# Privacy Policy — Kids Learn and Play (KidZone)
**Effective date:** 2026-07-16
**Last updated:** 2026-07-16
**App name:** Kids Learn and Play
**Package name:** `com.genztechapps.kidsearn.app`
**App version:** 1.0.8
**Canonical URL:** <https://sites.google.com/view/genztechapps/home/kidslearnandplayabc-games>
**Developer contact:** naeem.abbas20201@gmail.com
This app is designed for children and participates in Google Play's **Designed for Families** program. We comply with the Children's Online Privacy Protection Act (**COPPA**), the EU **GDPR-K**, and Google Play Families Policy.
---
## 1. Summary (TL;DR)
- We **never ask for or collect personal details** about you or your child — no name, email, date of birth, photos, contacts, location, or microphone — and we **sell nothing** to anyone. The only identifiers that ever leave the device are Google's own, for ads and crash reports (Sections 5 and 6).
- All progress, settings, and parental controls are stored **only on your device**. We run no servers, there is no account, and there is no cloud sync or backup.
- We show only **non-personalized, kid-safe ads** through Google AdMob's child-directed configuration.
- The app uses the **Android Advertising ID (AAID)** for ad delivery. Because ads are configured as child-directed, it is **not** used to personalise ads, build a profile, or track your child across apps. See Section 5.
- We **do use Google Firebase Crashlytics** in the published app to collect anonymous crash diagnostics. This is the only data the app sends automatically, it contains no personal information, and it is described in full in Section 6.
- The app includes Google Play Billing, which honours an existing "Remove Ads" subscription. We never see your payment details.
---
## 2. Information stored on the device
The app keeps the following entirely on the device using Android's DataStore preferences, which are sandboxed to this app under Android's per-app storage isolation. None of this is transmitted off the device by us:
| Data | Purpose |
| --- | --- |
| Star count, achievements, daily streak | Track progress and motivate practice |
| Per-module accuracy counters | Adapt difficulty (Easy / Medium / Hard) per topic |
| Per-module daily playtime (last 30 days) | Show parents activity in Parent Zone |
| Routine checklist + 30-day history | Display the daily routine module |
| Sound on/off, theme (System/Light/Dark), uppercase/lowercase ABC | Personal preferences |
| Age group (2–4 / 5–7 / 8+) and complexity level | Pick age-appropriate content |
| Daily learning reminder enabled flag, hour and minute | Schedule a local notification (no server involved) |
| Parent PIN (4 digits) | Gate the Parent Zone from accidental child taps; explicitly **not** a security boundary |
| Onboarding-seen flag, premium (ad-free) flag | One-time onboarding and subscription state |
The data above is removed when the app is uninstalled or when "Clear all data" is used from system Settings.
Android's automatic cloud backup is disabled for this app (`allowBackup="false"`), so this data is not copied to Google Drive.
**A note on the Parent PIN.** It is stored unencrypted in the app's private storage. It exists to stop a young child from wandering into settings or purchases — it is a parental gate, not a security control. Please do not reuse a PIN you use for banking or device unlock.
---
## 3. Information we do **not** collect
We do **not** collect, store, or share any of the following:
- Name, email address, phone number, or postal address
- Photographs, contacts, microphone audio, or precise location
- Account credentials, social-network identifiers, or device fingerprints
- Any identifier we create ourselves to recognise you or your child — we generate none
The app does use the Android Advertising ID for ad delivery; because that is an identifier, it is described openly in Section 5 rather than listed here.
The app does not provide a way for children to upload, post, share, or otherwise communicate any content to us or to other users. There are no chat features, no user accounts, no sign-in, and no in-app text input that leaves the device.
---
## 4. Permissions we request and why
| Permission | Why |
| --- | --- |
| `INTERNET`, `ACCESS_NETWORK_STATE` | Required by Google AdMob, Firebase Crashlytics, and Google Play Billing to fetch ads, report crashes, and verify subscriptions. |
| `POST_NOTIFICATIONS` (Android 13+) | If the parent enables the optional daily learning reminder, the app posts a local notification at the chosen time. |
| `RECEIVE_BOOT_COMPLETED` | Re-arms the daily reminder alarm after a device reboot or app update so the reminder still fires. The alarm runs **on the device**. |
| `WRITE_EXTERNAL_STORAGE` (Android 9 / API 28 and below only) | Legacy permission used to save a drawing or coloring page to the device gallery on older Android versions. Modern Android uses scoped storage and does not need this. |
We do **not** request the camera, microphone, contacts, location, calendar, SMS, call log, or files outside of the gallery save flow described above.
