1. Overview
Bailiwick Languages ("Bailiwick," "we," "us") is an English–Spanish learning service for elementary learners, families, and educators. Adults create and control family and teacher accounts. Learners do not need their own email address.
The short version: Bailiwick uses account and learning data to provide the service, does not sell personal information, does not show behaviorally targeted advertising, and does not use learner activity or Orb conversations to train Orb.
If a school provides Bailiwick, the school may give families an additional notice and may control education records associated with the school account. This policy applies to Bailiwick's own handling of information.
2. Information we handle
| Category | Examples and purpose |
|---|---|
| Adult account | Email address, password handled by our authentication provider, adult display name, and family or educator role. We use these to sign adults in and protect their workspaces. |
| Learner profile | A first name or nickname, grade band, learning direction, avatar choice, family or classroom relationship, and access credentials such as a hashed learner PIN. |
| Learning and classroom records | Activities presented, answers and correctness, attempts, hints, audio replays, timestamps, assignments, placement results, progress, mastery, review timing, and teacher feedback. These records power the learning path and adult progress views. |
| Adult-created curriculum | Teacher-entered instructions, uploaded or pasted source text, draft activities, reviews, and publication history. Teachers are instructed to remove names, contact details, addresses, credentials, and other identifiers before submitting a source. |
| Consent and safety records | Versioned adult policy acceptance, voice-processing choices, security events, and bounded rate-limit or audit receipts needed to protect accounts and demonstrate important decisions. |
| Technical information | Browser, device, network, request, error, and security-log information normally processed by hosting, authentication, and database services to deliver and protect the site. |
Orb's local AI
On a supported device, an adult can approve downloading Orb's model files from Hugging Face into that browser's storage. Orb then generates tutor responses in the learner's browser. The current Orb interface keeps chat text in the open tab and does not save the prompt or response to Bailiwick's database or send it to a hosted AI chat API. Bailiwick's server does provide a short-lived, answer-free curriculum context pack and processes ordinary authenticated request data.
Clearing browser storage or using the adult model-removal control removes the local model files. A browser may also remove them when storage is scarce.
Account protection
Cloudflare Turnstile checks account forms for automated abuse. Cloudflare receives technical information such as the IP address, browser information and challenge results. Bailiwick and Supabase use the result to protect sign-up and sign-in. The challenge does not send Orb chat messages to Cloudflare.
Voice and listening practice
Voice rehearsal requires the latest adult voice-processing choice. When supported, speech recognition is configured for local processing only. Conversation listen-back may make a temporary recording in the current tab. Bailiwick does not upload, save, transcribe, grade, or use that recording for training, and it is discarded when the rehearsal ends or the tab closes. If local recognition is unavailable, Bailiwick leaves text and listen-and-repeat options available instead of silently using remote recognition.
Teacher curriculum generation
When an educator uses an enabled curriculum-generation feature, the teacher-provided source may be sent to the AI provider configured for that deployment. The resulting draft is bounded, saved with review history, and must be reviewed by an educator before it can be approved or published. Educators must not place student personal information in a curriculum source.
How we use and share information
We use information to operate accounts; provide lessons, games, assignments, and progress; personalize deterministic practice; support families and teachers; prevent abuse; troubleshoot; and meet legal obligations. Orb cannot grade, change mastery, approve curriculum, or publish content.
We disclose information only as needed to:
- authorized family members, educators, and school administrators within their relationship-scoped workspace;
- service providers that host or secure the service, including Netlify, Supabase, Cloudflare Turnstile, and Hugging Face, and a configured curriculum-generation provider when that adult feature is used;
- comply with law, protect safety and rights, investigate abuse, or respond to a valid legal request; or
- complete a business reorganization with protections appropriate to the information.
We do not sell personal information or disclose a child's information for cross-context behavioral advertising.
Children and school use
Bailiwick is designed for adult-controlled access. A parent or guardian should create and control a family learner profile. A school may authorize a school-managed learner profile for a school-directed educational purpose where permitted. School authorization does not permit Bailiwick to use a learner's information for unrelated commercial purposes.
Schools should evaluate their own obligations under FERPA, COPPA, state student-privacy laws, contracts, and local policy. Bailiwick will follow the applicable school agreement and authorized school directions. This public policy alone is not a claim that every school deployment is automatically FERPA- or COPPA-compliant.
3. Adult choices and retention
An authorized adult can manage learner voice consent, remove Orb's local model files, and control classroom relationships available in the service. An adult may also ask us to:
- describe or provide the personal information associated with an account or learner profile;
- correct inaccurate account or learner-profile information;
- delete an account or learner personal information, subject to required school, security, legal, and backup retention; or
- stop further collection where the request can be honored without making the requested service impossible.
A signed-in permanent adult can use the account privacy center to download a bounded, allowlisted JSON copy of their own adult account data. An adult with an active family relationship can also download the included profile and core learning evidence for a family-managed learner. These immediate downloads deliberately exclude credentials, access codes, answer keys, security logs, other people's records, and several school, provider, backup, and internal game categories. They are useful self-service copies, not a claim of a complete statutory or school-record export.
The privacy center also creates a trackable request for a reviewed export, correction, stop-collection request, or deletion review. Submitting a request does not automatically delete or change information. Identity, family-versus-school authority, legal holds, third-party records, provider copies, and backup scope must be reviewed before broader disclosure or deletion.
We retain account, learning, assignment, and curriculum records while they are needed to provide the service, meet school directions, protect security, resolve disputes, or satisfy legal obligations. We do not intend to retain child personal information indefinitely. Exact category-by-category periods, school allocation rules, provider schedules, and backup expiration still require owner and legal approval before a public production launch; Bailiwick must not represent deletion as complete until those controls are adopted and verified.
Orb's current chat is retained only in the open browser tab. Locally downloaded model files remain until an adult removes them, the browser clears them, or the device's storage policy removes them.
4. Security, changes, and contact
Bailiwick uses relationship-scoped access controls, row-level database rules, encrypted network connections, hashed learner access credentials, bounded inputs, rate limits, and human curriculum-review gates. No service can guarantee perfect security, so please report a suspected issue promptly and do not include a child's password or unnecessary personal details.
We may update this policy as the service changes. We will change the date above and provide additional notice or renewed adult choice when a change is material and applicable law requires it.
For a privacy question or an adult access, correction, or deletion request, email beginnerbookworms@gmail.com. Please write from the adult account email when possible. Do not place a learner's password, PIN, or full activity history in the message.
Current United States child-privacy guidance is available from the Federal Trade Commission's COPPA guide.