Privacy & Data
Clear choices about family data.
Sage’s World is designed so core learning does not require AI, speech analysis, or advertising. This page explains what information stays on a device, what may sync to a family account, what optional tools send to service providers, and how an account holder can export or delete data.
At a glance
Where information can go, and who chooses.
Core learning works without AI or Speech Coach. A signed-in family account can sync approved profile and app data through Firebase. Family-added photos may be stored locally or synced. Optional adult AI and speech tools send only the content needed for the selected request. Sage’s World does not use behavioural advertising or sell personal data. The public website uses Google Tag Manager and Google Analytics; the learning app uses Cloudflare Web Analytics. Account holders can request access, correction, export, or deletion of supported synced data.
- Stays on the deviceGuest practice, local settings, and cached app information can stay in that browser or app.
- May sync when signed inApproved profiles, goals, progress, schedules, stories, and selected photos may sync through Firebase.
- Sent only for a chosen toolOptional AI, picture search, and Speech Coach send the limited content needed for that request.
- Controlled by the familyAccount holders can review choices and request access, correction, export, or deletion where supported.
1. Scope and responsibility
A family account is managed by an adult.
This policy applies to the Sage’s World website, family account, web app, supported app versions, contact form, direct subscriptions, and the optional services described here.
Sage’s World is operated in Ontario, Canada by its founder, Phil. It is intended to be set up and managed by a parent, legal guardian, or other adult who has authority to make account and data choices for the learner. Children and teens can use the learning activities under adult direction.
A school, agency, educator, respite worker, community support worker, or other organization must follow its own laws, policies, approvals, and consent requirements before entering or receiving learner information. Sage’s World does not currently provide separate professional accounts, school accounts, worker credentials, or independent access to a family’s data.
In this policy, account holder means the adult who creates and controls the family account. Family content includes words, photos, stories, schedules, notes, selected IEP text, and other information the adult chooses to enter or apply.
2. Public website
The marketing site and contact form.
Normal website requests
When a browser opens sageworld.ca, the hosting provider, WordPress, and security services may process standard technical information such as an IP address, browser and device type, requested page, request time, referrer, and security signals. This information is used to deliver the site, prevent abuse, diagnose problems, and protect the service.
Contact form and reCAPTCHA
The Elementor contact form collects the name, reply email address, topic, subject, message, optional technical details, consent record, and basic submission metadata that a visitor chooses to submit. Messages are sent privately to Sage’s World. Do not submit a learner’s IEP, diagnosis, voice recording, health information, password, payment card details, or other sensitive personal information through the general form.
Google reCAPTCHA v3 helps protect the form from automated spam. Google may process device, browser, network, interaction, cookie, and risk information to evaluate whether a submission is likely to be legitimate. Google’s own privacy policy and terms apply.
Google Tag Manager and Google Analytics
The public website loads Google Tag Manager container GTM-W34PZVC5 and currently uses Google Analytics 4 measurement ID G-WJYM6XVCJX. Google Analytics can process page and interaction information, approximate location, browser and device information, session statistics, a pseudonymous client identifier, first-party analytics cookies, and standard network information.
Sage’s World uses this website analytics information to understand which public pages are useful, diagnose performance issues, and improve the website. Contact-form fields, learner information, names, email addresses, message content, uploaded documents, and learning-app activity must not be sent to Google Analytics or placed in the Tag Manager data layer. Sage’s World does not use this data for third-party advertising or sell or rent family data. The privacy page and any required consent controls will be updated before advertising, remarketing, or materially different tags are enabled.
3. On-device information
Information stored for a learner.
Sharing a Support passport
The family-written Support passport is saved with the learner’s app data and can sync with a signed-in profile. Adults can preview and print it, share or download a PDF, or copy its text. It does not create a public link or give recipients access to the family account.
Review each output before sharing. The learner’s name and avatar are included. About Me details, app-support text, and contact phone numbers are included by default when available; their inclusion boxes can be unchecked. Only enter information you have authority to use, and share only what the recipient needs.
Printed, downloaded, copied, or shared versions may contain sensitive learner information. A chosen sharing service and recipient receive the content you send. Changing or deleting information in the app does not remove copies already saved or received elsewhere.
Depending on the features used and whether the family signs in, the browser or app can store:
- a learner profile, including a first name or nickname, age, interests, goals, settings, and optional avatar;
- optional About Me details that the adult chooses to enter;
- Support passport entries, such as communication cues, helpful supports, routines, family notes, contacts, and any food, health, or safety details the adult adds;
- practice history, levels, responses, stars, rewards, skill signals, progress summaries, and adult-recorded observations;
- custom words, approved pictures, schedules, stories, routines, chores, rewards, and communication-board choices;
- family preferences, sensory and audio choices, Speech Coach consent, Parent PIN settings, and device preferences;
- Speech Coach attempt counts and derived per-phoneme practice summaries, but not raw audio clips or recognized transcripts;
- plan, entitlement, and feature-usage information; and
- temporary AI conversation state needed to complete an adult’s request.
