Privacy
What Emetli stores, why, who can see it and how you delete it. The short version: we keep what is needed to show you your kid's reading and to deliver your rules to their device, and nothing else.
Last updated 17 September 2026.
What we store about your kid
A kid never has an account and never types anything into Emetli. Everything below comes from you, or from ReadFirst on the device you linked.
| Stored | Not stored |
|---|---|
| A first name or nickname, an avatar and a time zone | Birth date, age, gender, photo, surname, school, contacts, location |
| Your rules: blocking on or off, ratio, topics, limits | Which apps are blocked. Apple's list never leaves the device; ReadFirst reports three counts only |
| Reading sessions: the story and its title, topic, times, seconds, pages, words | What was on screen, the reading position, any text your kid typed |
| Totals of screen time earned and used, and use of the blocked apps per hour in total | Which app was used, or for how long each app was used |
| The device: a label you can rename, model, iOS version, ReadFirst version, time zone, whether blocking is working, a random install id | The device's own name, advertising id, serial number, language, IP address, browser details |
What we store about you
- Your email address and your name.
- A one-way hash of your password. Nobody can read the password itself, including us, which is also why a lost password is replaced and never sent back to you.
- The time you confirmed that you are the parent or legal guardian, and which version of the terms you accepted.
- When you last signed in, and one record for each browser or app that is signed in right now.
- An internal log of changes to your account and your kids' settings. It holds no names, no free text and no addresses, the site's regular clean-up deletes entries older than 365 days, and the entries about a kid are deleted with the kid.
What we don't do
- No advertising and no selling of data. These pages use Google Analytics to count visits and which features are used. It is set up to receive no names, email addresses, kid details, ids or anything you type: page addresses reach it with every id replaced, advertising features and Google signals are off, and it is not used for advertising. It sets its own cookies to tell visits apart.
- No IP address and no browser details are stored in any table. Limits on repeated sign-in attempts use keyed hashes that cannot be turned back into an address.
- No email is sent: no newsletters, no notifications, no reminders.
- Our own cookie, and only after you sign in. It keeps you signed in for up to 30 days, scripts cannot read it, and it is not used for tracking.
Who can see your family's data
You can. The administrator of this site can open a family's pages to help with a support question. That view is read-only, the administrator cannot change your kids' settings, and every such visit is written to the internal log.
Your kid's device receives the rules you set (blocking, ratio, topics, limits and time zone) and any bonus minutes or resets. It never receives your email, your password or anything about your other kids.
Deleting data
Family data stays until you delete it. You can remove a kid or delete your whole account at any time, also while an account is suspended. Both are permanent: the profile, reading history, bonus and reset history, device links and the internal log entries about that kid are deleted, not archived, and we cannot bring them back.
What is left afterwards identifies nobody:
- One log entry saying that a removal happened, with counts only and no name or id of the kid.
- A hash of each removed device link, kept for 180 days, so that ReadFirst on that device is told clearly that the link has ended.
Deleting data here does not unblock a device. ReadFirst stays on it with its current rules until you switch blocking off on the device or delete the app.
Who runs this site
Emetli is software that an operator runs on their own server. Two things are in the operator's hands rather than in the software's:
- Backups. Data you delete disappears from the live database at once, and from the operator's backups when those expire. Ask the operator how long they keep them.
- Server logs. The operator's web server must not record the query part or the fragment of addresses, because a password reset link carries its secret in the fragment. Nor may it record which book ReadFirstasks for when it downloads a story or a cover: next to the device's address, that would show what your kid reads.
Questions and requests
Write to support@emetli.com to ask what is stored about you or your kids, to correct it, or for help deleting it. The rules for using the site are in the terms.