← Back

Privacy Policy

A New Page, an at-home structured-literacy reading program for children.

Effective October 19, 2026 (first published June 13, 2026). We'll post the date of any future change here.

In plain words: there is a short version written for your child, too. Read it together.

Who we are, and how to reach us

A New Page is operated by a for-profit limited liability company registered in Washington, D.C., United States. Under the U.S. Children's Online Privacy Protection Act we are the operator of this service; under UK and EU data protection law we are the data controller for everything described in this policy. We are the only operator, there is no other company collecting information through A New Page.

• Registered company name: A New Page LLC, registered in Washington, D.C.
• Postal address: A New Page LLC, 61 Adams Street NW, Washington, DC 20001, United States
• Email: jnclark@anewpagereading.com
• Telephone: +1 202-294-3505

Children's-privacy law asks an operator to print its name, address, telephone number and email here. All four are printed above.

Who this policy is for

A New Page is intended to be set up and managed by a parent or guardian. Children use the program under a parent's account. When you add a child in the app's setup, you (the parent or guardian) tick a box that gives consent for us to handle the limited information described below on your child's behalf. The one free night starts without that step; Children's privacy below says exactly what reaches us before it.

What we collect, and what we don't

What we collect

• Parent email address, used to sign you in (we use a one-step "magic link," so there's no password), to send you important account or progress messages, and to send a few short notes: a welcome, three notes about your free week (around day 3, the day before it ends, and the day after it ends), a reminder before a paid year ends, and the Friday Note if you asked for it. Every note has an unsubscribe link, and a signed-in parent can also turn notes off in Settings. If you came through a partner or therapist link, your sign-up is counted for that partner (they see counts only, never your email).
• Your child's first name, so the program can greet them and personalize their story. We ask for a first name only, and it stays on your device. It is never sent with a night's progress summary, a one-minute read or the free reading check (changed October 15, 2026, see below), and signing in does not send it either: your account keeps the reading record under the private child ID, with no name, and each new device you sign in on asks you for the name once (changed October 17, 2026). The one exception is sharing: if you choose to share a reader with another grown-up, the first name is copied to their account along with the reading record, so they see it too. It is never sent to our server for any other reason.
• Your child's birth year, so stories are pitched at an age-appropriate register, never to set their reading level, which comes only from the placement check (we do not collect a full date of birth).
• Your child's gender (boy or girl), used only to choose the right pronouns in their story. It stays on your device. Nothing more.
• Reading-progress data, which lessons your child has done, words they found tricky, Reading Week nights, badges, and reading-check scores. This is what lets the program teach effectively and lets you see growth.
• A short summary of each night. When your child finishes a night, the app sends our server a short summary: your child's age, the lesson step and level, how many minutes the night took, how many words were read and spelled correctly, the words missed, which story world your child is in, and, in a reading-check week, the fluency score. If you came through a partner or therapist link, the summary also carries the code and the therapist tag that brought you, so your child's growth can be credited to the practice that gave you A New Page. The summary is filed under two random codes the app makes up and keeps in your browser, one for the device and one for the child (the private child ID), and never next to your email or account. The codes stay the same from night to night, which is how growth over time is measured. This happens whether or not you have signed in. The nightly summary carries counts and step codes only. It never carries your child's first name, which stays on your device. If you ask us to find or delete your records, we find them by your account email and those codes. Clearing your browser's site data erases both codes.
• The one-minute read. Each one-minute read (about once a week) uses no microphone and makes no recording: you mark the missed words yourself, and only the scores (words read correctly, accuracy, and your marks for understanding and how it sounded) are sent to us, filed under the same private child ID as the nightly summary, never a name.
• Which link brought you. If you arrive through a partner's link or code (a therapist, a tutor, a reviewer, a co-op or a school), or through a link we tagged to see where families come from, the app remembers that tag on your device. It is saved with your sign-up and with each night's progress summary, so we can tell that partner how many families joined, measure how families from each partner are doing, and learn which links help families find us. A partner sees counts only: how many families joined, how many have read a night, how many continued. Through us a partner never sees your email, your child's first name, or your child's reading scores. You share your own weekly report with them if you choose to.
• Payment status, whether your subscription is active. (See "Payments & service providers" below, we never see or store your card number.)
• What the free reading check sends us. The check itself runs in your browser, but the result is behind an email step. The moment you enter your email to unlock it, we receive your email address, the page you were on, and a short label and tag recording which step you came from (we use those to tell a reading-check sign-up apart from, say, a school enquiry). Your child's first name and age are not sent; they stay on your device. We do receive the reading level the check lands on and a short reason for it, built from where the reading got hard (for example, "vowel teams like ai, igh, ou"), so the result we email you is meaningful. The same is sent again if you afterwards ask for the printable summary by email. Your email is saved as one row on our own contact list, in our database (Supabase, United States), and we use that list to send you what you asked for and to follow up with you about A New Page. It is never sold, never rented, and never shared for anyone else's advertising, and one email to us deletes the row. This is the one place where the free reading check puts anything on a list we market from, so we would rather say it here plainly than let you discover it.

