Privacy Policy

Last updated: 15 October 2026 (version 2026-10-15)

Who we are

KianCan (kiancan.com) is a reading-practice app run by Kian Can, Malta. The data controller is the owner of Kian Can. Contact: [CONTACT EMAIL].

What we collect

Your email address, so you can sign in.
About your child: first name, age, gender (optional) and interests.
Reading progress: sounds learned, practice words, points, stars, sessions and levels.
Reading-check results: which words were read well and which to practise, accuracy and speed. Words only, never audio.
The text of pages you choose to save.
Your consents: what you agreed to, which policy version, and when.
Only if you join the parent network: see The parent network below.

What we never store

Audio. A reading check sends one line of reading at a time to Microsoft Azure to be checked. We keep only the word results.
Photos. A snapped page goes to Anthropic to read the text. We keep only the text, and only if you tap Save page.
No diagnosis or health information. We never ask whether your child has dyslexia.

Why we use it, and the legal basis

To provide the app you signed up for: sign-in, progress, syncing between parents. Legal basis: contract.
The mic reading check and Snap a page are off until you agree for each child. Legal basis: your consent. You can withdraw it any time in Family → Privacy & data.

Who processes it, and where

Supabase: database and sign-in. EU (Frankfurt, Germany).
Vercel: hosting. App functions run in Dublin, Ireland.
Microsoft Azure: speech checking for the reading check. North Europe (Ireland).
Anthropic: writing new stories and reading snapped pages. USA, under the EU Standard Contractual Clauses.

We send these services only what they need: the audio of one line and its text, a photo, or the sounds a story may use. Never your child’s name or any account ID.

The parent network

The parent network is optional and off until you join it (Family → Parent network). It is kept apart from your child’s data: nothing in it holds your child’s name, level, progress or photos.

What it stores: your profile card (a first name or nickname, your locality, country, your child’s age range, topics, a short “about us” and a picture you pick from ours), your connect code, requests you send and receive, your connections, your messages, mutes and blocks, and when you agreed to the rules. Never your location from the phone: only the locality you choose.
Who sees it: parents you connect with see your card and your messages to them. If you switch on “Show me in Discover”, parents who also switched it on see your card. Nobody sees your email address.
Messages are not end-to-end encrypted. They are private between the two of you and protected in transit and in the database, but KianCan can technically read them. We only read a conversation when it is reported.
Reports: a report keeps the last 100 messages of that conversation so we can check it. Reports are kept for 12 months, even if either parent leaves or deletes their account (the account link is removed), so that repeated problems can be stopped.
Safety checks: in the first 3 days of a new connection, messages with phone numbers, emails or links are refused automatically. The app also shows a reminder when a message mentions things like an address or a school; it never blocks them.
Legal basis: your consent when you join, and our legitimate interest in keeping the network safe (reports, warnings, suspensions).
Deleting it: Parent network → Profile → Leave parent network deletes your profile, code, requests and connections, and every message in your chats, for both sides. Deleting your account does the same. A block someone else placed on you stays.

How long we keep it

Until you delete it. If nobody in a family signs in or reads for 24 months, the family and its data are deleted automatically.

Your rights

You can see, correct, download, and delete your data, and withdraw consent, at any time:

Download everything, including your parent network profile, connections and messages: Family → Privacy & data → Download my data.
Delete a child’s data, or your whole account, in the same place.
Correct details such as name and age in the Setup tab.

For anything else, email [CONTACT EMAIL]. You can also complain to the Information and Data Protection Commissioner in Malta: idpc.org.mt.

Children

Accounts are for parents and legal guardians only. Children never sign in and never need an email address. There are no ads, no tracking and no selling of data.

Cookies

We only use what is needed to keep you signed in, and the phone’s own storage so the app works offline. No analytics and no advertising cookies, so there is no cookie banner.

Changes

If this policy changes, the app asks you to read and accept it again.