Privacy Policy
Last updated: October 10, 2026
This Privacy Policy explains how Ga-loo(“we”, “us”) collects and uses your information. We are committed to protecting your data in compliance with GDPR and applicable laws.
Students by code, never by name
We never request or store a child’s name, date of birth or other identifying details. If you track a student, you choose a short code (up to six letters or digits, such as “JT” or “A3”) and, optionally, an age band. There are no fields for names, birthdays or free-text notes. Practice materials are generated from a target sound, an age band and a neutral theme (e.g. “dinosaurs”), never from a child’s data. Do not enter a child’s initials or any other identifying information as a code.
1. Information We Collect
- Account data: your email address and a securely hashed password. We do not store your password in plaintext.
- Generated content: the practice packs you create and their parameters (sound, position or phonological process, age band, theme).
- Student progress records: if you use the students feature, the code and optional age band you choose, the goals you set, and the practice data you log (date, level, correct and total tries, cue level). These records are visible only to you. Deleting a student permanently deletes their goals and session data.
- Usage data: IP address and browser type, collected automatically for security and performance.
2. Payment Processing
Payments are handled by Stripethrough Stripe Managed Payments, with Stripe's Link acting as Merchant of Record. We do not store or collect your credit card details. All payment data is processed directly by Stripe in accordance with their Privacy Policy.
3. Use of Information
We use your data only to:
- Provide and maintain the Service.
- Communicate with you regarding updates and support.
- Ensure security and prevent fraud.
We do not sell your personal data to third parties.
4. Storage
Generated worksheets and images are stored on Cloudflare R2 and served through expiring private links. Account data is stored in our PostgreSQL database. You can request deletion at any time.
5. Cookies
We use essential cookies to keep you logged in and anonymized analytics cookies to understand how the Service is used.
6. Your Rights
You have the right to access, correct, or delete your data at any time. You can request full account and data deletion by contacting support.
Contact Us
If you have any questions, please contact us at support@ga-loo.com.