What we deliberately do NOT collect

• We never record or listen to your child's voice. A New Page has no microphone feature and no speech recognition. Your child reads aloud to you, and you mark the words. No audio is ever captured, transmitted, or stored.
• No last name, home address, phone number, or precise location.
• No photos or videos of your child.
• No advertising identifiers, and no third-party advertising or behavioral tracking on any screen your child uses. We run no ad network, no ad pixel and no analytics company's script anywhere on the site. Some of our pages for parents and schools embed a Vimeo video player, which we ask not to track you, see "Payments & service providers" below.
• Our own usage counts, exactly. So we can see which pages get opened and fix the rough spots, we count page views on our own servers. A count carries five small things and nothing else: the page path; a flag for whether an invited professional reviewer is looking; a random token that lives only until you close the tab, so ten pages in one visit are counted as one visit rather than ten; the hostname of the site that sent you to us, if you arrived from another site (the site's name only, never the page, never what you searched for); and a flag marking our own test browsers, so our testing stays out of the real numbers. Counted the same way, once per tab: a code on a link we shared (for example a link posted in one particular parents' group), and a few milestone names such as "email captured", so we can see where people get stuck.
  It carries no name, no email, no child data, no cookie, and no IP address. The tab token is erased when the tab closes and is never joined to your email, your child, or your device, so the counts cannot follow you from one visit to the next, from one device to another, or onto any other website, and no analytics company is involved at any point, it runs on our own server. It is modest, and it is more than a bare tally: an earlier version of this policy said these counts carried "no identifier of any kind", and that overstated it, because of the per-tab token. This is what it actually sends.
• Crash notes when something breaks. If the app hits an error, we send a short crash note so we can fix it: the page, the lesson step, and the error text (trimmed to 200 characters, with any child first name removed automatically). It carries no name, no email, and no browser or device fingerprint. Our server does not keep your connection's IP address with it: to stop one device flooding us, it keeps a scrambled code made from the address that changes every day and cannot be turned back into the address. The same goes for the rare automatic security report your browser sends us when a page blocks something it should not load.
• Your country, to show prices, and your state, to show a funding note. To show prices in your currency, our server looks up your country from your connection when you open a page that shows a price. On some pages for parents in the United States it also looks up your state the same way, so it can show a short note when your state has education funds (such as an ESA) that can pay for A New Page. Neither lookup happens on a page your child reads or plays on. We do not store either one, and we never use your device's location (no GPS).
• The feelings questions. About every two months, after a night, your reader may be asked five short questions about how reading feels. The answers stay on your device. They are never uploaded and never shared. You can switch these questions off in Settings.

How we use what we collect

• To run the lessons and personalize them to your child's level.
• To save your family's progress and let it follow you to any device when you sign in.
• To show you your child's progress and weekly notes.
• To manage your subscription and send essential account messages.

We do not use your family's information to advertise to you or your child, and we do not build advertising profiles.

Where your data lives, and how it's protected

Your family's progress is stored on your device and, if you sign in, synced to our secure database (hosted by Supabase, in the United States). Data is encrypted in transit. Each family's data is locked to that family's account with database-level security rules, so one family can never see another's information. The one exception is one you make yourself: if you choose to share a reader with another grown-up (see the next section), that one child's reading record is visible to the accounts you shared it with, and to nobody else. Your email sign-in is handled by industry-standard authentication.

