Updated April 21, 2026

See our Website Privacy Statement here.

At Sprout Labs, we are committed to protecting the privacy of every child and family we serve. This Privacy Statement ("statement") describes how Sprout Labs, Inc ("Sprout Labs", "we", "our" or "us") collects, stores, uses and distributes your personal information when you use our website(s), application(s), live virtual tutoring services and any related services (together, the "Services"). This statement also describes your data protection rights and how to exercise them.

What we do

• We use the latest security best practices to keep all user data safe.
• We collect, use, share and retain your personal information solely for the purposes outlined in this statement. We will seek your consent for any additional use not listed in this statement.
• With your permission, we collect audio recordings of your child to improve Sprout Labs's functionality. Separately, if you have purchased virtual, 1:1 live tutoring services, we collect video recordings of your child. We aim to limit data collection to what is strictly necessary for providing and improving Sprout Labs's services, including personalizing learning for your child.
• We comply with applicable laws and regulations, including the Children's Online Privacy Protection Act ("COPPA").
• We will notify you if material changes are made to this statement.

What we don't do

• We do not sell your or your child's personal information to third parties.
• We do not advertise third-party products to children on Sprout Labs or display targeted advertisements within our services, nor do we track users of our application or use any tracking technologies for advertising purposes within the app.
• No child data is collected in-app by third parties for their own purposes and no data is shared with third parties for external research purposes.
• We do not obtain any personal information from third parties. We do not create user profiles for personalized advertising.

1. Why We Collect This Information

We collect your child's personal information only for the following purposes:

• To deliver our Services, including live 1:1 virtual tutoring, and our AI-powered reading instruction application
• To provide real-time adaptive and personalized instruction based on your child's reading ability
• To generate progress reports and assessment results for you and authorized practitioners
• To conduct staff training and oversee quality management
• To ensure the safety of your child during sessions
• To comply with our legal obligations

What we do NOT use your child's data for:

We do not use your child's personal information for advertising, behavioral targeting, sale to third parties, or data brokerage. We do not permit advertising platforms to access any data derived from your child's use of the Services.

We do not allow social interactions within the product. Users cannot interact with other platform users and no profile information of user created content is displayed publicly.

2. Consent

By using the Services and registering for the product, you consent to the use of your and your child's personal information as described in this statement. Your personal information will not be used for any other purpose without your consent. You may withdraw your consent to our processing of your or your child's personal information at any time. Withdrawal will not affect prior lawful processing and may limit access to the Services. If you have any questions or would like to amend your consent, please email support@sproutlabs.com.

Verifiable parental consent covers: 1) the collection and use of a child's information for the provision and personalization of the Services, including operating Sprout Labs's AI tutor features, and using audio recordings, video recordings (for tutoring service customers), associated transcripts and interaction data, subject to the parental controls and settings described in this statement. 2) Use of recordings and transcripts from a child's sessions to train and improve the Sprout Labs Services generally.

Parental consent will be collected coincidental with the credit card payment transaction. Your child's account will not be activated and services will not begin until we have received and verified your consent.

3. Collection of Information

We limit the data we process and collect from users of the application to only what is required to deliver the services.

3.1. What we collect from you

We collect and process the following information:

• your first name,
• your last name,
• your email address,
• your phone number,
• your device and connection information (Internet Protocol (IP) address, device type, browser type) during service use
• your child's name, age, grade, reading level and interests,
• information you provide in forms when signing up, and
• billing information so we can process your payment.

Any personal information combined with non-personally identifiable information will also be treated as personal information. We do anonymize and aggregate some of this personal data into datasets that are not personally identifiable.

Your registration information, together with any other information we gather through the Services that may be used to identify, contact, or locate you individually, are collectively referred to as your "Personal Information."

