Privacy policy

Effective October 9, 2026 (replaces the October 2, 2026 policy, which covered the website only)

This policy covers rumpusreading.com, the website for Rumpus Reading, and the Rumpus app at app.rumpusreading.com. Both are made by Compounding Knowledge Company. Part 1 is about the website. Part 2 is about the app, where a parent creates an account and a child reads. Part 2 is the notice we owe you under the children's privacy law before we store anything about your child, so please read it before you create an account.

Part 1: the website

What we collect

• Your email address, if you join the waitlist. We ask for nothing else, and nothing about your child.
• Where you found us, saved with your signup: the ad, post, or site that sent you, if the link said so. This tells us which ways of reaching parents work.
• Visit counts. We use Vercel Web Analytics to count page views and see which sites send visitors. It uses no cookies and does not identify you. When we run ads, the ad platform's pixel on this page also records that you visited and whether you joined the waitlist, so the platform can tell us which ads work. If you join, the platform also receives a scrambled (hashed) copy of your email address, which it uses only to match the signup to the ad that led to it. It cannot read the address back from the hash.

What we do with it

We use your email to tell you about Rumpus: when the beta opens, and occasional updates before then. We do not sell or rent your information, and we share it only with the services that run the site and send our email, who may use it only to do that work for us.

The website's services are Vercel (hosting and visit counts), Supabase (the waitlist database), Loops (our email list and the emails we send you), and Google Workspace (our email).

Your choices

• Unsubscribe from any email we send, using the link at the bottom of it, or by replying to ask.
• Ask us to delete your email, or to tell you what we hold about you, by writing to hello@rumpusreading.com. We will do it within 30 days.

Part 2: the Rumpus app

Who the app is for

The app is for parents and guardians. A child uses Rumpus only through a parent's account, with the parent beside them. We collect nothing from a child directly. Everything we hold about a child comes from the parent, or from the reading the parent does with the child in the app.

What we store about you

• Your email address and password. The password is stored scrambled, so no one at Rumpus can read it.
• Your agreement: the time you agreed to this policy and the terms, which version you agreed to, and how (you confirmed your email address and checked the box).
• What you write to us, if you email us or flag a story in the app.

Rumpus is free during the beta. If it becomes paid, a payment company will handle your card, and we will never see the card number. We will tell you before anything is charged.

What we store about your child

• A first name. It can be a nickname. It is used to address your child on screen.
• A birth month and year. Never the day. The age sets the length of a session and the pace of new sounds.
• The start level you choose, and your answers to the two readiness questions.
• What your child read each day, and how it went: which lesson, the sound it taught, the words your child read and how each one went, each story's title and text, and where a paused lesson or story left off. This record is what Rumpus uses to choose the next lesson and the next story.

Nothing else about your child is collected: no photo, no audio, no video, no location, no school, no contacts, and no advertising identifiers. The app has no analytics or tracking code.

Why we store it

To sign you in. To choose the next lesson and the next story, which depends on the record of what your child has read. To show you how your child is doing. To answer you when you write to us. That is all.

The story writer

Each story is written on the spot by an AI model from Anthropic, inside rules we set, and checked by our own software before it is shown. The request we send carries the words and sounds your child is practicing, the character names a story may use, and the titles and settings of recent stories. It does not carry your child's name or age, or anything about you. Anthropic processes the request to write the story and, under its commercial terms, does not use it to train its models.

Who else handles it

Only the services that run Rumpus, and each may use the data only to do that work for us:

• Vercel serves the app. Its servers keep ordinary connection logs for a short time.
• Supabase holds the database and sends the sign-in emails (confirming your address, resetting a password). The database is on servers in the United States.
• Anthropic writes the stories, as described above.
• Google Workspace carries our email when you write to us.

We do not sell your information or your child's, share it for advertising, or show ads. We would hand it over only if the law required us to.

Your rights as a parent

• See it. The Account screen shows everything the app holds about each child, and the reading record is the app itself. For a full copy, write to us.
• Delete it. Delete my account, on the Account screen, removes your account, every child on it, and every reading record at once. You can also write to us and we will do it.
• Stop further collection. Rumpus stores a reading record only when you run a session, so stopping is in your hands. Deleting the account ends it entirely.

We answer requests within 30 days. To protect your child, we will first check that the request comes from the email address on the account. We will never ask for more about your child than Rumpus needs to work.

How long we keep it, and how it is deleted

• While your account exists, we keep the reading record, because it is what Rumpus works from.
• When you delete your account, the account, the children, and every record under them are deleted at once. A copy can remain in our database backups for up to 30 days, and then it is gone.
• If you stop using Rumpus, we will email you after twelve months without a sign-in, and delete the account 30 days later unless you sign in.
• Your waitlist email is kept until you unsubscribe or ask us to delete it.

How it is protected

Everything travels over an encrypted connection. Passwords are stored scrambled. Each account's data can be read only by that account; the database enforces this on every row. No one at Rumpus reads a child's record except to fix a problem you have reported to us.

Children's privacy

Part 2 is our direct notice to parents under the Children's Online Privacy Protection Act. We do not knowingly collect personal information from a child under 13 except through a parent's account, after the parent has confirmed their email address and agreed to this policy. If you believe a child has given us information in any other way, write to us and we will delete it.

California residents

We do not sell or share personal information, and we have no advertising partners. The rights above (to see, delete, and stop) are the ones California law gives you, and we extend them to everyone.

Changes

If we change this policy, we will post the new version here with a new effective date. If a change would let us use your child's information in a new way, we will email you first and ask for your agreement again in the app before the change applies to your child.

Who we are

Rumpus Reading is made by Compounding Knowledge Company, 5737 Kanan Rd #816, Agoura Hills, CA 91301, United States. Questions and requests: hello@rumpusreading.com or (820) 386-7971.