No IP addresses kept. Our server does not store your connection's IP address. Where it has to tell one sender from another (to stop one device flooding us, or someone guessing codes), it keeps a scrambled code made from the address that changes every day and cannot be turned back into the address.

One cookie, strictly needed. When our server has just confirmed that a device belongs to a family with a paid plan or a restored membership, it sets one signed cookie on that device so it is remembered as a member. It holds no name and no child data, page scripts cannot read it, it is sent only to our own server functions, and it is never used for tracking or analytics.

Sharing a reader with another grown-up

A child often reads with more than one adult: a parent at home, and a teacher, therapist or tutor. If you choose to, you can invite one grown-up to one child: on your family home, open that child's reader, choose Share a reader, pick what they may do (Therapist or tutor: sees the report and can run sessions; Viewer: sees the report only), and give them the code. The code works once and for seven days, and a new one is made every time. When they use it and sign in with their own email, they choose the name you will see them by (for example "Ms. Lee"), and that one child's reading record (first name, birth year, level, nightly progress, story position and the child's own stories) is copied to their account and kept in step between you. This is the one time your child's first name leaves your device, and only because you chose to share. Nothing else is shared: not your other readers, not your email address, not your account, and nothing about payment. Each code is for one child, and at most six accounts can be on one reader.

You, the parent, are the only owner. Settings lists who can see each child, by the name they chose and their role, with a Remove button: removing someone deletes their access on our server, and the child leaves their device the next time it syncs. A grown-up you invited can also stop on their side, which removes only them. Settings also shows you when they last opened your child's report. If you delete your account, every reader you shared is deleted too, with the other grown-up's access to it and any invite code not yet used; the next time their device syncs, the reader is no longer shared with them, and nothing about your family is sent to them. A reader someone else shared with you stays theirs; you are simply taken off it. If you open someone's code and then ask us for a sign-in link, we keep a note of that code against your email address for up to seven days, only so the reader can be offered to you after you sign in. You are asked before anything is added.

Schools, clinics and therapists

A teacher, tutor or therapist sees a child's reading record only when the family shares that reader with them, and the family can remove them at any time. We do not receive education records from schools unless a school sends them; if a school wants to, we first agree in writing how the information is used, only for that school's purposes and under its direction, as FERPA expects of a school official, and we delete it when the school asks. Student data is never sold and never used for advertising. More on our page for schools and programs.

Payments & service providers

We do not sell or rent your information, and we don't share it for anyone else's advertising. We use a small number of trusted providers strictly to run A New Page, and share only the minimum data needed:

• Supabase, secure hosting of your account and your family's progress (United States).
• Stripe, payment processing. You enter your card details directly with Stripe; we never see or store your card number.
• ElevenLabs, which makes the recorded letter-sound, word and instruction audio. No child's voice or data is sent to it.
• Netlify hosts the website and securely receives any form you choose to send us (United States).
• Typefaces are served from our own site (through Netlify, above). No request goes to Google Fonts or to any other font service when a page loads.
• Vimeo hosts our videos. Several pages for parents, schools and funders embed a Vimeo player, so when you open one of those pages your browser fetches the player from Vimeo and Vimeo sees that request, including your IP address. We set Vimeo's "do not track" flag on our embeds, which switches off its analytics and advertising cookies for the player. There is no video player on the lesson screens your child uses.
• Resend delivers our email, such as your reading-check link, getting-started notes and account messages. It receives your email address and the contents of the message.
• Email sign-in. One-step sign-in links are sent through our authentication provider (Supabase) so you can get into your account.

The contact list described in "What the free reading check sends us" lives in the same Supabase database. Your email address, if you gave it to us at the end of the reading check or when you joined, sits on it until you ask us to remove it. We do not upload it to an advertising platform and we do not share it with anyone.

We may disclose information if required by law, or to protect the safety and rights of children and families using A New Page.

Children's privacy (COPPA)

A New Page is designed for children and is operated in line with the U.S. Children's Online Privacy Protection Act (COPPA). We collect only the limited information listed above, and only to provide the educational service.

When we ask for a parent's consent. When you add a child in the app's setup, you tick a box confirming you are 18 or older and the child's parent or guardian (or a teacher or tutor with the parent's permission) and accepting our Terms and this policy. That box is the consent step; it is kept, with the date, in your family's record on your device, and in your account if you sign in.

