Privacy Policy
This policy covers the Busy Kids and Bukovki («Буковки») apps for iPhone, iPad and Android, the web version of the app at /app/, and the websites busykids.academy and bukovki.app.
In short
- The apps contain no advertising and no analytics or tracking SDKs. We do not sell data and do not build profiles of children or parents.
- Without an account, everything a child does — profiles, progress, drawings, photos, videos — stays on the device.
- An account is optional in the mobile apps and needed only for the web version and web purchases. It belongs to a parent, never to a child.
- Children’s progress is saved to the account only if a parent agrees, and can be switched off at any time; the server copy is then deleted.
- A child’s photo, drawings and Word Workshop videos never leave the device.
- You can delete your account at any time, in the app or on the website. It is deleted immediately and disappears from backups within 30 days.
1. Who is responsible
The controller of your personal data is Editale OÜ, registry code 17430609, Narva mnt 7-557, 10117 Tallinn, Estonia. Contact: hello@editale.com. All questions about data protection go to this address.
2. Using the apps without an account
The apps work fully offline and without an account. In this case:
- Child profiles (name or nickname, chosen avatar or a photo, age if you enter it), progress, stars, stickers, settings, drawings and colourings, and Word Workshop videos are stored only on the device (on the web — in the browser’s storage). We have no access to them. Deleting the app (or clearing the browser’s site data) deletes them.
- Purchases go through the app store (see section 5). To know whether Premium is active, the app talks to RevenueCat under a random identifier that is not linked to your name or email.
- The apps make no other network requests about the child: no analytics, no crash reporting services, no advertising identifiers.
Everything that connects the app to the outside world — purchases, sign-in, the support form, sharing, rating the app, links to websites — is behind a parental gate.
3. The account
An account lets a parent use the web version, buy Premium on the website, keep Premium across devices and, if they choose, save children’s progress.
What we store: your email address; how you sign in (a one-time code sent by email, Sign in with Apple, or Google); technical sign-in data (account creation date, last sign-in, the identifier issued by Apple or Google). There are no passwords.
When you use Sign in with Apple, you may hide your real address — then we only receive Apple’s relay address. From Google we receive your email address and account identifier; we do not ask for your contacts, photos or anything else.
Your account’s identifier is also used as your customer ID with RevenueCat, so that a purchase made on one device is recognised on another.
4. Saving children’s progress (only with consent)
After the first sign-in the app asks: «Save children’s progress in the account?». If you agree, we store, for each child profile:
- the profile record: name or nickname (we recommend a nickname), the chosen drawn avatar, age if entered, creation and change dates;
- the profile’s progress and settings: stars, points, levels completed, stickers, the companion chosen, sound and motion settings and similar app values.
Not synchronised, ever: the child’s photo (another device shows the drawn avatar instead), drawings and colourings, Word Workshop videos.
We record your answer, its time and the version of this policy you agreed to. You can switch synchronisation off in the parents’ area at any time: the copies of all profiles are then deleted from the server immediately; the copies on your devices stay. Deleting a profile in the app deletes it from the server at once.
5. Purchases and subscriptions
- App Store (Apple), Google Play (Google) and, in Russia, RuStore process payments in the apps. We never see your card details. From the store we receive the product, purchase and renewal dates, status, country and price.
- On the website, payments are processed by Stripe through RevenueCat Billing; for payments in roubles on bukovki.app — by lava.top (when this method is available). The payment page is hosted by the payment provider, and card details go directly to it.
- RevenueCat keeps the purchase status from every store together, so that Premium works on all your devices. We keep a copy of the current status (active or not, plan, expiry date) and of payment records in our database.
6. The websites
- Hosting: the websites and the web app are served by Amazon Web Services (AWS Amplify, CloudFront). The servers process your IP address and browser data to deliver pages and protect against attacks.
- Statistics: we count visits with Plausible Analytics, an EU service that uses no cookies and stores no personal data: only aggregated numbers (pages, referrers, countries, device types). Statistics are not collected in the apps.
- Cookies and browser storage: we do not use advertising or tracking cookies, so there is no cookie banner. The website stores only what is strictly necessary: your sign-in session (when you sign in) and your theme choice, in the browser’s local storage. Payment pages of Stripe and lava.top may set their own cookies needed for the payment.
