Privacy policy
Who we are
ZaKids is run by {companyName}. This policy covers the ZaKids app and the website zakids.app.
You can write to us at support@zakids.app. What you write and your email address are kept while your question is open, then for at most 6 months.
The short version
Each child's profile and play stay only on this device.
Children have no accounts, and there are no ads.
ZaKids sends only requests for new games, anonymous error reports and counts, and purchase checks. None of them says anything about your children.
You can turn reports off and delete everything in the parent area.
A grown-up should set up each child.
No accounts for children
Children have no accounts. The app asks for no name, no email and no photo of a child.
A nickname is optional. If you give one, it stays on the device and is never sent anywhere.
What stays on the device
These things stay on your phone or tablet and are never sent to us: each child's avatar and outfit, optional nickname, age band, optional gender, optional country, the culture used for the pictures and games (set from the country or the languages), languages, voice, reading level, number style, the skills you want to focus on, interests, starting levels, settings, daily limit, and music and bilingual switches; an unfinished setup; each child's current level in every skill and the record of level changes; play time per day and whether the limit was reached.
Also staying on the device: results, recent puzzles and the demos already seen (the reports for parents are worked out on the device from these and are never stored or sent); a short local note when a game could not be made; the path position, the park and rewards, and the lines and tips already shown; the daily challenge of each child and which content set each child uses.
Also on the device: the app language, the child used last, whether the tip was shown and which version of this policy you saw; the downloaded game sets, their update markers and when a voice arrived; the downloaded pictures and voice files; error reports and usage days that are waiting to be sent, and the reports switch; the store's proof of your purchases, the proof of paid packs, which paid parts are ready and notices about a lapsed plan; and the purchase references of a deletion that our server has not confirmed yet. Some of these items leave the device, but only as the sections below describe.
All of this is left out of cloud backups and device transfers by the app. The one exception is on iPhone: the downloaded picture and voice files sit in a folder that an iCloud backup may include. They hold nothing about your children.
Downloaded game sets that go unused for 30 days are removed from the device, along with their downloaded pictures and voice files. All of it is deleted when you use Delete all data or uninstall the app.
New games and content updates
To bring new games, the app asks our server for a content set. A request names only an age band and a voice (which set is wanted), an update marker (which version the device has), the app version, the platform (Android or iPhone) and, after a purchase, a proof of paid packs, with no purchase reference.
A request carries nothing about any child. This is a content update, not data about a child: what a child is and does stays on the device and never leaves it.
The pictures and sounds come from our media host, which sees only the name of the file asked for (its fingerprint) and the network address of the request, as any internet service does.
We keep nothing per request. We keep one daily total per content set, app version and platform. Our server also holds the games and voice lines we make and the history of their review. It holds nothing about any family.
Error reports and usage counts
If something goes wrong, or once a day, ZaKids may send a few anonymous facts to its own server. They never say who you are or who your children are.
Error reports say what kind of problem happened (the app closed, an unexpected error, a game could not be made, a sound or picture was missing, content could not download, an update failed, a report could not be sent) and where in the app's code and which puzzle, line or picture it concerned.
With each report go: the app version and update, the kind of phone (Android or iPhone), its main system version and memory size (small, medium or large), the app language, the date and hour, and how many times it happened that day.
Daily counts for the whole device, added up over all your children, are sent the next day: app starts, first setups finished, rounds finished in patterns, logic, memory, shapes and space, and numbers, rounds closed before the end, daily challenges finished, play together rounds finished, hints used, calm goodbye screens shown, and parent area openings.
Each sending carries a new random code, used only so that a repeated sending is not counted twice.
Single reports are deleted within 24 hours. Grouped error totals are kept 13 months. Daily usage totals are kept, and they cannot be linked to anyone.
These reports are on by default. You can turn them off in the Privacy page of the parent area. Turning them off deletes what was waiting on the device.
Purchases
Purchases are made with Apple or Google. The family's Apple or Google account and payment are handled by the store, and no name, card or account of the parent reaches us.
After a purchase, the app sends our server the store's proof, the product, the platform and the app version. Our server asks Apple or Google to confirm it.
We keep the store reference, the product, the state, the dates and the country for as long as the purchase is valid and for 13 months after it ends. The store keeps its own records under its own policy.
App updates
App updates come from the update service of Expo, which is in the United States. It receives the app build version, the platform, the update channel, the codes of the running and downloaded updates and a random code of this install that the update service makes itself, and it sees the network address of the request.
Our server never sees this random code. A reinstall makes a new one. Delete all data does not change it, because it is kept by the update library; uninstalling the app or clearing its data in the phone settings resets it.
The website
The website zakids.app sets no cookie, has no analytics and shows no embedded content from other sites.
The website host sees the network address of a visit, as any website does, and keeps nothing about it for us. The app opens the website only behind the parent gate.
Who else sees anything
Apple and Google run the stores and handle purchases. Expo runs the update service. Our server host, the company that runs our server, is the one the owners choose, in a European Union region. Cloudflare serves our media files and the website. A mail provider sends the invitation emails of our content reviewers.
Each of them sees the network address of a request, as any internet service does.
Our server and its logs are at the server host. The logs are kept 30 days and hold no network address.
Our server's database backups are kept up to 14 days: they are nightly copies on Cloudflare R2, and only the newest 14 are kept.
The people who review our content have accounts in our content studio: name, email, role and languages. An account is removed 90 days after access ends, and records of access are kept 13 months without network address. The mail provider keeps the invitation emails for its own period.
No ads and no tracking
ZaKids has no ads, no tracking, no third-party analytics and no advertising code. We do not sell or share data.
Deleting all data
In the parent area, choose Delete all data. It takes two screens: the first shows what is deleted and what is kept, the second asks you to confirm.
It deletes every child's profile, levels, history, rewards, park, play days, reports and settings, the downloaded games, the reports waiting to be sent, and the proof of purchases on the device. It keeps your purchases, which stay with your Apple or Google account and come back with Restore purchases. It does not cancel a subscription: cancel it in your store settings.
The app also asks our server to delete the records of this device's purchases, at once or at the next connection. Our server keeps only one count of deletions per day.
A backup copy of our database may keep a deleted purchase record up to 14 days.
Deletion by email and questions
If you lost your device, write to support@zakids.app and give the order number from your Apple or Google receipt. We delete the matching purchase records within 30 days and answer you.
If you ask for all the data about your child: it exists only on the device, and nothing about your child was ever on our server.
Support emails are kept while the question is open, then for at most 6 months. Never send a child's name or photo. If you do, we delete it once your question is answered.
Where our server is
Our server runs in a region of the European Union, at the server host the owners choose.
Database backups are on Cloudflare R2, in a private bucket. What is held there is what our server holds: anonymous totals, store purchase references, the game content we make and the accounts of our reviewers. Nothing about any child.
The update service of Expo is in the United States and receives only what the App updates section lists.
Laws and store rules
This policy is written to follow the rules of the Apple Kids Category and Google Play Families, COPPA, the GDPR and the UK Age Appropriate Design Code, and the personal data rules of Egypt, the United Arab Emirates and Saudi Arabia.
This page claims no approval, certification or legal status. A statement of law is added here only after a lawyer has confirmed it.
Changes to this policy
When this policy changes, its version and date change here.
Before the app sends any new kind of data, a one-time note in the parent area tells you, and the new kind starts only after you accept it.