WordLore Legends Privacy Policy

Last updated: 14 August 2026

1. What this product is

WordLore Legends is an interactive, AI-narrated vocabulary learning game published under the Mrs Wordsmith brand, designed specifically for children. Access to WordLore Legends requires an active Mrs Wordsmith subscription verified via a secure access code.

2. Information collected directly from the user

Data	Notes
Login PIN (6-digit)	Not stored by this app — forwarded to Mrs Wordsmith's service for verification. Only the length of the PIN is ever logged, never the PIN itself.
Hero name and description	Player-entered text, freely chosen by the child.
Hero difficulty tier (`"age_group"`: young/middle/older)	A gameplay difficulty setting used to adjust learning content. This is a functional gameplay preference and does not represent or collect a child's real date of birth or age.
Free-text sentences written during gameplay	The core mechanic — children write a sentence using each vocabulary word. Capped at 500 characters per submission.
Spelling attempts and multiple-choice answers	Recorded per word card.
Microphone audio	Captured only while the player actively uses voice input to answer prompts. Audio is processed for text transcription and is not retained.
Star rating (1–5) and optional free-text comment	Submitted by the player at the end of a session.
Device timezone offset	Used to align daily-quest resets to the player's local day.
Screen width/height and touch-capability flag	Used for responsive layout only.

Information We Do Not Collect: We do not collect real names, personal email addresses, phone numbers, postal addresses, dates of birth, photos, contact lists, camera access, precise geolocation data, or financial information within the application. Subscription management and payment processing are managed securely by Mrs Wordsmith.

3. Information the system generates or infers about the user

To deliver a personalized and adaptive learning experience, WordLore Legends dynamically generates content based on gameplay:

AI-generated hero portrait, created from the child's hero description.
AI-generated scene artwork, created per story beat.
AI-generated "webtoon" comic panels summarizing a completed play session, including rendered speech-bubble text drawn from the session's actual narration and dialogue.
AI narration that references the child's hero by name as part of the interactive story.
Per-word performance scoring (a quality tier for each answer submitted).
A learning-outcome / mastery profile per hero: words attempted, words mastered, words struggled with, and a narrative summary of the session.
Lifetime skill statistics per hero: total words mastered, sessions completed, total play time.
Automated safety, engagement, and content-quality evaluations to maintain a secure and appropriate environment for children.
Safety incident reports and moderation logs generated if content requires administrative or human safety review.

4. Information collected automatically (logging and telemetry)

When accessing our services, certain technical diagnostic and usage information is collected automatically to maintain system performance and reliability:

IP address and browser/device user-agent string, recorded on every login/authentication attempt (successful or failed) and on every batch of telemetry events sent from the app.
Gameplay telemetry events — a stream of discrete events (e.g., page views, feature usage, disconnect events, word-card interactions) each tagged with a session identifier and profile identifier.
Crash and error reports — technical error logs, stack traces, and page URLs used strictly to identify and fix technical issues within our internal logging infrastructure.
Voice-input outcome telemetry — whether a voice transcription succeeded or failed, the reason for failure if applicable, and a short technical error string. The vocabulary word being attempted is included; the audio itself is not.
Voice input diagnostics to ensure speech-recognition reliability across supported platforms.
Platform identifier (web, Android, or iOS) is attached to every backend log line.

We retain technical telemetry and logging data to ensure continuous service availability, maintain security, and optimize learning algorithms.

5. Data stored on the player's device

The application stores necessary operational data locally on the player's device using standard application storage:

Authentication session token and its expiry
A player/profile identifier
Hero identity, name, portrait, and current session state
User preferences (audio on/off, playback speed, input method, layout, session-length preference)
One-time tutorial/walkthrough "seen" flags (does not contain personal data, just UI state)
Secure authentication session details required for account and moderation management.

We do not use cookies or tracking technologies for advertising, profiling, or cross-site behavioral tracking.

6. What's inside a session token

Upon login, the application generates a secure session token that authenticates the user's active subscription and connects gameplay requests to service features. Session tokens do not store personal contact information or real names.

7. Third parties that receive data

Third party	What they receive	Why
Google (Vertex AI / Gemini models)	The child's in-game written sentences, hero name/description, and session/story context	Powers the AI-narrated story: generating narration, validating word usage, and generating in-game imagery
Google (Vertex AI / Gemini models) — safety review	Full session transcripts, and in some cases the raw text a child wrote, when a session is selected for automated safety/quality review	Automated content safety, filter evaluation, and quality assurance to maintain a safe environment for young learners
Google Cloud Speech-to-Text	Raw voice audio, only while actively transcribing a spoken answer	Converts spoken answers into text for gameplay
Google Cloud Text-to-Speech	Narration text (including the child's hero name)	Converts story narration into spoken audio
The player's own browser or device speech engine (Apple or Google, depending on platform)	Raw voice audio	Used as an alternative voice recognition fallback when cloud speech recognition is unavailable on the device

8. App permissions by platform

Android — the app requests:

Internet access — required for all app functionality.
Microphone access — used for voice-input gameplay.
Standard system backup participation — local settings may be backed up according to the user's device backup preferences.
No access to device camera, photo libraries, contacts, or precise geolocation is requested or required.

iOS

Internet access — required for all app functionality.
Microphone access — used for voice-input gameplay.
Standard system backup participation — local settings may be backed up according to the user's iCloud or device backup preferences.
No access to device camera, photo libraries, contacts, or precise geolocation is requested or required.

9. Data retention

We adhere to strict data retention policies designed to protect young learners while ensuring seamless educational continuity:

Safety and Moderation Logs: Content flagged for safety review is retained securely for moderation purposes and scheduled for deletion once safety reviews are completed.
Educational Profile Data: Learning stats, gameplay achievements, and hero progression remain stored with the active user profile to allow children to resume learning seamlessly across sessions, until deleted by the user or account owner.

Parents or guardians may request the deletion of account data at any time through their Mrs Wordsmith subscription management portal.

10. User rights and data deletion

Parents and legal guardians hold full rights regarding their child's gameplay data. You may review, modify, or request the deletion of game profiles and associated learning data through your Mrs Wordsmith account management options or by contacting customer support. Account deletion automatically removes associated gameplay records.

11. Children's privacy

WordLore Legends is designed from the ground up for children, incorporating stringent safety measures to ensure a secure digital environment.
Parental Consent & Gateways: Application access requires verification linked to a parent-managed Mrs Wordsmith subscription, ensuring adults maintain supervision over account creation and activation.
Multi-Layered Child Protection Controls: We deploy proactive guardrails to ensure player interactions remain safe and enriching.

Our Safety Measures

Automated detection and filtering of personally identifiable information in free-text fields.
Automated detection of concerning conversational patterns.
Automated profanity/inappropriate-language filtering.
Automated AI-based review of session content for safety and quality, with a human staff escalation and review process for anything flagged.

Our commitment to children's privacy ensures that young players can explore vocabulary learning safely without unwanted tracking or data collection.