Privacy Policy
Last updated: July 13, 2026. This policy explains what OmaReads collects, how we use it, and the choices you have. We wrote it in plain language because the people trusting us with their children's reading data deserve to understand it.
Information We Collect
To run OmaReads we collect a small set of information from adults (parents and educators), never directly from children:
Account & billing. The email address you use to sign up for a subscription, plus the billing details Stripe collects when you pay. OmaReads never sees or stores your full card number — Stripe handles that.
Child profile names. When you add a child to your family account, you choose a nickname (e.g. "Ada"). We store only the name and which subscriber account it belongs to. We do not ask for birthdays, school names, photos, or any other identifying details.
Reading session data. When Ms. Oma guides a child through a story or lesson, we log the story, accuracy, duration, and per-word attempt events so we can show progress in your dashboard. Sessions are tied to your subscriber email and to the active child profile.
Site analytics. We record the pages visitors view, the referring page, a hashed IP address (a daily-rotating salt makes it one-way), and an httpOnly session cookie. We use this to understand which stories and lessons are working.
Support emails. If you write to hello@msoma.coach, we keep what you sent us so we can help you and follow up.
How We Use Your Information
Everything we collect is used to run OmaReads and improve it:
Manage subscriptions, send renewal reminders, and process payments through Stripe. Track per-child reading progress so families can see how each child is doing. Power Ms. Oma's reading-coach feedback and adaptive lesson pacing. Detect abuse, debug issues, and respond to support requests. Send the weekly reading-digest email (only to active subscribers — unsubscribe anytime).
We do not use your information for advertising. We do not build advertising profiles. We do not retarget you across other sites.
Sharing & Third Parties
OmaReads does not sell, rent, or trade your information. We share the minimum necessary with a small set of trusted processors:
Stripe — payment processing for subscriptions and PDF store purchases. Stripe receives your email and payment method at checkout and returns a subscription record to us.
Neon (PostgreSQL) — our database host. Subscriber records, child profiles, reading sessions, and analytics live here.
Cloudflare R2 — storage for Ms. Oma's audio and video assets, lesson images, and downloadable PDFs.
Polsia — the platform that hosts OmaReads and provides analytics event ingestion plus the AI-agent API Ms. Oma uses for reading-coach feedback. (Polsia is our infrastructure provider, not a marketing partner.)
We may also disclose information if required by law (court order, valid subpoena) or to protect the safety of a child or our users. We will tell you if that ever happens, unless we are legally barred from doing so.
Children's Privacy
OmaReads is built for children ages 3–9, but our accounts belong to adults — a parent's or educator's email is always the account holder. We do not knowingly collect personal information directly from children. We do not ask children for their name, email, address, phone number, or any contact information. The only child-related data we store is the nickname you choose for them inside your family account.
We do not place third-party tracking pixels, retargeting tags, or behavioral advertising on any page a child is likely to view. Our analytics are first-party, server-side, and tied to a hashed IP rather than a child's identity.
If you believe a child has been signed up as an account holder (rather than added as a child profile under your account), please email hello@msoma.coach and we will close that account and delete its data.
Data Retention & Deletion
We keep subscriber records for as long as your subscription is active, and for up to 90 days after cancellation so we can restore lapsed accounts. Reading-session analytics are kept for 24 months so families can see long-term progress. Support emails are retained for the duration of the support relationship plus a reasonable period afterward for record-keeping.
You can request deletion of your account, child profiles, and reading data at any time by emailing hello@msoma.coach. We confirm the request and complete deletion within 30 days. Deletion is permanent and cannot be undone.
Cookies & Local Storage
OmaReads uses one first-party cookie: oma_session, an httpOnly UUID that lets us attribute page views and reading sessions to a single visit so the analytics are coherent. It expires after 24 hours and is not used to track you across other sites.
We use minimal browser localStorage to remember which child is currently reading ("Who's reading today?") so the picker doesn't appear on every visit. You can clear this from your browser settings at any time.
We do not use third-party analytics cookies, advertising cookies, or social-media tracking pixels.
Your Rights
You can:
Access the personal data we hold about you (we'll send you a copy). Correct inaccurate data (sign in to your dashboard or email us). Delete your account, child profiles, and reading data. Cancel your subscription from your dashboard at any time — cancellation stops future billing and access continues through the end of the current billing period. Opt out of the weekly progress-digest email at any time.
To exercise any of these rights, email hello@msoma.coach.
Changes to This Policy
If we make a material change — something that broadens what we collect or how we use it — we will email active subscribers at the address on their account before the change takes effect. Non-material changes (clarifications, typo fixes, contact-email updates) will be posted here with an updated "Last updated" date.
Contact
Questions, concerns, or data requests: hello@msoma.coach. A real person reads every message and replies — usually within a couple of business days.