Privacy policy

1. Who we are and what this policy covers

This privacy policy explains how i2p30m (“we”, “us”) handles information in the app Whisker Detectives (the “App”) and on this website.

We are the data controller for the processing described here. You can reach us at any time at support@[your-domain].

The App is made for children aged 6 to 10 and for the parents who set it up. We wrote this policy for grown-ups, in plain language. If anything is unclear, please ask us.

2. Children’s privacy

We do not collect personal information from children. The App has no accounts, no sign-up, no chat or social features, no content that leaves the device, no analytics, no location and no access to the camera, microphone, photos or contacts.

• COPPA (United States): we do not collect, use or disclose personal information from children under 13 – the anonymous crash reports described below contain no persistent identifier – so no verifiable parental consent is needed.
• GDPR (EU / UK): we do not process children’s personal data on the basis of consent (Article 8 GDPR), because we do not process it at all.
• UK Age Appropriate Design Code: the App is private by default – no profiling, no nudges, nothing shared.
• EU Digital Services Act (Article 28): we show no advertising at all.
• Apple Kids Category and Google Play Families: no third-party advertising or analytics, and every link out of the App sits behind a parental gate.

Everything a grown-up might need – purchases, restoring purchases, settings and the link to this website – sits in a parent area behind a parental gate (an arithmetic question a young child cannot answer). A child cannot reach a website, a store page or a payment screen without an adult.

3. Information that stays on the device

To work, the App saves a few things locally on the device. They are never sent to us:

• play progress – solved mysteries, stars, the mystery in progress and the daily-mystery calendar;
• settings chosen in the parent area – language, sound, voice, tutorial and the crash-report switch;
• which content has been unlocked (a local copy of purchases, so the App works offline);
• simple counters – how many times the App has been opened and when a store rating was last suggested to the parent, so we don’t ask too often.

You can delete this with Parent area → About → Reset progress, or by uninstalling the App.

4. Anonymous crash reports (Sentry)

If the App hits a programming error, it can send a short crash report to Sentry (Functional Software, Inc.), our processor, using its EU data region (Germany), so we can fix the bug.

For this App we have cut the reports down to the minimum. A report contains only the error and where in the code it happened, the App version, and the operating system name and version. Before anything is sent, the App removes any user, device, language, time-zone and network details; the native crash reporter, usage breadcrumbs, screenshots, session tracking and performance measurements are all switched off, and IP storage is disabled on our Sentry project. A report says nothing about your child, the device or how the App is used.

A parent can turn crash reports off at any time: Parent area → About → “Anonymous crash reports” (it takes effect from the next start of the App).

5. Purchases and RevenueCat

The App is free to download and offers optional in-app purchases, available only in the parent area.

Payments are handled entirely by Apple (App Store) or Google (Google Play). We never see your name, e-mail address, card or billing address. Apple and Google act as independent controllers: Apple Privacy Policy, Google Privacy Policy.

Purchase verification. To check that a purchase is valid and to let you restore it on another device, the App uses RevenueCat, Inc. (USA) as our processor. The App contacts RevenueCat only after a parent passes the parental gate and opens the store screen. RevenueCat receives a random, anonymous app user ID created on the device; the store receipt and transaction details (product, date, price, currency, store country); and technical connection data (IP address, platform, system, App and SDK version). We have configured RevenueCat not to collect device or advertising identifiers, we send it no attributes about you or your child, and its in-app messages and diagnostics are switched off.

Ratings. Only inside the parent area – after a purchase or after a number of launches – the App may ask the system to show Apple’s or Google’s own rating dialog. The App itself sends nothing.

6. What we never do

• No advertising of any kind and no advertising SDKs.
• No analytics or attribution SDKs.
• No advertising identifiers – on Android the AD_ID permission is removed, and the App never asks for tracking permission.
• No tracking, profiling, sale or sharing of personal data.
• No location, camera, microphone, photos, contacts or other device permissions.
• No links, store pages or purchase screens a child can reach without the parental gate.

7. When you contact us

If you e-mail us, we receive your e-mail address, your message and anything you attach. We use it only to answer you and to fix what you report, and keep the conversation for up to 24 months after the last message, unless we need it longer to establish or defend legal claims. Please don’t send us personal information about your child. Our e-mail provider stores messages on our behalf as a processor.

8. This website

This website uses no cookies, no analytics, no advertising and no third-party scripts. Fonts and images are served from our own domain, and there are no forms.

The site is hosted by Vercel Inc. (USA), which processes technical data such as your IP address, browser, the page requested and the time, to deliver the site and protect it against abuse. These logs are kept for a short period set by Vercel and we do not use them to identify visitors.

9. Legal bases (GDPR)

10. Recipients and international transfers

We share data only with the processors named above – Sentry (crash reports, EU data region), RevenueCat (purchases), Vercel (website) and our e-mail provider – each bound by a data processing agreement. Apple and Google process purchase data as independent controllers. We never sell data.

RevenueCat, Vercel and Sentry’s parent company are based in the United States. Where personal data may leave the European Economic Area or the United Kingdom, the transfer is covered by the EU⁠–⁠U.S. Data Privacy Framework (where the recipient is certified) or the European Commission’s Standard Contractual Clauses.

11. How long we keep data

• On-device data: until you reset progress or uninstall the App.
• Crash reports: deleted automatically after Sentry’s retention period (at most 90 days).
• Purchase records at RevenueCat: for as long as the App is available, so you can restore purchases, or until you ask us to delete them.
• Support e-mails: up to 24 months after the last message.

12. Your rights

Depending on where you live, you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, and to data portability. Write to support@[your-domain]; we reply within one month.

Crash reports are anonymous, so we cannot tell which are yours; switch them off in the parent area at any time. To delete purchase records, send us the order number from your store receipt (Apple “Order ID”, or Google Play “GPA.…”). Deleting them does not cancel your purchase: “Restore purchases” will unlock it again later.

You can also lodge a complaint with a data protection authority – in Poland the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority where you live or work.

If you live in California or another U.S. state with a consumer privacy law: we do not sell or share personal information, and we do not use sensitive personal information.

13. Security

The best protection is not having the data at all. All connections from the App and to this website are encrypted (HTTPS/TLS), and only the processors listed above can access the limited data they handle for us.

14. Changes to this policy

If we change how the App handles data, we will update this page and the date at the top before the change takes effect, and mention significant changes in the App’s update notes.

15. Contact

i2p30m
E-mail: support@[your-domain]

16. App details

For app-review teams and curious parents: