Privacy Policy

We never sell or trade anyone’s information

Littleleaf and Rebel Tech will never sell, rent, trade, or exchange anyone’s personal information for money or other valuable consideration. Your family’s information is not a product for advertisers or data brokers. We do not share it for targeted advertising or cross-site advertising profiles, and we will not transfer personal information as an asset for sale in a business transaction.

Providing the service requires limited processing by the providers described below. Parents can also choose to share information. These activities are not a sale or trade, and we do not authorize providers acting for us to sell or trade family information or use it for their own advertising.

Who we are

Littleleaf is a reading companion operated by Rebel Tech. This policy covers littleleaf.kids, family accounts, reading activity, the public demo, and messages you send us. It describes the web app available today. It applies to parents, guardians, young readers, older readers, and visitors.

What we collect, and why

• Parent accounts: email address, protected sign-in credentials, an optional name, woodland avatar, account activity, and consent and access records. These support sign-in, email verification, recovery, parent controls, and requests for help.
• Reader profiles: a unique screen name, a separate protected parent-assigned password or simple code (at least four characters), a woodland avatar, display preferences, and optional birth month and year. Birth information selects age-appropriate themes and birthday-month celebrations. We do not request a child’s real name, email, full birthdate, or precise location.
• Reading activity: books, authors, ISBNs, covers and descriptions, page counts, bookmarks, reading time, dated sessions, completed and repeated readings, and optional written reflections. These make the bookshelf, reading history, and progress features work.
• Reading guidance: book audience information, optional text-complexity estimates, a provisional book-based grade band, parent observations of retells and reading support, and the parent’s choice about whether the reader can see the grade guide. The estimate uses logged pages/time and saved retells, with simple on-device/server topic-word links. These are informal heuristics, not standardized assessments, comprehension tests, diagnoses, or school placement results.
• Parent invitations: the invited parent’s email, invitation status and expiration, membership information, and separate parent profiles. An invitation is limited to its named email.
• Reading-log downloads: parents can download PDF and CSV files from the same saved sessions. Written reflections are excluded unless selected. A school or teacher name and parent note entered for a PDF are used in that document on the device; those PDF-only fields are not saved to the family profile. Littleleaf does not email logs or submit them to a school.
• Support messages: the contact information, message, and attachments you choose to send us, so we can answer and handle the request.
• Technical information: hosting and service providers process information such as IP address, request time, requested page or file, browser/device details, and security or error information to deliver and protect the service. Littleleaf does not request GPS location.

Please keep real names, addresses, school details, contact information, and other private details out of reader screen names and reflections. Optional fields and reflections can be skipped.

What we do with information

We use it to provide your family’s reading nook, save bookmarks and history, personalize themes, show progress, verify and protect accounts, send requested transactional messages, respond to support and privacy requests, prevent abuse, and meet legal obligations. We do not use reading records to build advertising profiles.

When a parent completes signup, Littleleaf sends Rebel Tech an account-administration email containing the parent email, optional parent name, plan label, and signup and confirmation times. The alert is not marketing and does not include reader names, birthdays, passwords, or reading records.

Littleleaf has no public reader directory, public profiles, or chat between readers. Nonna’s prompts are part of the reading interface; the current web app does not send reflections to an AI model to grade them. Topic-word links and the working-band calculation run within Littleleaf, without sending reflections to an outside assessment service. Private parent review notes are excluded from reader responses and school log downloads.

Parents stay in control

A parent or guardian helps create a reader account and confirms permission to save its profile and reading history. The parent email has its own sign-in, separate from the reader’s screen name and password. Parents can review the saved books and reflections, reset the reader password, change optional information, and download reading logs.

Every parent who accepts an invitation has equal control of the same reading nook. This includes access to birth month/year, reading history, reflections, private grade information, settings, exports, reader password resets, and parent invitations. Each parent uses their own credentials and profile. The reader’s account and history stay in place.

Grade-level information is withheld from the reader account unless a parent enables it. Camera use, speech input, reflections, parent invitations, and school sharing are choices, not requirements for reading practice.

Who helps run Littleleaf

• Netlify: hosts the site, operates the sign-in service for parents, runs server functions, and stores private family, reader credential, session, invitation, and report records. This is online account storage, not only storage on one device.
• Resend: delivers service signup notifications to Rebel Tech and parent-approved invitations to other parents. It processes sender and recipient addresses, message contents, and delivery information. It is not used to send reading logs. Account verification and recovery messages are handled by the sign-in service.
• Open Library / Internet Archive: receives the ISBN or title/author search used to find a book. Cover requests identify the requested cover. Like other web requests, these requests also reveal connection information such as IP address. We do not send a reader’s account profile or reflections with a book lookup.
• Google Fonts: supplies the current site’s typefaces. Your browser requests font files and stylesheet information from Google, which receives connection information. We do not send it family reading records.
• Your browser’s speech service: may process microphone audio to transcribe your words when speech input is chosen. The provider depends on the browser and device. You can type instead.
• Email and support providers: process correspondence you send us so we can respond.

Providers may process information in the United States and other countries where they operate. External services have their own privacy practices. We limit the information we provide to operating, supporting, and protecting Littleleaf or carrying out a parent’s instructions.

Provider information: Netlify Privacy Statement · Resend Privacy Policy · Internet Archive privacy information · Google Fonts privacy information.

Camera, voice, and text samples

Camera frames and barcode photos are processed on your device to identify the ISBN. Littleleaf does not upload or store those images. You can enter an ISBN or title manually instead.