What can reach us before that step, and none of it carries a child's name. Our own page counts and crash notes (exactly as described in "What we collect"). If you use the free reading check and unlock the result with your email: your email, the page and step you came from, and the reading level with a short reason for it, never your child's name or age. And the one free night: you start it yourself, with your reader's age and an optional first name that stays on your device, and there is no account and no consent box yet. When that night finishes, the app sends the short night summary described above (your reader's age, step and level, minutes, words read and spelled right, the words missed, the story world, and any partner link that brought you), plus the scores of a one-minute read if one ran, filed under the two random codes, never with a name or an email. Ask us and we delete it.

We do not condition your child's participation on disclosing more than is reasonably necessary. As a parent or guardian, you can at any time:

• Review the information associated with your child;
• Correct it;
• Delete it and/or close the account;
• Refuse further collection by discontinuing use.

To do any of these, use the in-app controls, or contact us by email, telephone or post using the operator details in "Who we are, and how to reach us" at the top of this page, and we'll help promptly.

For families in the UK, Ireland and the EU

Read this section

If you are in the United Kingdom, Ireland or elsewhere in the European Union, UK GDPR or EU GDPR applies to you, and A New Page is designed to meet the UK Information Commissioner's Age Appropriate Design Code (the "Children's Code") for a service used by children. In plain terms:

• Why we are allowed to use your data (lawful basis). We process the parent's data to deliver the service you have signed up for (performance of a contract), and we process your child's limited data with your consent as their parent or guardian, given when you add your child. The account belongs to the parent; the child never holds it. The age at which a child can consent to online services for themselves is 13 in the UK and 16 in Ireland, which is why we always ask the parent.
• Privacy by default, built for children. The highest-privacy settings are the only settings. We collect the minimum (a birth year and reading progress; the first name and boy or girl stay on your device), we do not profile your child for anything other than their own reading progression, we never use your device's location, and there are no third-party advertising or analytics trackers on any screen your child sees. We never use design tricks to nudge a child toward sharing more.
• Where your data goes, and what is not yet in place. Everything you sync lives in a database hosted in the United States (Supabase), and our email is delivered by a US provider (Resend). That is an international transfer of your data out of the UK or the EU. Today it is protected by encryption in transit, account-level access rules, the minimisation described above, and your consent, which you give when you create your account. What is not yet finished is the formal transfer safeguard that UK and EU law expects for such a transfer, the standard contractual clauses or an equivalent framework with each US provider. We are putting that in place, and we will name the mechanism and the date on this page when it is signed rather than claim it early. In the meantime, if you would rather keep as much as possible off our servers: use A New Page without signing in, and only the short nightly progress summary described above is sent (progress only, under a private code, never your child's name), while your child's full reading record stays on your device.
• One more thing we have not finished, said plainly. There is no consent step yet. When you open a page, before we have asked you anything, the page writes a small amount of data into your browser's own storage and sends the page count described in "Our own usage counts, exactly" above. Under the UK's PECR and the EU ePrivacy rules, storage and analytics that are not strictly necessary to deliver the page should be asked about first, with a real choice, not assumed. Ours is first-party, sets no cookie, involves no analytics company and does not follow you across other sites, but "it is modest" is not the same thing as "you agreed to it". A consent step for UK, Irish and EU visitors is not finished yet. (Our typefaces used to be fetched from Google Fonts, which meant Google received your IP address when a page opened, before you had consented to anything; German courts have held that doing exactly this without consent breaches GDPR. As of September 18, 2026 the fonts are served from our own site and no request goes to Google.) Until the consent step is done, this is the part of A New Page that is behind the standard we hold ourselves to, and we would rather you read it here than find it yourself.
• Your rights. You can ask to access, correct, delete, or receive a copy of your family's data, restrict or object to how we use it, or withdraw consent at any time, by emailing us. We act promptly, at the latest within one month. You also have the right to complain to your regulator: the Information Commissioner's Office (ico.org.uk) in the UK, or the Data Protection Commission (dataprotection.ie) in Ireland.
• Deletion, written for a child too. If you or your child ever want everything gone, tell us. We delete it, including any reader you shared with another grown-up. That is the whole rule.

