Privacy Policy

1. About This App

Cubbie Playtime is a children's educational and entertainment app designed for young learners. It is intended to be set up and managed by a parent or legal guardian (the "Account Holder"). The Account Holder creates an account, registers one or more child profiles, and optionally connects a physical Cubbie Box toy. All in-app activity occurs under the Account Holder's supervision.

2. Information We Collect

2.1 Account Registration (Parent / Guardian)

2.2 Child Profile Data

2.3 Device & Usage Data (Collected Automatically)

• Device identifiers – anonymised device ID used by Firebase
• Push notification token – required to deliver in-app notifications
• NFC capability flag – detected locally to determine whether toy registration is available; no NFC data is sent to our servers beyond the toy's identifier
• App usage events – screens visited, games played, content accessed (collected via Firebase Analytics in aggregated, anonymised form)
• Crash reports – stack traces and device state at the moment of a crash (collected via Firebase Crashlytics; no personal information is deliberately included)

2.4 Locally Stored Data

Game progress, audio download status, and level scores are stored only on your device using the operating system's sandboxed storage. This data does not leave your device.

3. How We Use Your Information

We use the information we collect to:

• