clear this site's data in your browser settings. Because we don't hold your child's data on our servers, there is nothing else to delete. If you have a parent account for Lala Plus, see "Deleting your account" below.

5. Technical data from hosting

Lala Words is hosted by Vercel. Like any website, the hosting provider processes technical request data (such as IP address, browser type and time of request) to deliver pages and protect the service against abuse. We do not use this data to identify or profile anyone. See Vercel's privacy policy for details.

6. No ads, no tracking, no selling data

Lala Words shows no advertising and contains no third-party trackers. We never sell or share personal data.

To see which pages and games are used, we count visits with Vercel Web Analytics. It sets no cookies, stores nothing on your device, does not follow anyone across websites, and only gives us totals (for example "Guess the Picture was started 120 times today"). It never receives your child's progress, words or nickname.

7. Read-aloud voice

Words are read aloud using your device's built-in speech feature. Only the word being read (for example "cat") is passed to that feature. Some operating systems may use their own online voice service; this is controlled by your device settings. You can turn the voice off in the grown-ups area.

8. Children's privacy laws

We design Lala Words to follow the principles of children's privacy laws such as COPPA (United States), the GDPR and UK Age Appropriate Design Code (Europe/UK), and Vietnam's personal data protection law: data minimisation, no profiling, no behavioural advertising, and privacy by default. We do not knowingly collect personal information from children. If you believe a child has sent us personal information (for example by email), contact us and we will delete it.

9. Security

Lala Words is served only over HTTPS with strict security headers, loads no third-party scripts, and keeps settings behind a parental gate.

10. Changes

We may update this policy. The date at the top shows the latest version. Important changes will be announced on the site before they take effect.

11. Contact

Questions or requests: hello@lalawords.com

Parent accounts (Lala Plus)

Kids never need an account. A parent who wants Lala Plus signs in with Google or Apple. From that sign-in we keep only your email address and an account id. We never ask for a child's name, photo or any other detail about a child.

Your child's progress, stickers and settings still stay only on your device; they are not linked to your account or sent to us.

With an account we also keep what you bought (plan, dates, amount and the payment provider's reference) so Plus works on every device you sign in on, and for accounting.

Payments

Card payments are handled by Creem, our reseller (Merchant of Record), and bank transfer (QR) payments in Vietnam by PayOS. You pay on their pages: Lala Words never sees or stores your card number or bank account details. We receive only whether a payment succeeded and the reference above.

As the seller of record for card payments, Creem receives what it needs to take the payment, work out the tax for your country and send receipts (such as your email address, billing country and card details) and handles it under its own privacy policy.

Cookies

Lala Words uses only strictly necessary cookies, never for advertising or tracking:

• the language cookie (NEXT_LOCALE)
• lls_q: a signed counter of today's free plays, with no personal data
• sign-in cookies, only after a parent signs in
• bot protection cookies from Vercel BotID, when a parent signs in or starts a payment

Who processes data for us

We share data only with the providers that run the service, and only what each needs:

• Vercel (hosting, bot protection): technical request data
• Supabase (database and sign-in): the parent account and purchases, stored in Tokyo, Japan
• Upstash (rate limiting): IP addresses and account ids, kept for up to an hour
• Google and Apple (sign-in): your sign-in with them
• Creem (card payments, as our reseller) and PayOS (bank transfer QR): the payment you make on their pages

Deleting your account

In the grown-ups area, "Delete account" deletes your account and email right away (you are asked to sign in again first). Renewing card plans are canceled at the same time. Purchase records are kept for accounting as required by law, no longer linked to you.