Privacy Policy
Lento cares deeply about the personal information of children and their parents. This policy explains what we collect and why, how we use and protect it, and when we delete it.
Lento is made for children, but accounts are created by a parent or guardian, who also enters the child's information.
This is a translation for convenience. If it differs from the Korean version, the Korean version applies.
1. Why we process personal information
- Sign-up, sign-in, account management and verification
- Recommending stories that suit your child, and providing reading and listening features
- AI-powered features such as after-reading conversations and story creation
- Sending parent letters (reports) and service notifications
- Alerting parents when we notice a worrying sign in a child's conversation
- Fixing errors, preventing misuse and improving the service
- Answering enquiries and sending notices
2. What we collect
Swipe the table sideways to see more →
| Category | Information | Required? |
|---|---|---|
| Parent account | Email, password (stored encrypted) | Required |
| Google sign-in | Google account email, name, profile photo | Optional (if you use Google) |
| Passkey sign-in | Public-key credential for your device | Optional (if you use a passkey) |
| Parent settings | Parent PIN (stored encrypted), preferred language, notification settings, push token and device type, reading habits, what you hope for from Lento | PIN required · others optional |
| Child profile | Name or nickname, grade (stored as age), English level, interests | Name required · others optional |
| Child profile (optional) | Birthday, child PIN (stored encrypted) | Optional |
| Usage records | Books, pages and completions, reading time, word list, audio history, playlists and likes, badges | Created as you use Lento |
| What your child enters | After-reading conversations and mood check-ins, stories your child makes and drafts in progress, reference photos your child uploads | When those features are used |
| What you enter | Notes to Lento (for voice input, only the text your device transcribes), issue reports and attached images | When those features are used |
| What Lento creates | Notes on your child's reading personality, parent letters, records of worrying signs, farewell report | Created as you use Lento |
| Collected automatically | IP address, browser and device information, access time, error and security logs | Created as you use Lento |
Lento never requires a child's real name. Every feature works with a nickname.
You have the right to refuse consent. If you don't agree to the required items you can't create an account; optional items can be left blank and you can still use Lento.
3. Children under 14
Most Lento users are children under 14. Children cannot sign up on their own: a parent or legal guardian creates the account and enters the child's information, and we process a child's information only with that guardian's consent.
- Things your child says while reading may be quoted word for word in parent letters. We explain this, and how to respond to what your child shares, during sign-up.
- If your child says something is a secret, we don't show it in reports. But if your child seems to be in serious distress or danger, we will always tell you, even if it was called a secret.
- You can review, correct or ask us to delete your child's information at any time.
4. How long we keep it
| Information | Kept until |
|---|---|
| Account, child profile, usage records | You close your account or your child's profile is deleted |
| A child you asked to delete | Kept for 15 days so you can undo, then deleted after we send you a farewell report |
| Stories moved to the trash | Deleted after 15 days, together with linked photos |
| Story drafts in progress | Until you delete them or the story is finished |
| Access and error logs | Kept briefly under our hosting provider's policy, then deleted automatically |
Once information is no longer needed we delete it without delay, in a way that cannot be recovered. If the law requires us to keep something (for example, payment records once paid plans exist), we store it separately for that period only.
5. Sharing with third parties
Lento does not sell or share your personal information, and does not use it for advertising. The only exceptions are where the law requires it or law enforcement makes a request through legal procedures.
6. Service providers and international transfers
We rely on the providers below to run Lento. Where a provider's servers are outside Korea, personal information is transferred abroad. This outsourcing and storage is necessary to perform our service agreement with you (Personal Information Protection Act, Article 28-8(1)(3)), and we tell you about it and ask you to confirm when you sign up. Transfers happen over encrypted connections (HTTPS) when you use the service.
Swipe the table sideways to see more →
| Provider | Country (servers) | Information | Purpose | Retention | Contact |
|---|---|---|---|---|---|
| Supabase, Inc. | South Korea (Seoul) | Account and child data, usage records, content, photos | Database, sign-in, file storage | Until account closure or end of contract | supabase.com/privacy |
| Vercel Inc. | South Korea (Seoul) and nearby delivery servers | Data exchanged while using Lento, access logs | Web hosting | Until account closure or end of contract (logs briefly) | vercel.com/legal/privacy-policy |
| Anthropic, PBC | United States | Conversations and stories entered by children and parents, minimal context such as nickname and grade | Conversations, story creation, classifying worrying signs, writing letters | As needed to process requests (provider policy) | anthropic.com/legal/privacy |
| Resend | United States | Parent email address, letter and notification content | Sending email | As needed to deliver email | resend.com/legal/privacy-policy |
| Google LLC (Firebase Cloud Messaging) | United States | Push token, notification content | Push notifications | Until notifications are turned off or account closure | policies.google.com/privacy |
- AI requests are processed through Anthropic's commercial API and, under Anthropic's terms, are not used to train its models.
- We exchange information with Google for sign-in only if you choose to sign in with Google.
- If you do not want your information transferred abroad, you can close your account. Lento cannot run without these providers.
7. Your rights and how to use them
You can ask to see, correct, delete or stop the processing of your own and your child's information.
- View or edit your child's profile: Parent Zone › Child info
- Delete a child: Parent Zone › Manage children (you can undo for 15 days)
- Turn off notifications: My Page › Notifications (alerts about worrying signs can't be turned off, to protect your child)
- Close your account: Parent Zone › Settings › Close account (you can cancel for 15 days; after that we send a final letter for each child and permanently delete everything).
- Anything else (a copy of your data, restriction): email lento.support@gmail.com. We will verify it's you and act within 10 days.
8. How we protect it
- Encrypted connections (HTTPS) everywhere and security headers
- Passwords and parent/child PINs stored with one-way encryption
- Row-level access controls so no family can see another's data, plus active-child checks that keep siblings apart
- Parent-only screens locked with a PIN, with a short lockout after repeated failures
- Server secrets kept separate, and access limited to what's necessary
10. About our AI features
- We use AI for after-reading conversations, story creation, parent letters and classifying worrying signs.
- Classifying worrying signs is used only to decide whether to alert you, never to make decisions that disadvantage your child.
- AI can be wrong. If you receive an alert, talk with your child calmly, and seek professional help if needed.
11. Privacy officer
| Privacy officer | The Lento team |
| lento.support@gmail.com | |
| Phone | 82-000-0000-000 (to be registered) |
Send any privacy questions, complaints or requests for redress to the contact above. We'll respond promptly.
12. Getting help from authorities (Korea)
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Privacy Infringement Report Center: 118, privacy.kisa.or.kr
- Supreme Prosecutors' Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
13. Changes to this policy
We'll announce changes in the service 7 days before they take effect. For important changes, such as new information collected or new purposes, we'll give 30 days' notice and ask for consent again where needed.
Effective: 6 October 2026