# Privacy Policy — Kids Learn and Play (KidZone)
**Effective date:** 2026-07-22
**Last updated:** 2026-10-10
**App name:** Kids Learn and Play
**Package name:** `com.genztechapps.kidsearn.app`
**App version:** 1.0.19
**Canonical URL:** <https://sites.google.com/view/genztechapps/home/kidslearnandplayabc-games>
**Developer contact:** naeem.abbas20201@gmail.com
This app is designed for children and participates in Google Play's **Designed for Families** program. We comply with the Children's Online Privacy Protection Act (**COPPA**), the EU **GDPR-K**, and Google Play Families Policy.
---
## 1. Summary (TL;DR)
- We **never ask for or collect personal details** about you or your child — no name, email, date of birth, photos, contacts, location, or microphone — and we **sell nothing** to anyone. The only identifiers that ever leave the device are Google's own, for ads and crash reports (Sections 5 and 6).
- All progress, settings, and parental controls are stored **only on your device**. We run no servers, there is no account, and there is no cloud sync or backup.
- We show only **non-personalized, kid-safe ads** through Google AdMob's child-directed configuration: a small banner, plus at most two full-screen ads per app session, only at natural breaks (Section 5).
- The app uses the **Android Advertising ID (AAID)** for ad delivery. Because ads are configured as child-directed, it is **not** used to personalise ads, build a profile, or track your child across apps. See Section 5.
- We **do use Google Firebase Crashlytics and Firebase Analytics** in the published app to collect anonymous crash diagnostics and basic app-usage counts (app opened, screen opened, app updated). Together these are the only data the app sends automatically, they contain no personal information, and they are described in full in Section 6. Analytics is configured **not** to use the Advertising ID and **not** to send any advertising signal.
- The app includes Google Play Billing, which honours an existing "Remove Ads" subscription. We never see your payment details.
---
## 2. Information stored on the device
The app keeps the following entirely on the device using Android's DataStore preferences, which are sandboxed to this app under Android's per-app storage isolation. None of this is transmitted off the device by us:
| Data | Purpose |
| --- | --- |
| Star count, achievements, daily streak | Track progress and motivate practice |
| Per-module accuracy counters | Adapt difficulty (Easy / Medium / Hard) per topic |
| Per-module daily playtime (last 30 days) | Show parents activity in Parent Zone |
| Routine checklist + 30-day history | Display the daily routine module |
| Sound on/off, theme (System/Light/Dark), uppercase/lowercase ABC | Personal preferences |
| Age group (2–4 / 5–7 / 8+) and complexity level | Pick age-appropriate content |
| Daily learning reminder enabled flag, hour and minute | Schedule a local notification (no server involved) |
| Parent PIN (4 digits) | Gate the Parent Zone from accidental child taps; explicitly **not** a security boundary |
| Onboarding-seen flag, premium (ad-free) flag | One-time onboarding and subscription state |
The data above is removed when the app is uninstalled or when "Clear all data" is used from system Settings.
Android's automatic cloud backup is disabled for this app (`allowBackup="false"`), so this data is not copied to Google Drive.
**A note on the Parent PIN.** It is stored unencrypted in the app's private storage. It exists to stop a young child from wandering into settings or purchases — it is a parental gate, not a security control. Please do not reuse a PIN you use for banking or device unlock.
---
## 3. Information we do **not** collect
We do **not** collect, store, or share any of the following:
- Name, email address, phone number, or postal address
- Photographs, contacts, microphone audio, or precise location
- Account credentials, social-network identifiers, or device fingerprints
- Any identifier we create ourselves to recognise you or your child — we generate none
The app does use the Android Advertising ID for ad delivery; because that is an identifier, it is described openly in Section 5 rather than listed here.
The app does not provide a way for children to upload, post, share, or otherwise communicate any content to us or to other users. There are no chat features, no user accounts, no sign-in, and no in-app text input that leaves the device.
---
## 4. Permissions we request and why
| Permission | Why |
| --- | --- |
| `INTERNET`, `ACCESS_NETWORK_STATE` | Required by Google AdMob, Firebase Crashlytics, and Google Play Billing to fetch ads, report crashes, and verify subscriptions. |
| `POST_NOTIFICATIONS` (Android 13+) | If the parent enables the optional daily learning reminder, the app posts a local notification at the chosen time. |
| `RECEIVE_BOOT_COMPLETED` | Re-arms the daily reminder alarm after a device reboot or app update so the reminder still fires. The alarm runs **on the device**. |
| `WRITE_EXTERNAL_STORAGE` (Android 9 / API 28 and below only) | Legacy permission used to save a drawing or coloring page to the device gallery on older Android versions. Modern Android uses scoped storage and does not need this. |
We do **not** request the camera, microphone, contacts, location, calendar, SMS, call log, or files outside of the gallery save flow described above.
