Privacy

The short version

No ads. No chat of any kind. No outside links inside the game. Children never see a checkout: only a grown-up can buy a subscription.

What we keep

For students in a class: first name, last initial, class, a picture password, game progress and practice results. No student email address is needed or collected.

For grown-ups (parents and teachers): name, email address, the classes a teacher creates, and the subscription on the account.

Children playing without a class keep their progress only on their own device.

Google sign-in

When a grown-up uses "Continue with Google", Sum Fish receives only their name, email address and profile picture. We use them only to sign that person in, keep their subscription and classes with their account, and show their name to them. We never ask for access to Gmail, Drive, Contacts or any other Google data, and we never sell, share or use Google user data for advertising or to train artificial intelligence. Sum Fish's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Anyone can remove Sum Fish's access at any time in their Google Account settings.

Payments

Payments are handled by Stripe, only for the grown-up who buys a subscription, and never for children. Sum Fish never sees or stores card numbers.

Who we share with

Only the service providers that run Sum Fish for us: Base44 (hosting, database and sign-in), Stripe (payments) and Google (sign-in, if chosen). They may use the information only to provide their service to us. We do not sell data or use it for advertising.

Removing data

Teachers can delete all student data for a class at any time from the teacher dashboard. Grown-ups can ask us to delete their account by writing to mecmusicdirector@gmail.com. Families playing without a class can clear their browser data.

Laws

Sum Fish is designed with COPPA and FERPA in mind, and schools and dioceses can request a data privacy agreement.