Manuscript Kids — Privacy Policy
Last Updated: March 2026

Our Promise: Your child's data never leaves their device.

Manuscript Kids is built on a zero-knowledge architecture. We have no servers, no accounts, no analytics backends. This isn't a marketing claim — it's our technical architecture.

What We Collect: Nothing.
Manuscript does not collect, transmit, or store any data on external servers. All data lives exclusively on the user's device and, if enabled, in the family's own iCloud account (encrypted by Apple).

Data Stored Locally on Device:

• Practice drawings and handwriting strokes
• Progress scores and achievement data
• Child's first name and age group (entered by parent)
• App preferences and settings
• AI-generated feedback (processed entirely on-device)

Data We Never Collect:

• Email addresses, phone numbers, or physical addresses
• Device identifiers or advertising IDs
• Location data
• Photos or camera data (Paper Scan processes images on-device and does not store originals)
• Browsing history or usage analytics
• Any data from other apps

On-Device AI:
Manuscript uses Apple Intelligence (on-device large language models) and Core ML for handwriting analysis, adaptive difficulty, and personalized encouragement. All AI processing happens locally on the iPad. No data is sent to any cloud AI service, including Apple's servers.

iCloud Sync:
If enabled, progress data syncs through the family's own iCloud account using Apple's end-to-end encryption. Manuscript has no access to iCloud data — it is encrypted by Apple and accessible only to devices signed into the family's Apple Account.

Children's Privacy (COPPA Compliance):
Manuscript is designed for children ages 4-10 under adult supervision. We comply with the Children's Online Privacy Protection Act (COPPA) by:

• Requiring verifiable parental consent before any child data is entered
• Collecting only the minimum data necessary (first name, age group)
• Never sharing data with third parties
• Providing parents full control to view, export, or delete all child data
• Implementing parent-only access controls (PIN protection)

Third-Party Services:
Manuscript uses zero third-party SDKs, analytics tools, or advertising networks. The only external framework is Apple's StoreKit for in-app purchases, which is processed entirely by Apple.

Parental Rights:
Parents can at any time:

• View all data stored for their child
• Export data as PDF or JSON
• Delete all child data permanently
• Disable iCloud sync
• Change or remove the child's profile

Data Retention:
Data persists on the device until the parent deletes it or the app is uninstalled. There is no server-side retention because there are no servers.

Contact:
junaid.muhammadkhan@icloud.com

Changes to This Policy:
We will notify users of material changes through an in-app notice. Continued use after changes constitutes acceptance.