---
## 5. Advertising
This app shows ads served by **Google AdMob** to support free use. Ads are configured for children under Google's Families policy:
- `setTagForChildDirectedTreatment(TAG_FOR_CHILD_DIRECTED_TREATMENT_TRUE)` (COPPA)
- `setTagForUnderAgeOfConsent(TAG_FOR_UNDER_AGE_OF_CONSENT_TRUE)` (GDPR)
- `setMaxAdContentRating(MAX_AD_CONTENT_RATING_G)` (general audience, kid-safe creative only)
These flags instruct AdMob to serve only **non-personalized, contextual, G-rated ads** that are appropriate for children. We do not use behavioural targeting, remarketing, custom audiences, or any feature that profiles individual users. Google's certified Families-Self-Certified Ad Network partners are responsible for the underlying ad delivery; their data practices are described at <https://support.google.com/admob/answer/9012903>.
When an ad is requested, Google receives standard ad-request metadata including the device's IP address, from which an approximate (city-level) location can be inferred, and the **Android Advertising ID (AAID)** — a resettable, device-level identifier provided by Android itself.
Because every ad request is tagged child-directed and under-age-of-consent, Google does **not** use the AAID to personalise ads, to remarket, or to build an advertising profile of the user. It is used for ad delivery, frequency capping (so the same ad is not shown repeatedly), measurement, and fraud prevention. We never receive the AAID ourselves, and we send no identifier of our own.
You can reset the Advertising ID, or ask apps not to use it for personalization, at any time in Android Settings → Google → Ads.
**Ads are a small banner** at the bottom of a screen, plus **at most two full-screen ads per app session**: one interstitial when leaving a Learn lesson, and one rewarded interstitial when a game ends or when leaving a game after at least 30 seconds of play. The rewarded interstitial is always announced first by a 5-second notice with a "No thanks" button; watching it earns 2 in-app stars, and skipping it has no penalty. Stars exist only on the device and have no monetary value. If no banner ad is available (for example when the device is offline), the banner area is hidden rather than left blank. Full-screen ads appear only at these natural breaks, never in the middle of a lesson or game, and never inside the Parent Zone.
Because ads are already non-personalized for every user, no consent form is shown and the app does not use Google's User Messaging Platform (UMP) — there is no ad personalization to consent to.
If an active "Remove Ads" subscription is associated with your Google account, all ad surfaces are disabled.
---
## 6. Crash diagnostics and app-usage measurement
### 6.1 Crash diagnostics
The published version of the app includes **Google Firebase Crashlytics** so we can find and fix crashes. When the app crashes, Firebase receives:
- The stack trace of the crash
- Device model, manufacturer, and Android OS version
- App version and state at the time of the crash (for example free memory, and whether the app was in the foreground)
- A randomly generated, app-scoped installation identifier, used only to group several crashes from the same install. It is not linked to you, your child, or any Google account, and it is reset if the app is reinstalled.
- A short trail of screen names leading up to the crash, recorded as plain text such as `Screen open: Home` or `Screen open: Parent Zone`
These breadcrumbs record **which screens were opened, not what happened on them**. No answers, drawings, star counts, PIN, or any other content or personal information is included.
We do not use Crashlytics for advertising or profiling. Firebase's data practices are described at <https://firebase.google.com/support/privacy>.
### 6.2 App-usage measurement
The published version also includes **Google Firebase Analytics**. We added it because Crashlytics depends on it to deliver crash reports promptly and to show the trail of activity leading up to a crash; it is not used to build audience segments or to market to anyone.
**We log no events of our own.** The only measurements collected are the Firebase SDK's standard automatic ones:
- App opened for the first time, and sessions started
- Which screen was opened, recorded as the screen's internal class name such as `AbcActivity` or `ParentZoneActivity`
- App updated to a new version, or removed
- Device model, Android OS version, app version, country (derived from IP address, which Google itself does not retain in the reports), and language
Alongside these, Analytics uses the same kind of randomly generated, app-scoped installation identifier as Crashlytics. It is not linked to you, your child, or any Google account, and it is reset if the app is reinstalled.
As with crash reporting, this records **which screens were opened, not what happened on them**. No answers, drawings, star counts, PIN, or any other content or personal information is included.
Because this app is child-directed, Analytics is deliberately configured with three restrictions, all of which are set in the app's manifest:
- **The Advertising ID is not collected by Analytics** (`google_analytics_adid_collection_enabled = false`), so no usage measurement is ever tied to an advertising identifier.
- **No ad-personalization signal is sent** (`google_analytics_default_allow_ad_personalization_signals = false`).
- **No ad-user-data signal is sent** (`google_analytics_default_allow_ad_user_data = false`), so nothing measured here is shared with Google's advertising products.
Analytics data is never joined to the ad requests described in Section 5, is never used to personalise ads, and is never sold or shared with third parties for their own purposes.
### 6.3 Scope and opt-out
Both crash reporting and usage measurement are **disabled entirely in development builds** and are active only in the version published on Google Play.
If you prefer not to send crash diagnostics or usage measurement, you can stop them by uninstalling the app. Because the app has no account and sends no identifier tied to you, we cannot locate or delete an individual crash or usage record on request.
---
## 7. In-app purchases
This version of the app does **not** offer anything for sale. There is no purchase button and no upgrade prompt anywhere in the app, so a child cannot spend money in it.