Some information is cached so core activities can keep working after the first visit, including when the device is offline. Clearing browser data, deleting the app, using private browsing, changing devices, or resetting a device may remove local information that has not synced or been backed up. Another person who can open the same browser profile may be able to open locally stored app information.
The optional learner avatar is resized on the device before storage and can sync with a signed-in family profile. It is not currently included in the downloadable app backup.
4. Accounts, sync, and email
Family-controlled cloud services.
Family account and Firebase
Account creation uses an adult’s email address and password through Google Firebase Authentication. Sage’s World does not receive the plain-text password. Signed-in profile and app state can be stored in Google Firebase services, including profile information, preferences, goals, progress, selected content, schedules, stories, chores, rewards, observations, Support passport entries, family photos, Speech Coach consent, and derived per-phoneme summaries.
Firebase App Check also helps protect supported app services from unauthorized requests. It can process app, browser, device, integrity, and request signals needed to issue and verify protection tokens. These controls reduce abuse but do not guarantee that every unauthorized request will be prevented.
Free currently supports one synced learner profile. Premium supports up to ten retained profiles. When Premium ends, extra profiles remain retained but only the Free-plan profile capacity is active. The product does not currently provide a formal professional-account or remote worker-access system.
Optional progress summary email
Eligible signed-in family accounts currently receive a monthly progress-summary setting that is on until the adult turns it off or unsubscribes. The summary is sent near the start of the month through Resend and describes recent practice. It is not a formal assessment, attendance record, or complete calendar-month report.
The current summary can use the account email, the first six learner profiles, profile names or nicknames and emoji, plan or trial status, recent and cumulative practice counts, first-try results, level changes, commonly practised learning areas, and up to about 21 days of daily practice records. It does not need family photos, raw speech audio, source IEP pages, or raw AI prompts and responses.
The adult can change the setting in the app, send a preview to the account email, or use the unsubscribe link in an email. Resend and Sage’s World may process the email address, summary content, delivery status, error information, unsubscribe preference, and limited logs needed to send and manage the message.
5. Photos and picture searches
Adults choose what to add and save.
An account holder may add photos or choose public images to personalize learning. A photo may reveal identity, location, disability-related context, family relationships, or other sensitive information even when no text is attached. Use only an image the account holder has authority to use, avoid unnecessary identifying details, and consider an object, symbol, crop, or built-in tile instead of a recognizable face.
Wikimedia suggestions
When an adult finishes setup, applies selected words suggested by the optional IEP reader, or adds a word manually, the app can send up to 20 new words or short phrases to Wikimedia Commons as picture-search queries and load up to four candidate thumbnails per word. The full IEP source is not sent to Wikimedia. Skipping a candidate prevents that picture from being saved, but does not undo the search request that already reached Wikimedia.
If the adult saves a result, its Wikimedia image URL is stored with the learner’s app state and may sync. Wikimedia and the services that deliver its images may receive the query, IP address, browser details, requested image URL, and request time. Source licences and attribution requirements continue to apply.
6. Optional adult AI
Adult tools with clear limits.
AI is not required for any child-facing learning game. The AI Teacher’s Assistant and AI IEP Reader are optional Premium tools intended for an adult account holder. A child does not chat directly with the AI provider.
AI IEP Reader
An adult chooses the pages or images and setup goal to send through a Sage’s World serverless function to the Anthropic Messages API. The source PDF pages or images are used for that request and are not deliberately persisted by Sage’s World. The adult reviews the returned suggestions before applying anything. Fields the adult applies to the learner’s setup can then be stored locally and may sync as family content.
AI Teacher’s Assistant
An adult’s request can include the question, up to eight recent chat turns, the learner’s first name or nickname, selected recent-weighted practice information, levels and first-try patterns, stars and reward information, and up to three recent observations. The feature cannot independently browse the account, change settings, or make decisions for the learner.
Provider and storage
Requests are forwarded through a Netlify serverless function to Anthropic’s commercial Messages API. Sage’s World does not deliberately persist raw AI prompts, raw provider responses, or source IEP pages in the family profile. Limited usage, entitlement, security, and error information may be processed to provide and protect the feature. Provider handling can depend on the production account and agreement, so this policy does not promise a particular zero-retention or model-training setting.
Remove names, dates of birth, addresses, school identifiers, health-card numbers, signatures, and unrelated details before using an AI tool. Include only the smallest relevant excerpt. AI output can be incomplete, outdated, biased, or wrong. It is not an official IEP interpretation, diagnosis, assessment, legal opinion, or professional recommendation.