When you choose speech input, a listening visual shows when Nonna is listening, and recognized words appear in the answer box. You can stop, review, and edit them. Littleleaf saves the resulting text only when you choose to keep the reflection and finish the session. It does not store an audio recording. Your browser’s speech service may process audio under its own practices. Muting Nonna’s spoken prompts and turning off microphone input are separate choices.

An optional sample passage used to estimate a book’s English text complexity is processed on the device and is not saved or uploaded. The resulting estimate can be saved with the book. It describes the text, not the child.

Sharing is a parent’s choice

Nothing is automatically submitted to a school. Parents can download or print a PDF or CSV and decide who receives it. Downloaded files remain on the device until you remove them, and printed copies are under your control.

PDF and CSV downloads are together on the same screen. Choose a date range and whether to include reflections, download a file, then share it yourself if you wish. There is no reading-log email-sending feature and no automatic school submission. Schools decide what evidence they accept.

PDF and CSV logs exclude birth information, grade estimates, and parent email. Reflections are included only if selected. A PDF can include a parent’s name and an optional school or teacher name and note. A file you share with a school may be retained by that recipient under its own policies; Littleleaf cannot erase their copy.

Parent invitation emails are sent only after review and approval. An invited parent must use the invited email and accept before gaining access. An unused invitation can be canceled.

We may also disclose information when legally required or reasonably necessary to protect rights, investigate abuse, or address a security threat. This is not a sale or trade.

Cookies, browser storage, and the demo

Essential authentication cookies keep parents and readers signed in. Reader session cookies are protected with HttpOnly, Secure, and SameSite settings. The sign-in provider also uses necessary session mechanisms. We have not installed advertising cookies, advertising pixels, third-party analytics scripts, or cross-site advertising trackers in Littleleaf.

Browser session storage temporarily keeps a pending parent invitation link so it can be accepted after sign-in. Family records are stored privately online; clearing a browser’s site data or logging out does not delete the online reading history.

The public demo uses fictional family and reading records held in the open page’s memory. Demo edits reset when you leave or reload and are not saved to a real account. Demo camera or book searches can still use the relevant optional services described above, and standard hosting connection information still applies. Files downloaded from the demo remain on your device.

We do not sell or share information for advertising whether or not Global Privacy Control or “Do Not Track” is enabled. Those signals do not change the current app’s behavior because it does not perform cross-site behavioral advertising.

How long information stays

Family profiles and reading records remain in the account to provide its bookshelf and history. “Read again” preserves the earlier completed reading; it does not erase history. Logging out protects access but does not delete account records.

We keep personal information only as long as reasonably needed for the stated purpose, parent requests, security, or a specific legal obligation. A parent can request deletion or withdrawal of permission using the contact details below. We verify authority before disclosing, changing, or deleting family information.

Invitation links stop working after seven days, and reader sessions have an expiration. Expiration ends access or use of that link or session; it does not by itself mean every associated stored record has been erased. We may retain limited invitation, consent, sending, and security records as needed to operate safely and document requests. Any records created by the former reading-log email feature remain subject to this retention policy; that sending feature is no longer available. Pending signup notification emails are stored privately until sent; after delivery, the queue retains a receipt instead of the message contents. Operator mailbox copies are account-administration correspondence. We do not promise a provider log or backup deletion period that has not been established.

Support correspondence is retained only as needed to resolve the request and necessary follow-up. Provider logs and backups follow applicable service arrangements. Downloaded PDFs, CSV files, and printed or emailed copies must be managed separately by you and their recipients.

Access, correction, deletion, and permission

A parent or guardian may ask to review their child’s personal information, obtain a copy, correct it, delete it, or stop further collection and use. Use the contact details below, preferably from the parent email on the account. Tell us the reader’s screen name and what you want us to do. Do not send passwords or identity documents in an ordinary email; we will arrange appropriate verification if needed.

Parents can already review reading information in the app and export reading logs. Requests for account deletion or withdrawal of permission are handled through the privacy contact; logging out alone is not a deletion request. If information is necessary to operate a reader account, stopping its collection may mean closing that account.

Depending on applicable law, you may also have rights to restrict or object to processing, withdraw consent, appeal a response, or complain to a privacy regulator. We handle applicable requests within legally required timeframes and do not penalize people for exercising protected privacy rights. If you disagree with a response, ask Rebel Tech to review it through the same contact.

Keeping a family reading nook private

We use protected sign-in and private storage. Parent and reader permissions are enforced on the server. Reader passwords and codes are salted and hashed; parent credentials are processed by the sign-in provider. Short reader codes are separate from parent access, and repeated unsuccessful attempts temporarily pause reader sign-in. Passwords are not published in website files. No service can promise absolute security.

Use a trusted device, keep passwords separate, and log out on a shared device. Protect downloaded files and printed logs. A parent invitation grants real access to family information, so invite only a trusted parent or guardian and keep invitation links private.

Children and their families

Littleleaf is designed to support children, with a parent or guardian involved in account setup and privacy decisions. We do not condition participation on unnecessary personal details. A screen name is enough for the reader’s name; birth month/year and reflections are optional.

If you believe a child’s information was collected without the appropriate permission, or a reader shared information they should not have shared, contact us. We will investigate, verify the request appropriately, and address correction, stopping collection, or deletion as needed.

Changes to this policy

We will post updates here with a revised effective date. Before materially changing how family information is collected, used, or disclosed, we will provide prominent notice and any additional notice or consent required by law. Our promise never to sell or trade personal information applies to information already entrusted to Littleleaf.

Contact Rebel Tech

Littleleaf — operated by Rebel Tech

Email: info@rebeltech.us
Mailing address: 520 W. Colorado Ave., Colorado Springs, CO 80905
Phone: 719-330-8880