The app does include **Google Play Billing**, which checks on launch whether an active "Remove Ads" subscription already exists on your Google account — for example from a previous version — and hides ads if one does. All it learns is whether an active subscription exists. We never see your payment-card information; any transaction is handled entirely by Google. We store only a local boolean flag recording whether the subscription is active, so ads can be skipped without re-querying Google on every screen. Refer to Google's terms at <https://play.google.com/about/play-terms/> for billing details.
If a purchase option is reintroduced in a future version, it will be placed behind the Parent Zone PIN so a child cannot buy it accidentally, and this policy will be updated before that change ships.
---
## 8. Children's artwork
The Drawing and Coloring activities let a child create pictures.
- Artwork is held in memory while the activity is open and is **not** saved anywhere by default.
- A picture leaves the app only when an adult explicitly taps Save or Share. Save writes the image to your device's own photo gallery; Share hands it to whichever app you choose from the Android share sheet.
- Saved artwork is never transmitted to us and is never used for advertising.
- The app cannot read, browse, or open existing photos on your device, and it has no camera access.
---
## 9. Children and parental controls
This app is intended for children aged approximately 2–8 and their parents/guardians. The Parent Zone (PIN-gated) lets a parent:
- View activity reports (per-module playtime over the last 30 days).
- Reset stars, the routine, or all app data.
- Set or change the parent PIN.
- Configure the daily learning reminder time.
Parents may also clear all app data at any time via Android Settings → Apps → Kids Learn and Play → Storage → Clear data. We do not retain any copy of that data because none of it ever left the device.
Because we collect no personal information from children, there is no personal data for a parent to review or delete from our records — we hold none.
---
## 10. Data security
We send no personal details off the device, and nothing your child creates or does in the app is uploaded. The only data that leaves the device at all is the ad-request metadata in Section 5 (which includes the Advertising ID) and the anonymous crash diagnostics and usage measurement in Section 6, all sent directly to Google over HTTPS/TLS. None of it reaches a server of ours.
We operate no servers and no database of our own, so there is no server-side store of user data that could be breached. On-device data is held in Android's standard DataStore, sandboxed to the app under Android's per-app storage isolation.
---
## 11. Third-party services
| Service | Purpose | Data sent off device |
| --- | --- | --- |
| Google AdMob (Families-configured) | Serves non-personalized banner, interstitial, and rewarded interstitial ads | Standard ad-request metadata, including IP address and the Android Advertising ID (AAID) — not used for personalization or profiling; no identifiers from us |
| Firebase Crashlytics | Crash diagnostics (published builds only) | Stack trace, device model/OS, app version, app-scoped install identifier, screen-name breadcrumbs |
| Firebase Analytics | Supports Crashlytics delivery; basic app-usage counts (published builds only) | Automatic events only (first open, session start, screen opened, app update/remove), device model/OS, app version, country, language, app-scoped install identifier. **No** Advertising ID and **no** advertising signals — see Section 6.2 |
| Google Play Billing | Checks for an existing "Remove Ads" subscription | Handled by Google; we only receive a yes/no result |
| Google Play Services (Mobile Ads SDK, Billing Client) | Required Android infrastructure for the above | Per Google's Play Services privacy policy |
Apart from Crashlytics and Firebase Analytics as described in Section 6, we do not embed Facebook, Unity, Firebase Authentication, Cloud Firestore, AppsFlyer, Adjust, or any other analytics, attribution, or social SDK. The app has no cloud database and no sign-in of any kind.
---
## 12. Data retention
- **On-device data** is kept until you clear it or uninstall the app. We set no expiry.
- **Per-module playtime history** is pruned to the last 30 days by the app itself.
- **Crash reports** are retained by Firebase Crashlytics for 90 days.
- **Usage measurement** is retained by Firebase Analytics for 2 months, the shortest retention Google offers, after which only aggregated totals remain.
- **Ad and billing data** are retained by Google under Google's own policies, linked above.
We ourselves retain nothing, because we receive nothing.
---
## 13. GDPR (European users)
Our lawful basis for the minimal processing described here is legitimate interest in delivering a working, stable, ad-funded app, and performance of a contract where an existing subscription is honoured.
If you are in the European Economic Area or the UK, you have the rights of access, rectification, erasure, restriction, portability, and objection. In practice, because we hold no personal data ourselves and operate no servers, these rights are satisfied on your device: everything the app stores is already in your sole possession, and Section 9 explains how to erase it.
The Advertising ID is an online identifier and therefore personal data under the GDPR, even though ads are non-personalized. It is processed by Google, not by us. You can reset it or limit its use at any time in Android Settings → Google → Ads, and Google's own controls and policies apply to it (see Section 11).
---
## 14. Changes to this policy
If we change this policy in any material way (for example, adding a new third-party service), we will post the updated version inside the app at "Settings → Privacy Policy" and update the "Last updated" date above before the change takes effect. Continued use after the new effective date constitutes acceptance.
---
## 15. Contact
Questions, requests to delete on-device data, or COPPA / GDPR-K inquiries:
**naeem.abbas20201@gmail.com**
Please include the app name (Kids Learn and Play) and a brief description of your request. We aim to respond within 7 business days.