Privacy Policy

Last updated: June 16, 2026

This Privacy Policy explains how Fynaxis (“we”, “us”) collects, uses, and protects information when you use Typing Safari (the “Service”). Because Typing Safari is used by children in schools, camps, and families, please read the Children’s Privacy section carefully.

Information we collect

• Account information. For people who sign in (e.g. adults, teachers, parents): name or username, and an email address, or the basic profile (name and email) we receive if you choose to sign in with Google.
• Roster members (students/family members). When a school, camp, or family adds people to a shared roster, we collect only a display name and an optional identifier (e.g. a student number). By design and in-product guidance, that display name should be a first name and last initial (e.g. “Maya R.”), not a full legal name. We do not require email addresses or other contact details for roster members.
• Typing activity. Words-per-minute, accuracy, lesson progress, practice sessions, and game results used to show progress, leaderboards, and certificates.
• Content you provide. If you use “custom text”, the text you paste or upload is processed to create a typing exercise.
• Technical & diagnostic data. Device/browser information and a coarse, approximate region derived from your network address (used to suggest a default language). If the app hits an error, we log the error message, the page URL, and the browser type to diagnose and fix it. Settings are stored locally in your browser.
• Cookies / local storage. Used for sign-in sessions and to remember preferences (strictly necessary). On the sign-in and sign-up pages, our bot-protection provider (Cloudflare Turnstile) may set a cookie and process limited technical data to tell humans from bots. We do not use advertising trackers.

How we use information

• To provide the typing lessons, games, speed tests, leaderboards, and certificates.
• To save progress and personalize the experience (language, keyboard layout).
• To operate, secure, and improve the Service, and to prevent abuse.

We do not sell personal information, and we do not use it for behavioral advertising.

We never use student or children’s data to train AI/ML models. Typing content, performance, and any custom text are used only to operate the Service for you — never to train, fine-tune, or improve machine-learning models, ours or anyone else’s.

Children’s privacy (COPPA & similar laws)

Typing Safari is intended to be used by children only through an authorized parent, guardian, school, or camp. We do not knowingly collect personal information directly from children under 13 (or the applicable age in your region) without parental consent or proper school authorization.

• Schools and camps. When a school or camp creates a group and adds students, it confirms it is authorized to provide that information and, where applicable, provides consent on behalf of parents under COPPA’s school-authorization provisions. In that arrangement we act as a service provider/processor for the school.
• Data minimization. For children we collect only what the educational service needs — a display name (a first name and last initial, not a full name), an optional identifier, and typing performance. We do not require children’s email addresses, and we never condition a child’s participation on collecting more information than is reasonably necessary for the activity.
• No ads, no sale, no model training. We never serve targeted advertising to children, never sell children’s data, and never use it to train AI/ML models.
• Parent/school rights. A parent or school administrator may review a child’s information, ask us to delete it, and refuse further collection by contacting us or removing the member from the roster.

For schools (FERPA & student data)

When a school or district uses Typing Safari, we act as a “school official” with a legitimate educational interest under the U.S. Family Educational Rights and Privacy Act (FERPA), processing student data solely to provide the Service under the school’s direction. We do not use student records for any non-educational purpose, do not sell them, do not use them for advertising, and do not use them to train AI/ML models. Schools retain control of their students’ data and may request access, correction, or deletion at any time by contacting us at privacy@typingsafari.com. A data processing agreement (DPA) is available to school and district customers.

How we share information

We share information only with service providers (sub-processors) that help us run the Service, under contracts that require them to protect it:

• Supabase — hosting, database, and authentication.
• Vercel — application hosting/delivery.
• Stripe — payment processing for paid subscriptions (billing name, email, and card metadata; we never see full card numbers).
• Resend — sending transactional email (e.g. sign-in, password reset, subscription, and invitation emails).
• Cloudflare Turnstile — bot protection on sign-in/sign-up.
• Google — only if you choose to sign in with Google (we receive your name and email).

We may also disclose information if required by law or to protect rights and safety. We do not sell personal information.

Data retention

We keep information for as long as an account or roster membership is active, and then delete or anonymize it within a reasonable period, unless a longer period is required by law. Schools/parents can request earlier deletion.

Your rights

Where the GDPR applies, our legal bases for processing are: performance of our contract with you (to provide the Service), consent — including a school’s or parent’s authorization for a child — and our legitimate interest in securing, operating, and improving the Service. Depending on where you live (e.g. PIPEDA in Canada, GDPR in the EU/UK, CCPA in California), you may have rights to access, correct, delete, or export your information, and to object to certain processing. To exercise these rights, contact us at privacy@typingsafari.com. For roster members, please contact your school/group administrator, who can also act on these requests. To delete your account and data, see our Data Deletion page.

Security & international transfers

We use reasonable administrative and technical safeguards (including row-level access controls and encryption in transit) to protect information. Data is hosted on our providers’ servers in the United States (Oregon / AWS US-West). If you access the Service from outside the United States (e.g. Canada, the EU/UK), your information will be transferred to and processed in the U.S.; where required, we rely on an appropriate transfer mechanism (such as Standard Contractual Clauses) to protect it. If a data breach affecting your personal information occurs, we will notify affected users and/or the relevant school administrators, and any regulators, as required by applicable law (e.g. PIPEDA, GDPR).

Changes to this policy

We may update this policy and will revise the “Last updated” date above. Material changes will be highlighted in the Service.

Contact

Fynaxis, governed by the laws of Canada. Questions or requests: privacy@typingsafari.com.

See also our Terms of Service and Data Deletion page.