Your child's work stays your child's

• No account. No sign-up, no email, no password. Profiles live on the iPad.
• No ads, no tracking. There is no advertising and no analytics or tracking code in the app. None.
• The work stays on the iPad. Progress, levels, and every handwritten page are stored on the device itself, so you can review them. They are not stored on our servers.
• Handwriting leaves the device only to be graded. When your child submits work, an image of the handwritten page is sent for grading and the feedback comes back. The image itself is never kept: it is handled in memory, never written to disk and never written to a log.
• Anonymous learning counts, no data about your child. So the app can improve, we keep numbers about the material itself: which skill was practised, whether the answer was right, and for which grade. They carry no names, no device identifiers and no text written by the child, so they cannot be traced back to any child. We learn from the population, never from the child.
• What the AI provider does. The grading is done by Claude, made by Anthropic. Anthropic does not use the data to train AI models and deletes it automatically within 30 days. We are pursuing an agreement that shortens those 30 days to nothing before launch.

For the skeptical parent: a technical appendix

• Input is captured with Apple's PencilKit; all app data lives in on-device storage inside the app's own container.
• Grading requests go from the app to our server, which forwards the page image to Anthropic's API in memory and returns the verdict. The image is never written to disk. What the server does keep is anonymous learning counts: skill, right or wrong, grade, and week. Nothing in them links to a child or a device, neither a name nor an identifier.
• If your child joins a teacher's class (optional, using a class code), the server stores that seat's progress: the seat label the teacher chose, grade, level, and how many problems were solved. Pupils' names never reach the server; the teacher matches seat to name on their own device. A teacher can delete the class, and the data goes with it.
• The app contains no third-party SDKs: no analytics, no crash-reporting trackers, no ad frameworks, no social embeds.
• There is no login system, hence no password or email database to breach.
• The website you are reading sets no cookies and runs no analytics. If you email us, we see your email address; that is the entire data flow.
• Questions? Email lettfeti@gmail.com and the developer answers personally.

This page also serves as the privacy notice for the website itself. If an interest list with a signup form is added later, this page gains a section on it: provider, consent, double opt-in, and unsubscribe.