Privacy Policy

Introduction

Earn to Play ("we," "our," or "us") is committed to protecting the privacy of children and families who use our parental control application. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our mobile application.

Information We Collect

Information Provided by Parents/Guardians

• Account Information: Email address and password for parent account creation
• Child Profiles: Child's display name (can be nickname/pseudonym), age range, and avatar selection
• Device Information: Device identifiers necessary for app functionality

Information Collected Automatically

• App Usage Data: Screen time statistics, quest completion records (for parent view only)
• Technical Data: App version, operating system, crash reports

Information NOT Collected in Child Mode

When a child is using the app, we DO NOT collect:

• Advertising identifiers (IDFA, AAID)
• Precise location data
• Contact information
• Personal photos (stored locally only, never uploaded)
• Voice/audio recordings (stored locally only, deleted after parent review)
• Video recordings (stored locally only, deleted after parent review)

How We Use Information

We use collected information solely to:

• Provide parental control and screen time management features
• Display quest completion status to parents
• Sync data between parent and child devices
• Generate personalized educational quests using AI (see AI Services section)
• Improve app performance and fix bugs
• Respond to support requests

Data Storage and Security

Local Storage

Photos, audio recordings, and video recordings captured by children during quest completion are stored ONLY on the local device. These files are automatically deleted after parent approval or rejection, and are NEVER uploaded to our servers.

Cloud Storage

We use Firebase (Google Cloud Platform) with servers located in Europe (europe-west1) to store:

• Parent account information
• Child profile metadata (display names, not real names)
• Quest definitions and completion records
• Screen time balances and rules
• Activity history (app usage statistics, retained for 30 days)

Security Measures

• All data transmission uses TLS 1.3 encryption
• Firebase Security Rules restrict data access
• Parent PIN required for settings access
• Regular security audits

Third-Party Services

We use the following third-party services:

• Firebase (Google): Authentication, database, and cloud functions
• Apple Screen Time API: For iOS device management (iOS only)
• Android UsageStats API: For Android device management (Android only)
• Google Gemini AI: For generating educational quest content (see AI Services below)

We do NOT use any advertising networks, analytics trackers, or social media integrations in the child interface.

AI Services

Earn to Play uses Google Gemini AI to generate personalized educational quests for children. Important details about our AI usage:

• What we send: Only age range (e.g., "7-9 years") and quest category (e.g., "math", "science") — NO personal identifiable information
• What we receive: AI-generated quiz questions and educational content
• Data retention: Google does not retain prompts or responses for model training when using their API
• No child data: We never send child names, photos, recordings, or any personal data to AI services

All AI-generated content is reviewed by our team for age-appropriateness before being included in the app.

Parental Rights and Controls

Parents/guardians have the right to:

• Access: View all data associated with their family account
• Modify: Update or correct any child profile information
• Delete: Request complete deletion of family account and all associated data
• Export: Request a copy of all stored data in a readable format
• Consent Withdrawal: Revoke consent for data collection at any time

Data Retention

• Account Data: Retained until account deletion is requested
• Quest Completion Data: Retained for 90 days, then automatically deleted
• Activity History: App usage statistics retained for 30 days, then automatically deleted
• Local Media Files: Deleted immediately after parent review (photos, audio, video)
• Crash Reports: Anonymized and retained for 30 days

Children's Privacy (COPPA Compliance)

We comply fully with COPPA requirements:

• Verifiable parental consent is required before any data collection
• Parents can review and delete their child's information
• We collect only information necessary for app functionality
• No behavioral advertising or tracking in child mode
• No sharing of children's data with third parties for marketing

Verifiable Parental Consent

Before collecting any data from children under 13, we obtain verifiable parental consent through the following process:

• Parent creates an account using their email address
• Email verification is required before adding child profiles
• Parent must acknowledge and accept our Privacy Policy and Terms of Service
• Parent creates a PIN for accessing parental controls
• Consent can be withdrawn at any time by deleting the child profile or account

Data Breach Notification

In the event of a data breach that affects personal information:

• We will notify affected users within 72 hours of becoming aware of the breach
• We will notify relevant supervisory authorities as required by GDPR
• Notification will include: nature of the breach, types of data affected, steps we are taking, and recommended actions for users
• We maintain an incident response plan and conduct regular security assessments

International Data Transfers

For users outside the European Economic Area (EEA), please note that data may be transferred to and processed in the EEA. We use Firebase's EU region (europe-west1) to minimize international transfers and ensure GDPR compliance.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes