Duni & Friends ("we", "our", "us") makes a learning app for children ages 2–6. We believe a children's app should collect no personal information from children, show no advertising, and contain no third-party trackers. This policy explains exactly what that means.
1. Information we do NOT collect from children
- No name, email, address, phone, or birthdate.
- No photos, audio recordings, contacts, or location.
- No advertising identifiers (IDFA, AAID) or analytics fingerprints.
- No behavioral profiling. No retargeting. No data sales — ever.
2. Limited information we process from parents
When a parent purchases a subscription, we use RevenueCat to validate the purchase receipt from Apple or Google. RevenueCat receives an anonymous app-install identifier and the receipt. We do not link this to any personal identity. See RevenueCat's privacy policy at revenuecat.com/privacy.
If a parent emails us at support, we receive their email address solely to reply. Emails are deleted within 90 days of resolution.
3. No third-party advertising or tracking
The app contains zero ad networks, zero behavioral analytics, zero social-media SDKs, and zero remarketing pixels. The only outbound network calls are to Apple/Google for purchase validation and to RevenueCat for subscription receipts.
4. COPPA compliance (U.S.)
Duni & Friends is fully compliant with the Children's Online Privacy Protection Act (COPPA). Because we do not collect personal information from children, no verifiable parental consent is required for in-app activity. Subscription purchases are gated behind a parental gate and processed by the device app store.
5. GDPR-K compliance (EU/UK)
We comply with GDPR and the UK Age Appropriate Design Code (Children's Code). We process no personal data of children; the legal basis for processing parent purchase data is contract performance (Art. 6(1)(b) GDPR).
6. Data retention & security
Subscription receipts are retained as long as your subscription is active plus 7 years for tax records. Support emails are deleted within 90 days. Data in transit is encrypted via TLS 1.2+.
7. Your rights
Parents may request deletion of any support correspondence by emailing privacy@duniandfriends.app. EU/UK users have the additional rights of access, rectification, restriction, portability, and to lodge a complaint with their supervisory authority.
8. Changes to this policy
We will post any changes here and update the "Last updated" date above. Material changes will be highlighted in-app for parents on the next launch.
9. Contact
Questions? Email privacy@duniandfriends.app.