For families in Australia, New Zealand and Singapore

Read this section

The same principles apply wherever you are, and we hold ourselves to your local law:

• Australia (Privacy Act and the Australian Privacy Principles, and the forthcoming Children's Online Privacy Code): we collect only the minimum, use it only to teach your child and show you progress, never for advertising, and you can access, correct or delete it at any time. You may complain to the Office of the Australian Information Commissioner (oaic.gov.au).
• New Zealand (Privacy Act 2020): because you (the parent) supply your child's information, we tell you plainly what we collect about them and why, which is what this policy does. You can ask to see or delete it at any time, and may complain to the Office of the Privacy Commissioner (privacy.org.nz).
• Singapore (Personal Data Protection Act): we collect and use your family's data only with your consent as the parent and only to provide the service, and a parent consents on behalf of a child under 13. You can withdraw consent and ask us to delete the data at any time. Questions go to the PDPC (pdpc.gov.sg).
• Where your data lives is the same everywhere: a US-hosted secure database if you sign in, or only on your own device if you don't. Encrypted in transit, locked to your account, never sold.

For families in Canada

Read this section

• Where your data is held. If you sign in, your family's data is held in the United States by our database provider (Supabase). If you never sign in, your child's work stays on your device.
• How we handle it. We handle personal information under the ten fair information principles of PIPEDA, Canada's federal private-sector privacy law. In practice that means we ask for consent, collect only what the program needs, let you see and correct what we hold, and protect it with safeguards (encryption in transit and database rules that lock each family's data to that family's account).
• Children. A parent or guardian consents on behalf of a child.
• Your choices. You can see, correct, download or delete your family's data from Settings in the app, or by emailing jnclark@anewpagereading.com. You may also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
• Quebec. Families in Quebec have additional rights under Law 25. Write to us at jnclark@anewpagereading.com to exercise them.
• Schools and school boards. If a school or school board uses A New Page with students, the board's own privacy office decides whether the program meets its rules. We will answer their questions in writing; they can reach us at jnclark@anewpagereading.com.

For your child, in plain words

Hi. Here is what we know about you: which reading step you are on and how many nights you read. Your name stays on your family's device, not with us. We also know how old you are, so the story sounds right for your age and we know a good place to begin (the reading check is what picks your level); and how your reading is going, so we can pick what comes next and show your grown-up how well you are doing. We do not listen to you or record your voice, we don't know your address or where you are. We only guess your country (and in the US, your state), to show your grown-up the right prices, and we don't keep it. And we never show you ads. If you or your grown-up ever want us to forget all of it, just tell us, and we will. That is the whole rule.

Your choices & your rights

• See and edit: your family's information is visible and editable in the app.
• Delete: you can clear your data on a device, and/or ask us to delete your account and all associated data from our database.
• Stay local: if you never sign in, your child’s full reading record stays on your device and nothing is filed under your email. What still reaches us is the page counts described above, the short summary of each night (progress only, filed under the random codes, never a name, see “What we collect”), and, if something breaks, the short crash note (with any name removed). The free reading check is separate: if you unlocked the result with your email, that step sent us your email address, the page and step you came from, and the reading level with a short reason for it, so we could send the result (never your child's name or age). You can ask us to delete any of it.

How long we keep data

We keep your family's data while your account is active so progress isn't lost. If you delete your account, we remove your associated data from our active database and email you a confirmation. That includes every night's summary and every one-minute read filed under your readers' private child IDs and your devices' codes. What stays, with no child data in any of it: your email address with the dates you joined and the free trial you used, so a trial cannot be restarted under the same address; your email switches; our record of which emails we sent you; and, if you ever paid, the billing record (your email, your plan and its dates), which billing and tax law require us to keep. Reply to the confirmation if you want your email address removed too. If you never signed in, "Delete all my family's data" in Settings also asks our server to delete the nightly summaries and one-minute reads filed under that device's code. Local data on your device is removed when you clear it, when you uninstall, and, on iPhone and iPad, automatically by Safari itself if you do not open A New Page for seven days. Turn on cloud save, or add A New Page to your Home Screen, and your family's progress survives that.

Changes to this policy

If we make a meaningful change, we'll update the effective date above and, where appropriate, notify you by email. Continued use after a change means you accept the updated policy.

