Privacy Policy

What's stored on the device

Everything below lives only on the device unless a parent turns on cloud backup:

• Child profiles — an avatar, an optional nickname, and an age. No name, email, or other personal information is needed to create one.
• Game progress — stars, XP, streaks, discovered items, and badges.
• Session history — which Worlds and modes were played, and when, shown only to a parent inside the app.
• App settings, such as sound on or off.

Optional, parent-controlled cloud backup

Behind a parent gate — a hold-to-unlock control a young child can't trigger by accident — a parent may optionally turn on cloud backup so a child's progress can be restored after a lost device or reinstall. When it's on:

• The device gets an anonymous identity via Firebase Authentication — no name, email, or personal information is required to enable this.
• The profile data above is stored in a cloud database (Firebase Firestore) tied to that anonymous identity.
• A parent may optionally add a backup email and password purely to recover that identity on a new device. This is the parent's own contact information, entered voluntarily, used only for recovery, never used for marketing, never shared with a third party, and never required to play.

This is off by default. Turning it off stops the device from syncing but doesn't delete data already backed up — contact us to request deletion.

Optional subscriptions

If a parent purchases Pictoria Kids+, the purchase is processed by the app stores (Google Play / Apple App Store) and, if enabled, RevenueCat, a subscription-management service. These providers may receive the transaction information needed to process the purchase and verify entitlement. This app never receives or stores payment card details.

Children's privacy

Children's privacy is the app's default posture, not an afterthought: no accounts, no ads, no behavioral tracking, and no data collection of any kind unless a parent takes a deliberate, gated action. We do not knowingly collect personal information from children beyond what's described above — entered by a parent, used only to personalize local gameplay, never sold, and never used for advertising.

Data deletion

To request deletion of any cloud-backed data, contact diweshsaxena@gmail.com with the backup email address, if one was set. Locally-stored data can be deleted at any time by removing a profile in Parent Settings, or by uninstalling the app.

Changes to this policy

If this policy changes, the date at the top of this page will change, and material changes will be reflected in the app's release notes.