3.2. What information we collect from your child

Other information we collect as part of providing the service:

• Audio. We will collect audio recordings of the child while using the Sprout Labs Application ("Audio Recordings"), which include spoken words, phonemes and passage reading.
• Video. For customers paying for live, virtual 1:1 tutoring (only - not the app alone customers), we will collect video recordings of live tutoring sessions.
• Transcripts from Audio and Video Interactions. Summaries of these transcripts are stored to customize the child's learning experience and analyze progress and interests. While we try to limit the personal information collected and stored, they may contain personally identifiable information (for example, if a child says their name), so we treat transcripts as if they were personally identifiable information.
• Response Data. We will collect the data associated with responses to activities, tasks, and assessments, as well as response-time (how long your child takes to answer questions).

3.3. What we don't collect

• Sensitive Information: Sprout Labs does not collect sensitive information such as: political affiliations, religious beliefs, philosophical beliefs, race or ethnicity, sexual orientation, health data, genetic information, criminal history, credit or financial data, trade union and membership information or personal identification (ID) numbers including those of a license, social security, state ID cards or passports.

3.4. Usage and Analytics Information

We may also collect information through the use of commonly-used information-gathering tools, such as log files, and Web beacons. Collectively, this information is referred to as "Usage and Analytics Information."

3.5. Telemetry and observability data

To keep Sprout Labs running smoothly and securely, we collect technical information about how our app and systems work behind the scenes. This helps us fix problems quickly, monitor system health, improve performance, keep your data safe, prevent fraud and make your overall experience better.

We collect basic device details and session identifiers, app performance data (like loading times), error reports and crash logs, and timing and usage signals about how features are used.

3.6. For our website and non-application services

Certain types of data are collected through our website that are not collected via our software application. We differentiate these types of data to maximize your child's privacy.

For detail on cookies, web beacons, and similar items, as they pertain to our website, please look at our Website Privacy Statement.

4. Children's information

We comply with applicable laws, including the U.S. COPPA, which requires special protection for children's personal information. For more information about COPPA and general tips about protecting Children's online privacy, please visit OnGuard Online.

Please look at our Children's Privacy Statement for information about our collection, use, disclosure and parental consent practices for the personal information of children (users under the age of 13 in the US, or the relevant age of digital consent as otherwise defined by applicable laws).

5. Who we share your personal information with

We will not disclose or transfer your personal information to third parties without your permission, except as permitted under this statement and in accordance with the applicable data protection legislation in the respective jurisdiction of use.

5.1. Law enforcement, legal process, and emergency situations

We may disclose your personal information to third parties if required by law or on the good-faith belief that doing so is necessary to:

• Conform to applicable law or comply with legal process served on us or our Sites
• Protect and defend our rights, property, or the safety of our Sites and users (provided this does not override your rights and freedoms as a data subject)
• Safeguard personal safety for you, other users, or the public
• Prevent or investigate fraud, security incidents, or unlawful activities

If we receive a government or legal request for user information, we will make reasonable efforts to notify affected users promptly, unless doing so is prohibited by law, poses a risk of harm, interferes with (either intentionally or unintentionally) our rights or property, users of the Services, or anyone else, or is impracticable in emergencies where immediate action is required. Notifications may be delivered through email or phone.

5.2. Change of ownership or corporate organization

In the event of reorganization, merger, acquisition, amalgamation, or sale of all/substantial assets or stock (including negotiations and due diligence), your personal information may be transferred to a successor entity.

Such transfers will:

• Be limited to purposes consistent with this Statement, including service continuity and legal compliance
• Be subject to appropriate safeguards (such as contractual obligations and technical measures)

We will provide notice of ownership or organizational changes and, where practicable and legally permissible, offer an option to request deletion before transaction completion unless retention is required by law.

5.3. Third-party service providers

We engage third-party service providers to help us provide or improve our Services. These providers may access or process your personal information solely for the purpose of performing their contractual obligations. We limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions. Each vendor is bound by a written data protection and confidentiality agreements that prohibit use of your child's data for any purpose other than providing services to Sprout Labs, prohibits re-identification, and requires deletion upon our instruction.

The categories of related third parties with whom we may share data with are:

• Service providers: Entities that provide services for the use and development of Sprout Labs, such as hosting, data storage, email communication, analytics and IT support.
• Model providers: We use artificial intelligence to personalize instruction and analyze literacy performance. AI outputs are instructional support tools reviewed and overseen by trained professionals. Information provided during interactions with Sprout Labs, including conversation transcripts and audio inputs, may be processed by AI providers solely to provide the service, personalize learning experiences, and improve Sprout Labs's educational functionality. Sprout Labs does not authorize AI providers to use this information for their own purposes or to train their general-purpose models.
• Voice AI partners: Entities that provide voice recognition and accuracy scoring information for the use of Sprout Labs in providing services to our customers. These providers are contractually obligated to only use this data to help maintain and improve Sprout Labs's services. This information is never used for advertising and does not include personally identifiable information beyond what is necessary to provide and improve our Services.
• Payment processors: Entities responsible for processing payments and secure handling of financial transactions.
• Legal and compliance partners: Entities involved in ensuring legal compliance, responding to legal requests, or conducting audits, which may include legal advisors or regulatory authorities.

6. Security measures in protecting your information

We use appropriate technical, organizational, and physical safeguards to protect personal information against unauthorized access, loss, or disclosure, including:

• Encryption in transit and at rest
• Multi-factor authentication (MFA) for account access
• Limited access controls for authorized personnel
• Physical and administrative safeguards against unauthorized dissemination

No data transmission or storage method is guaranteed 100% secure. Information disclosed online may be vulnerable to interception or misuse. We cannot guarantee complete security.

6.1. Data breach notification

In the event of a data breach that compromises your personal information, we will investigate promptly and take reasonable corrective measures. We will notify the relevant supervisory authority that is tasked with personal data protection within your jurisdiction of use and inform you of the security incident in accordance with applicable laws and regulations.

6.2. Your responsibility

You are also responsible for helping to protect the security of your personal information. This includes:

• Keeping your password safe, confidential and never sharing it with anyone.
• Protecting your username, password and personal credentials when using our Services to prevent unauthorized access.
• Enabling and maintaining two-factor authentication (2FA).
• Maintaining the security of any personal computing device you use to access our Services.

7. How long we hold on to your information

We will retain your personal information only for as long as it is necessary to fulfill the identified purposes for which it was collected or as required by law. Once the data is no longer needed, we will securely delete or anonymize it.

We may retain certain data beyond the termination of our relationship with you for legitimate purposes such as:

• To prevent fraud or future abuse.
• To analyze aggregated, non-personally-identifiable data.
• To comply with legal obligations.
• To resolve disputes.

To determine the appropriate retention period for your personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, the need to comply with our internal statement and the applicable legal, regulatory, tax, accounting or other requirements.

All retained personal information will remain subject to the terms of this statement. Please note that if you request deletion of your personal information, complete removal may not be possible in all cases due to technical or legal constraints.

8. Amendment of this statement

We reserve the right to update, modify or amend this statement at any time to reflect changes in our practices or legal requirements. If we make material amendments to this statement, we will notify you and post the updated statement on our website at www.sproutlabs.com/privacy.

Non-material changes (such as clarifications) take effect immediately upon posting. Material changes will take effect 30 days after we post or notify you.

The date of the latest update will always appear at the top of this document. We recommend that you periodically review this statement to ensure you are aware of any changes. Your continued use of our Services after changes take effect signifies your acceptance of the updated statement.

9. Your rights

At any time, you may:

• Review the personal information we have collected from your child
• Correct any inaccurate information in your child's records
• Request deletion of your child's personal information (subject to legal retention requirements)
• Revoke your consent and refuse our further collection or use of your child's personal information
• Right to export your personal information in a format that can be transferred electronically to a third party.

SMS & text messaging: By providing your mobile number, you may receive text messages from Sprout Labs related to account notifications, service updates, and promotional communications. Message frequency varies based on your account activity and preferences. Message and data rates may apply. We will not sell or share your mobile number with third parties for their marketing purposes. You may opt out of text messages at any time by replying STOP to any message. For help, reply HELP or contact support@sproutlabs.com.

To exercise any of these rights: email support@sproutlabs.com, or call 1-781-498-6007. We will respond within 45 days of receipt. Your child's services will continue unaffected while we process your request, except where deletion is requested.