October 19, 2026. Corrections, so this page matches what we do. Deleting your account now also deletes every nightly summary and one-minute read filed under your readers' private IDs (before, those stayed although the confirmation said they were gone), and this page now lists exactly what we keep afterwards. Your email is also used for a welcome, three free-week notes and a reminder before a paid year ends, each with an unsubscribe link; we said "only" sign-in links and reading notes before. Crash notes no longer keep your connection's IP address, only a scrambled daily code. And on some pages our server looks up your state from your connection to show a funding note; it is not stored. Deleting your account now also deletes every reader you shared with another grown-up, with their access to it (before, their copy stayed). We now say that our server keeps no IP addresses, only a scrambled daily code, and that one signed cookie remembers a paying device. The children's privacy section now says when we ask for a parent's consent (the box you tick when you add a child) and exactly what can reach us before it, including the one free night; it used to say consent came with creating an account.

October 18, 2026. Three clarifications. We now say plainly that, on pages that show a price, our server looks up your country from your connection to choose the currency (we do not store it, and we never use your device's location). The five feelings questions are kept on your device only and can be switched off in Settings. And a parent's email is no longer written into the web address when we check a membership; it is sent inside the request instead.

October 17, 2026. Your child's first name, and boy or girl, now stay on your device even when you sign in. The copy of your family's record in your account carries no name, only the private child ID, and each new device asks you for the name once. The one exception is a reader you choose to share with another grown-up: that child's first name is copied to their account so they can see it. The boy or girl question is now optional. The summary at the top of this page and “What we collect” say so. This is a change in what we collect: less, starting on this date.

October 15, 2026. Your child's first name no longer leaves your device: each night's summary and each reading check-up are filed under a private child ID instead (the October 5 change below is reversed). Sharing a reader is now by single-use invite with a role, and Settings shows who can see each child, with Remove. The free trial is kept on your account, not on your device. Deleting your account now sends you a written confirmation; the one thing we keep afterwards is your email with the dates you joined and the trial you used, so a free trial cannot be started again under the same address. ESA receipts: if you choose to type a student's first initial at ESA checkout, it appears on your ESA receipt (in Stripe and our records). It's optional and blank by default. And one honest line about email: no ads, never sold; only sign-in links and reading notes you can turn off in Settings.

October 5, 2026. We began collecting a little more, so a family's growth is measurable and can be credited to the partner or therapist who gave them A New Page. Each night's progress summary now includes your child's first name (it was already on your device; now it rides with the summary), and, for a family who arrived through a partner link, the code and the therapist tag that brought them. A partner still sees counts only. We updated "What we collect" and "Stay local" to say exactly this. This is a change in what we collect, starting on this date.

October 2, 2026. We added a way to share one reader with another grown-up, such as a teacher, therapist or tutor, using a code. The new section "Sharing a reader with another grown-up" says what is shared, what is not, and how to stop. This is a new thing we do, starting on this date. Until now, no family's data was visible to any other account. On the same date we added a section for families in Canada; nothing else we do changed with it.

October 1, 2026. We added partner links: a therapist, tutor, reviewer, co-op or school can give families a longer free trial through their own link. This page now says what is saved when you use one (which link brought you, with your sign-up) and what a partner can see (counts only). This is a new thing we do, starting on this date.

September 30, 2026. One more correction of the same kind. The app has sent a short summary of each night to our server under random codes kept in your browser, and this page listed the reading-progress data without saying how it was filed. We added that description under "What we collect". Nothing we do changed on this date either.

September 18, 2026. We reviewed this policy against what our code actually does and corrected it in five places, rather than waiting to be asked. We added who we are and how to reach us; we found that the email step at the end of the free reading check was also sending us your child's first name and age, disclosed it, and then changed that step so it sends your email address only; we replaced the claim that our page counts carry "no identifier of any kind" with an exact description, because they carry a token that lives until you close the tab; we listed Vimeo and Resend as providers; and we stated plainly which UK and EU obligations we have not finished. Nothing we do changed on that date. What changed is that this page now matches it.

Contact us

Questions, requests, or anything about your family's privacy: jnclark@anewpagereading.com or +1 202-294-3505. We read every message and respond quickly. Our full company name and postal address are in "Who we are, and how to reach us" at the top of this page, and we will send them to you on request.

This policy is written to be clear for parents and to meet COPPA's requirements. It describes how A New Page handles data today, including the parts we have not finished, which are named above rather than left out.