---
## 5. Advertising
This app shows ads served by **Google AdMob** to support free use. Ads are configured for children under Google's Families policy:
- `setTagForChildDirectedTreatment(TAG_FOR_CHILD_DIRECTED_TREATMENT_TRUE)` (COPPA)
- `setTagForUnderAgeOfConsent(TAG_FOR_UNDER_AGE_OF_CONSENT_TRUE)` (GDPR)
- `setMaxAdContentRating(MAX_AD_CONTENT_RATING_G)` (general audience, kid-safe creative only)
These flags instruct AdMob to serve only **non-personalized, contextual, G-rated ads** that are appropriate for children. We do not use behavioural targeting, remarketing, custom audiences, or any feature that profiles individual users. Google's certified Families-Self-Certified Ad Network partners are responsible for the underlying ad delivery; their data practices are described at <https://support.google.com/admob/answer/9012903>.
When an ad is requested, Google receives standard ad-request metadata including the device's IP address, from which an approximate (city-level) location can be inferred, and the **Android Advertising ID (AAID)** — a resettable, device-level identifier provided by Android itself.
Because every ad request is tagged child-directed and under-age-of-consent, Google does **not** use the AAID to personalise ads, to remarket, or to build an advertising profile of the user. It is used for ad delivery, frequency capping (so the same ad is not shown repeatedly), measurement, and fraud prevention. We never receive the AAID ourselves, and we send no identifier of our own.
You can reset the Advertising ID, or ask apps not to use it for personalization, at any time in Android Settings → Google → Ads.
**Ads are currently limited to a single small banner** at the bottom of a screen. Ads never appear inside the Parent Zone. The app contains no full-screen interstitial and no rewarded ads.
Because ads are already non-personalized for every user, no consent form is shown and the app does not use Google's User Messaging Platform (UMP) — there is no ad personalization to consent to.
If an active "Remove Ads" subscription is associated with your Google account, all ad surfaces are disabled.
---
## 6. Crash diagnostics
The published version of the app includes **Google Firebase Crashlytics** so we can find and fix crashes. This is the only information the app sends automatically. When the app crashes, Firebase receives:
- The stack trace of the crash
- Device model, manufacturer, and Android OS version
- App version and state at the time of the crash (for example free memory, and whether the app was in the foreground)
- A randomly generated, app-scoped installation identifier, used only to group several crashes from the same install. It is not linked to you, your child, or any Google account, and it is reset if the app is reinstalled.
- A short trail of screen names leading up to the crash, recorded as plain text such as `Screen open: Home` or `Screen open: Parent Zone`
These breadcrumbs record **which screens were opened, not what happened on them**. No answers, drawings, star counts, PIN, or any other content or personal information is included. Crash reporting is disabled entirely in development builds and is active only in the version published on Google Play.
We do not use Crashlytics for analytics, advertising, or profiling, and it is not used to track usage or behaviour. Firebase's data practices are described at <https://firebase.google.com/support/privacy>.
If you prefer not to send crash diagnostics, you can stop them by uninstalling the app. Because the app has no account and sends no identifier tied to you, we cannot locate or delete an individual crash record on request.
---
## 7. In-app purchases
This version of the app does **not** offer anything for sale. There is no purchase button and no upgrade prompt anywhere in the app, so a child cannot spend money in it.
The app does include **Google Play Billing**, which checks on launch whether an active "Remove Ads" subscription already exists on your Google account — for example from a previous version — and hides ads if one does. All it learns is whether an active subscription exists. We never see your payment-card information; any transaction is handled entirely by Google. We store only a local boolean flag recording whether the subscription is active, so ads can be skipped without re-querying Google on every screen. Refer to Google's terms at <https://play.google.com/about/play-terms/> for billing details.
If a purchase option is reintroduced in a future version, it will be placed behind the Parent Zone PIN so a child cannot buy it accidentally, and this policy will be updated before that change ships.