- Support form: what you write (name, email, message) is sent through a Google Apps Script to our mailbox (Google Workspace). The form is protected from spam by Google reCAPTCHA, which loads only on the support page when you start filling in the form and is subject to Google’s Privacy Policy and Terms.
7. Support requests from the app
When you send a message from the app’s «Feedback» form, we receive what you write, the email you enter (optional), and technical details that help us find the problem: app and build version, platform, operating system and device model, app and system language, time zone, screen size and text scale, light or dark mode, session length, whether Premium is active (no receipts and no identifiers), and the app’s recent log. The message is delivered through a Google Apps Script to our mailbox. If the direct send fails, the app opens a draft in your own mail app instead.
8. Who processes data for us
We work only with providers who need the data to do their job, under data processing agreements:
| Provider | What for | Where |
|---|---|---|
| Supabase (Supabase Inc.) | accounts, sign-in, database, server functions | data stored in the EU |
| RevenueCat (RevenueCat Inc.) | purchase and subscription status across stores | USA |
| Stripe (Stripe Payments Europe Ltd.) | card payments on the website | EU / USA |
| lava.top | payments in roubles on bukovki.app (when available) | as set by lava.top’s own terms |
| Resend | sending sign-in codes and service emails | USA |
| Plausible Analytics (Plausible Insights OÜ) | cookieless website statistics | EU |
| Apple | App Store purchases, Sign in with Apple | USA / Ireland |
| Google Play purchases, Sign in with Google, support mailbox and form (Apps Script, reCAPTCHA) | USA / Ireland | |
| RuStore (VK) | purchases in the RuStore version of the app | Russia |
| Amazon Web Services | website and web app hosting | EU / worldwide edge network |
Where data leaves the European Economic Area (for example, to the USA), the transfer is protected by the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.
9. Why we may process data (legal bases)
- Contract — to provide the account, the web version, Premium and purchases you asked for (GDPR art. 6(1)(b)).
- Consent — to save children’s progress in the account (art. 6(1)(a)). You can withdraw it at any time; this does not affect processing before the withdrawal.
- Legitimate interests — to keep the service secure, prevent abuse and answer your support requests (art. 6(1)(f)).
- Legal obligation — to keep accounting records of payments (art. 6(1)(c)).
10. How long we keep data
- A child profile on the server — until you delete the profile in the app or switch synchronisation off; then it is deleted immediately.
- The account — until you delete it. Deletion is immediate; backup copies are overwritten within 30 days.
- An inactive account — if you have not signed in for 24 months, we send a warning email; if you still do not sign in, the account is deleted 30 days after the warning.
- Consent records — as long as the account exists.
- Payment and accounting records — 7 years, as required by the Estonian Accounting Act.
- Support correspondence — as long as needed to help you, and no longer than 24 months after the last message.
- Purchase history at the stores and at RevenueCat — kept by them so purchases can be restored and accounted for. After you delete your account it remains linked only to a random identifier, not to your email.
11. Children
Our apps are made for children aged 2–7 and are designed to be used with a parent nearby. We do not ask children for an email address, contacts, location or any other personal data, and children cannot sign in, buy anything or leave the app without passing the parental gate. The apps show no advertising and contain no analytics or tracking tools.
A child’s data reaches our server only if a parent signs in and agrees to save progress, and only the profile data listed in section 4. We recommend using a nickname instead of a real name. If you believe a child has sent us personal data without a parent’s consent, write to us and we will delete it.
12. Your rights
You have the right to access your data, to correct it, to have it deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. Most of this you can do yourself: switch synchronisation off and delete profiles in the parents’ area, and delete your account in the app or in your account on the website. For anything else write to hello@editale.com — we answer within one month.
You may also complain to a data protection authority. Ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee); you may also contact the authority in your own country.
13. Security
Data is transferred only over encrypted connections. In the database every row of account data is available only to its owner (row-level security). Server keys are never shipped in the apps.
14. Changes to this policy
When this policy changes, we publish the new version here with a new date. If a change affects what you agreed to — for example, what is saved in the account — the app asks for your consent again.