Guardian Reader app icon Guardian Reader

Privacy Policy

Guardian Reader does not collect your data. There is no account, no server of ours, and no analytics. Everything the app does happens on your iPhone. This page explains that in detail, because an app that listens to a child reading owes you a precise answer.

Last updated 2026-08-14

The short version

  • We do not collect, store or transmit any personal data.
  • There is no sign-up, no login and no user account.
  • Your child's voice is never recorded, uploaded or shared.
  • Photos of book pages are never uploaded and are not saved to your photo library.
  • Reading history stays on the device.
  • There is no advertising, no tracking and no third-party analytics.
  • Settings has a button, behind the parent PIN, that erases the reading history.
  • Reading sessions and the child's photo are kept out of your iPhone's backup; your settings and the child's name still travel in it.

Microphone

While a reading session is running, Guardian Reader listens through the microphone so it can transcribe the words being read. The transcription is performed on the device by Apple's on-device speech recognition. No audio is written to disk, sent to us, or sent to any third party. The microphone is active only during a session and stops when the session ends.

The transcribed text of a session is stored on the device so it can appear in your reading history and in the optional PDF export that you choose to generate and share.

On iOS 26 and later the transcription runs through Apple's on-device speech analyser and needs only the microphone. On iOS 18 to 25 it uses Apple's earlier speech recognition, which iOS treats as a separate permission, so the app also asks for Speech Recognition; it is forced into on-device mode, so no audio goes to Apple either. The app declares the background audio mode as well, which lets a session keep listening if the screen locks in the middle of a reading.

Camera

The camera is used to photograph the pages your child is about to read, so the app can extract their text and compare it with the reading. Text recognition happens on the device. The photo is used in memory for that purpose and is not saved to your photo library, not stored by the app and not transmitted anywhere.

Screen Time and blocked apps

Guardian Reader uses Apple's Family Controls and Managed Settings frameworks to lock and unlock the apps you select. Apple provides these selections to the app as opaque tokens: the app can apply restrictions to them, but it cannot see which apps they are, and neither can we. Device or usage data obtained through the Family Controls framework is used solely to provide the app's parental control features, and is never shared with anyone.

Data stored on your device

The following stays on your iPhone and is not sent anywhere: your reading sessions (date, duration, pages, match percentage and transcribed text), your settings, your reading plan answers, the child's name and photo if you added them, and your parent PIN, which is stored only as a cryptographic hash in the iOS Keychain.

Deleting the app removes the app and everything inside its container: sessions, settings, plan answers, and the child's name and photo. The parent PIN is the exception, because iOS keeps Keychain items after an app is deleted, so a PIN saved on that iPhone can survive a reinstall. To clear it, change it from inside the app before deleting, or erase the device.

Device backups

Guardian Reader sends nothing to us, and it now marks its own reading data as excluded from the backup you make of your iPhone: the database that holds the reading sessions and their transcribed text, and the child's photo, carry the flag that tells iOS to leave them out of iCloud and computer backups. What still travels in the backup is the app's settings, which iOS keeps in the standard preferences file that an app cannot exclude: the page goal, the reward, the strictness, the language, the plan answers, and the child's name if you typed one. The parent PIN lives in the iOS Keychain and follows Apple's rules for the Keychain, not ours. Any copy is yours and sits under your Apple account and Apple's terms. To leave the app out of backups entirely, turn Guardian Reader off in Settings, your name, iCloud, Manage Storage, Backups.

Erasing your data

Settings has a section, Your data, with a button that erases the reading history. It sits behind the parent PIN, it asks for confirmation, and it deletes every session saved on the device along with its transcribed text. The same confirmation can erase the child's name and photo as well. There is no undo and no copy anywhere else: because nothing sits on a server of ours, there is also nobody to write to for a deletion request. Deleting the app removes what is left, with the caveat about the PIN noted above.

Purchases

Guardian Reader Premium is sold through Apple's In-App Purchase system. Payments and subscription management are handled entirely by Apple; we never see your payment details. The app checks with Apple whether a purchase is active. Apple's own privacy policy governs that transaction.

Children's privacy

Guardian Reader is designed to be configured by a parent or guardian and used by a child. Because the app collects no personal information from anyone, it collects none from children either. We do not knowingly gather, store or transmit any information from a child, and there is nothing for a child to sign up for.

Third parties

Guardian Reader contains no advertising SDKs, no analytics SDKs and no crash-reporting SDKs. Nothing about your use of the app is shared with any third party.

Changes to this policy

If this policy changes, the new version will be published on this page with a new date. Since the app collects nothing, we do not expect substantive changes.

Contact

Questions about privacy: guardianreader.app@gmail.com