---
## 8. Children's artwork
The Drawing and Coloring activities let a child create pictures.
- Artwork is held in memory while the activity is open and is **not** saved anywhere by default.
- A picture leaves the app only when an adult explicitly taps Save or Share. Save writes the image to your device's own photo gallery; Share hands it to whichever app you choose from the Android share sheet.
- Saved artwork is never transmitted to us and is never used for advertising.
- The app cannot read, browse, or open existing photos on your device, and it has no camera access.
---
## 9. Children and parental controls
This app is intended for children aged approximately 2–8 and their parents/guardians. The Parent Zone (PIN-gated) lets a parent:
- View activity reports (per-module playtime over the last 30 days).
- Reset stars, the routine, or all app data.
- Set or change the parent PIN.
- Configure the daily learning reminder time.
Parents may also clear all app data at any time via Android Settings → Apps → Kids Learn and Play → Storage → Clear data. We do not retain any copy of that data because none of it ever left the device.
Because we collect no personal information from children, there is no personal data for a parent to review or delete from our records — we hold none.
---
## 10. Data security
We send no personal details off the device, and nothing your child creates or does in the app is uploaded. The only data that leaves the device at all is the ad-request metadata in Section 5 (which includes the Advertising ID) and the anonymous crash diagnostics in Section 6, both sent directly to Google over HTTPS/TLS. Neither reaches a server of ours.
We operate no servers and no database of our own, so there is no server-side store of user data that could be breached. On-device data is held in Android's standard DataStore, sandboxed to the app under Android's per-app storage isolation.
---
## 11. Third-party services
| Service | Purpose | Data sent off device |
| --- | --- | --- |
| Google AdMob (Families-configured) | Serves non-personalized banner ads | Standard ad-request metadata, including IP address and the Android Advertising ID (AAID) — not used for personalization or profiling; no identifiers from us |
| Firebase Crashlytics | Crash diagnostics (published builds only) | Stack trace, device model/OS, app version, app-scoped install identifier, screen-name breadcrumbs |
| Google Play Billing | Checks for an existing "Remove Ads" subscription | Handled by Google; we only receive a yes/no result |
| Google Play Services (Mobile Ads SDK, Billing Client) | Required Android infrastructure for the above | Per Google's Play Services privacy policy |
Apart from Crashlytics as described in Section 6, we do not embed Facebook, Unity, Firebase Analytics, Firebase Authentication, Cloud Firestore, AppsFlyer, Adjust, or any other analytics, attribution, or social SDK. The app has no cloud database and no sign-in of any kind.
---
## 12. Data retention
- **On-device data** is kept until you clear it or uninstall the app. We set no expiry.
- **Per-module playtime history** is pruned to the last 30 days by the app itself.
- **Crash reports** are retained by Firebase Crashlytics for 90 days.
- **Ad and billing data** are retained by Google under Google's own policies, linked above.
We ourselves retain nothing, because we receive nothing.
---
## 13. GDPR (European users)
Our lawful basis for the minimal processing described here is legitimate interest in delivering a working, stable, ad-funded app, and performance of a contract where an existing subscription is honoured.
If you are in the European Economic Area or the UK, you have the rights of access, rectification, erasure, restriction, portability, and objection. In practice, because we hold no personal data ourselves and operate no servers, these rights are satisfied on your device: everything the app stores is already in your sole possession, and Section 9 explains how to erase it.
The Advertising ID is an online identifier and therefore personal data under the GDPR, even though ads are non-personalized. It is processed by Google, not by us. You can reset it or limit its use at any time in Android Settings → Google → Ads, and Google's own controls and policies apply to it (see Section 11).
---
## 14. Changes to this policy
If we change this policy in any material way (for example, adding a new third-party service), we will post the updated version inside the app at "Settings → Privacy Policy" and update the "Last updated" date above before the change takes effect. Continued use after the new effective date constitutes acceptance.
---
## 15. Contact
Questions, requests to delete on-device data, or COPPA / GDPR-K inquiries:
**naeem.abbas20201@gmail.com**
Please include the app name (Kids Learn and Play) and a brief description of your request. We aim to respond within 7 business days.