Skip to content

Privacy Policy — Skill Up

Last updated November 6, 2026

Skill Up is a thinking-fluency and typing practice app for children aged 8 and up. Children under 13 may only use Skill Up with a linked parent account (see our Parent info & child safety note).

This policy explains, in plain language, what information the app collects, why, who can see it, and how to delete it. This is a product description, not legal advice.

1. Who we are

Skill Up is operated by the Skill Up team, based in India. Our contact for privacy questions and deletion requests is divit.yadav44@gmail.com — we respond within 30 days. Details are in Data deletion & contact.

2. Account information (handled by Clerk)

We do not run our own login system. Sign-in and sign-up are handled by Clerk, using email + password or Google sign-in. From Clerk we receive and store:

  • Clerk user ID (a technical identifier for your account)
  • Email address
  • Display name (first + last name, username, or a generated name if none is given)
  • Profile photo URL (from your login provider, or a generated identicon if none)

If no email is available from the login provider, we store a placeholder address tied to your account so the account keeps working. Signing out of Skill Up also clears your in-progress session draft from the device (see §7).

3. Learning data your child creates

This is the core of the app. For each practice session we store:

  • The full text your child types (recall passages and answers to guided questions)
  • Practice metrics derived from typing: words typed, typing speed (WPM), fluency score, pause patterns, session duration
  • Vocabulary words looked up or added, the sentences your child writes with them, and mastery progress
  • Reading level estimates, comprehension scores, topics explored, streaks, points, and weekly progress summaries

This learning data is what lets the app adapt passages, track progress, and show parents and teachers how the child is doing.

4. Parent, teacher, and classroom links

  • Parent–child links: a child generates a 6-character code (valid 24 hours), or a parent saves an in-app invite for the child's email. The other side must accept before the link becomes active. Either side can revoke the link at any time.
  • What linked parents see: a dashboard with learning summaries, progress graphs, vocabulary, and session-level results. Shared preview links (see below) intentionally show less.
  • Shared parent links are preview-only. A parent can create a read-only dashboard link or share a weekly-insight card link. These links open without sign-in but show only a small summary — they never include the child's full typed writing. Share links expire automatically. A parent can disable a dashboard link at any time, which immediately revokes access. We commit that any future option to share fuller detail will be per-session and require an explicit action — never automatic.
  • Teachers and classrooms: a teacher creates a classroom with a class code; students join with the code. Teachers see enrolled students' names, emails, progress, and assignment work, and can export a classroom CSV (summary or evidence scope). A removed student cannot rejoin until readmitted. There is no separate "parent" account type — a parent is simply an account linked to a child.

5. How AI is used, and what text is sent to AI providers

Skill Up uses AI to evaluate recall, generate reading passages, check vocabulary use, and build weekly insights. When AI runs, the relevant text is sent to the provider:

  • Google Gemini (primary): receives the child's typed recall text, passage content, vocabulary and sentences, progress stats, and — when generating passages — the display name and interest topics.
  • NVIDIA NIM (fallback): receives the same kind of content as Gemini when it handles a request.
  • OpenCode Go / Muse Spark (Meta) (fallback for passage generation only): receives topic, level, and word-count targets without learner identity, topic history, interest signals, or vocabulary data. Our code notes that Muse Spark prompts and completions may be used to train future Meta models, so we deliberately exclude identity and history from what we send there.

We do not scrub names or personal details out of typed recall text before sending it to Gemini/NVIDIA — so please ask your child not to type sensitive personal information (addresses, phone numbers, school names) into practice sessions. Typing is for practice passages, not private details.

Our service providers (subprocessors), with links to their privacy and data-processing terms:

6. What we do NOT collect or do

Based on the app as it exists today:

  • No exact keystroke logging stored. Typing rhythm is measured to compute fluency scores, but we do not keep a stored per-key log — only the resulting scores and aggregates.
  • No voice or audio recording. The app can read passages aloud (text-to-speech) and play ambient sound, but it never records microphone audio.
  • No file uploads. There is nowhere to upload photos, videos, or documents; profile photos come from the login provider only.
  • No advertising, no sale of data, no third-party analytics or ad trackers in the app. We use no analytics SDKs (no Google Analytics, Mixpanel, Amplitude, PostHog, or crash-reporting SDKs).
  • No marketing or invite emails from us. Parent invites are delivered in-app only — the app sends no invite emails, and feedback is sent only if you choose to open a Gmail draft to us yourself.

7. Cookies and on-device storage

  • Cookies: the app's own code sets no cookies and shows no cookie banner. The only cookies are the session cookies set by Clerk to keep you signed in.
  • On-device storage (localStorage / sessionStorage): the app keeps UI preferences (theme, font size, read-aloud voice, ambient sound) and your in-progress session draft (current text, typing timeline, answers) on the device for up to 24 hours so work isn't lost. Signing out clears session drafts from the device.

8. Retention

Learning data is kept while the account is active so progress isn't lost. Server logs are retained for 30 days. There is currently no automatic deletion schedule beyond that — live data stays until you ask us to delete it (see Data deletion & contact). Share links and invite codes expire automatically (share links on their stated expiry date; link codes after 24 hours). We do not currently offer a self-service "download all my data" button; ask us at divit.yadav44@gmail.com and we will help within 30 days.

9. Children's privacy

Skill Up is for ages 8+. A child under 13 must have a parent account linked, and we treat the parent as the consenting adult for that child's use: parents can review the child's learning data, revoke links and shared URLs, approve or decline friend challenges, and request deletion. Details are in Parent info & child safety note.

What we still need to verify as owners: we have not yet confirmed which production data-processing agreements are countersigned with the vendors listed in §5, nor verified our production Clerk settings (e.g., whether any age screen or under-13 restriction is enforced at sign-up). Until verified, this policy describes the app code and the vendors' public terms linked above, not signed backend arrangements.

10. Changes to this policy

If we change what we collect or share, we will update this page with a new date. Material changes affecting children will be communicated to linked parents in the app.

About this document

This policy was drafted from the Skill Up source code as of November 2026. Anything we could not verify from code (production vendor settings, contracts) is flagged above or tracked for owner review before publication.