7. Speech, app analytics, and billing
Other services used for specific features.
Browser speech services
Regular Read Aloud can use speech synthesis from the browser or operating system. Optional spoken-answer features can use the browser’s speech-recognition service. Depending on the browser, audio may be sent to that browser provider for recognition. The browser’s permission and privacy terms apply.
Optional Speech Coach beta
Speech Coach is an optional, web-only Premium beta that is off until an authorized adult enables it. Regular Read Aloud remains available without Speech Coach. After a short final passing Read Aloud attempt, the browser can send the clip and reference text directly to Microsoft Azure Speech Pronunciation Assessment in the Canada Central region. The Sage’s World backend issues a short-lived access token but does not receive or store the raw audio.
Sage’s World does not store or sync raw Speech Coach audio or recognized transcripts. It stores the adult’s consent setting, coached-attempt count, monthly usage counters, and derived rolling per-phoneme summaries. Those derived summaries are stored locally, may sync with the family profile, and can appear in supported app backups. At least four samples are required before a sound is shown in the adult view. The current allowance is about 10 coached minutes per family per month and can also be limited by shared service capacity.
Automated pronunciation feedback can be conservative or inaccurate for some voices, accents, speech patterns, languages, microphones, devices, or environments. It never changes the learner’s Read Aloud result and is not a speech-language assessment, diagnosis, therapy, or clinical service.
Cloudflare Web Analytics
The learning app at app.sageworld.ca uses Cloudflare Web Analytics for basic app visits and performance. This is separate from Google Analytics on the marketing website. Learning answers, profiles, uploaded documents, contact-form messages, AI source content, and Speech Coach clips are not deliberately sent as app analytics events. Standard network requests still reach Cloudflare.
Subscriptions and payments
Direct subscriptions are processed by Stripe. Where Google Play billing is offered, Google processes that purchase. Sage’s World does not store full payment card numbers. It stores limited plan, entitlement, transaction-reference, status, and feature-usage information needed to unlock Premium, enforce allowances, and help resolve billing issues.
8. Retention and family choices
Access, export, correction, and deletion.
While an account is active
Family account and synced profile information is kept while the account is active and as needed to provide the selected plan. Local data remains until the app, browser, device, or family removes it. Contact messages, delivery records, security logs, billing records, and provider logs are kept for the period needed for support, security, accounting, tax, dispute, provider, or legal purposes.
Export
The adult portal can create a downloadable backup of supported app data. It does not include the family password, full payment records, source IEP pages, raw AI prompts or responses, raw Speech Coach audio, recognized transcripts, or the optional profile avatar. Support passport entries and derived Speech Coach summaries can be included. A backup may contain sensitive learner information and should be stored carefully.
Delete in the app
Account deletion is designed to remove the family’s Firebase profile, app state, photo documents, and authentication account, then clear local app data. If core cloud deletion fails, the app keeps the account available so the adult can retry. Synced data on an offline device may remain until the device reconnects or its local browser data is cleared.
The app also requests removal of progress-email and digest records. That separate server purge can fail even when the client deletion flow continues. If an adult needs confirmation that email, digest, or delivery records were removed, they should submit a privacy request through the Contact page. Limited billing, tax, fraud-prevention, chargeback, security, audit, and legal records may still be retained.
Requests
An account holder can request access, correction, supported export, profile deletion, account deletion, or an explanation of a feature’s data handling through the private Contact form. Sage’s World may need to verify that the requester controls the family account before releasing or deleting information.
9. Children, security, and changes
Adult direction and practical safeguards.
The account holder decides what learner information is appropriate to enter and supervises use based on age, ability, consent, safety, and local law. A learner should not independently purchase a subscription, enable AI or Speech Coach, or consent to a new data-sharing feature.
Sage’s World uses HTTPS connections, provider authentication, scoped service functions, Firebase security controls, App Check, and access controls intended to protect information. No online service can promise perfect security. Families can reduce risk by using a unique password, protecting the Parent PIN, limiting shared-device access, entering only what the feature needs, reviewing uploads, and deleting information that is no longer useful.
Providers may process information in Canada, the United States, or other regions used by the configured service. Information processed outside Canada may be subject to the laws and lawful-access processes of that location.
Do not use Sage’s World or the contact form for emergencies. Schools, agencies, and service organizations remain responsible for their own privacy, security, accessibility, consent, recordkeeping, procurement, and legal duties.
Policy changes
This policy may change as the product, providers, plans, or legal requirements change. The date and a meaningful summary should be updated when a material change is published. When appropriate, Sage’s World will provide notice before a material change takes effect.
Use the smallest amount of information that makes a feature useful
Core learning works without AI or Speech Coach.
Optional tools should remain adult-controlled, clearly explained, and easy to leave off.