10. For our Californian users

If you are a California resident, additional privacy rights available to you under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (together, 'CCPA/CPRA'), the California Online Privacy Protection Act ('CalOPPA'), and other applicable California privacy laws, to the extent each applies to Sprout Labs are reviewed in detail here for California Residents. If there is any conflict between this section and the rest of this Privacy Statement, this section governs for California residents.

A. Categories of Personal Information We Collect

The table below identifies the categories of personal information we collect from California residents, the sources of that information, the purposes for which we use it, and the categories of third parties to whom it is disclosed.

We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising, except as described in Section C below regarding our public-facing website. We have not sold or shared personal information in the twelve months preceding the date of this statement.

B. Sale and Sharing of Personal Information; Do Not Sell or Share

Sprout Labs does not sell your or your child's personal information, as 'sell' is defined under Cal. Civ. Code § 1798.140(t).

Regarding 'sharing' for cross-context behavioral advertising: Sprout Labs does not share your child's personal information, or any data derived from your child's use of our Services, with third parties for cross-context behavioral advertising. We do not permit advertising platforms to access session, assessment, voice, or any Services-derived data.

Website analytics: Our public-facing website (www.sproutlabs.com), which is intended for adult visitors only, uses analytics tools that may transfer certain adult visitor data (such as IP address, browser type, and pages visited) to third-party analytics providers. To the extent this activity constitutes 'sharing' under CCPA/CPRA, you may opt out by emailing support@sproutlabs.com with subject line 'California Opt-Out Request'. Your choice to opt out will not affect your access to any services, features, or pricing.

C. Sensitive Personal Information

Under the California Privacy Rights Act, certain categories of personal information are designated as 'Sensitive Personal Information' (SPI) and receive heightened protections. Sprout Labs collects the following SPI:

• Biometric information: Children's voice recordings processed by our speech recognition technology constitute biometric information under CCPA/CPRA and applicable state biometric privacy laws. We use this data to deliver reading fluency assessment and adaptive instruction. With your separate consent, we may also use de-identified voice data to improve our AI literacy models (see the AI Model Improvement section of this Statement for details).
• Account login credentials: Your account username (email address) and password.
• Health-adjacent information (if provided): If you voluntarily provide information about your child's learning differences, IEP status, or related educational needs, we treat this information as Sensitive Personal Information and use it only to customize your child's instruction.

Your right to limit use of Sensitive Personal Information: You have the right to direct Sprout Labs to limit the use of your or your child's Sensitive Personal Information to uses that are necessary to provide the Services. To exercise this right email support@sproutlabs.com with subject line 'Limit SPI Use.'

We do not use Sensitive Personal Information for inferring characteristics about you, for targeted advertising, or for any purpose beyond what is necessary to deliver the Services and, with your consent, to improve our AI literacy models.

D. Global Privacy Control and Do Not Track Signals

Global Privacy Control (GPC): If your browser or browser extension transmits a Global Privacy Control signal indicating your preference to opt out of the sale or sharing of your personal information, Sprout Labs will treat that signal as a valid California opt-out request under Cal. Code Regs. tit. 11, § 7025(a). We will not share your personal information with third-party analytics providers for cross-context behavioral advertising when a valid GPC signal is received. GPC signals apply to your use of our public-facing website; they do not affect data processed within our application or tutoring services.

Do Not Track (DNT): Our website does not currently respond to browser-level 'Do Not Track' (DNT) signals. We are monitoring the development of uniform DNT standards and will update this policy if we change our approach. If you wish to opt out of analytics data collection on our website, you may use the Global Privacy Control mechanism described above or submit an opt-out request as described in Section B.

E. Your California Privacy Rights

California residents have the following rights under CCPA/CPRA:

Right to Know: You have the right to request that we disclose to you: (a) the categories and specific pieces of personal information we have collected about you; (b) the categories of sources from which we collected it; (c) the business or commercial purposes for collecting it; and (d) the categories of third parties with whom we shared it.

Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (for example, information we are required to retain by law, or information necessary to complete a transaction you requested).

Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.

Right to Data Portability: You have the right to receive a copy of the personal information you have provided to us in a portable, readily usable format that allows you to transmit the information to another entity.

Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. See Section B above for details and the opt-out mechanism.

Right to Limit Use of Sensitive Personal Information: You have the right to direct us to limit the use of your Sensitive Personal Information to purposes necessary for providing the Services. See Section C above for details.

Right of Non-Discrimination: We will not discriminate against you for exercising any of the rights described in this section. We will not deny you services, charge you a different price, or provide you a lower quality of service because you exercised a privacy right.

How to submit a request: To exercise any of the rights above, contact us through any of the following methods:

• Email: support@sproutlabs.com with subject line 'California Privacy Rights Request'
• Telephone: 1 (781) 498-6007
• Mail: Sprout Labs, Inc., 163 Highland Ave, #1077, Needham, MA 02494

Response timeline: We will acknowledge receipt of your request within 10 business days and respond substantively within 45 days. If we require additional time, we will notify you within the initial 45-day period and may extend our response by up to an additional 45 days.

Verification: We will verify your identity before processing your request. For requests relating to your child's personal information, we will verify that you are the child's parent or legal guardian. We may request additional information to complete verification. We will not use verification information for any purpose other than verifying your identity.

Authorized Agents: You may designate an authorized agent to submit requests on your behalf. To do so, provide your agent with written authorization to act on your behalf and contact us using the methods above. We will verify the agent's authority and may require direct confirmation from you before processing the request.

Appeals: If we deny your request in whole or in part, you may appeal our decision within 30 days by emailing info@sproutlabs.com with subject line 'California Privacy Appeal.' We will respond within 60 days. If your appeal is denied, you may contact the California Privacy Protection Agency at:

California Privacy Protection Agency
2101 Arena Blvd, Sacramento, CA 95834
Email: cppa@cppa.ca.gov | Website: cppa.ca.gov

F. Shine the Light (Cal. Civ. Code § 1798.83)

California residents may request information about whether we share personal information with third parties for their direct marketing purposes, including the categories of information shared and the names and addresses of those third parties. Sprout Labs does not share personal information with third parties for direct marketing purposes. If you have questions about this practice or wish to confirm, you may contact us at info@sproutlabs.com or write to Sprout Labs, Inc., 163 Highland Ave, #1077, Needham, MA 02494.

G. California Age-Appropriate Design Code Act (CAADCA)

Sprout Labs' services are designed for use by children and their families. We are committed to complying with the California Age-Appropriate Design Code Act (Cal. Civ. Code § 1798.99.28 et seq.), which sets design and privacy standards for online services likely to be accessed by children under 18. Our compliance efforts include:

• Configuring default privacy settings for child users at the highest available level of protection;
• Conducting data protection assessments for new features and services involving children's data;
• Prohibiting use of design features that could harm children's physical or mental health or well-being;
• Not profiling children except where necessary and appropriate for service delivery with parental consent; and
• Not collecting, selling, or retaining children's personal information beyond what is necessary to provide the Services.

If you have questions or concerns about our CAADCA compliance practices, please contact us at info@sproutlabs.com.

11. For Users in States with Applicable Biometric Privacy Laws

Children's voice recordings used in speech recognition processing may constitute biometric identifiers or biometric information under applicable state laws, in select states including, currently, Illinois and Texas.

In compliance with applicable biometric privacy laws, Sprout Labs:

• Collects biometric data only as described in this Privacy Statement
• Does not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information
• Does not disclose or disseminate biometric data to third parties except to our voice AI service provider for the limited purpose of delivering the Services, under a written agreement that prohibits further disclosure
• Retains voice data used in AI processing for no longer than the periods described in the Data Retention section of this Statement, or as required by applicable law
• Destroys biometric data using a secure deletion methodology upon the earlier of: (a) the applicable retention period, or (b) when the purpose for collection has been satisfied

12. Contact us

For more information, questions or concerns, you can refer to our website or contact us by phone, email or US mail:

Sprout Labs, Inc.
Email: info@sproutlabs.com
Phone: 1 (781) 498-6007
Website: www.sproutlabs.com
Address: 163 Highland Ave, #1077, Needham, MA 02494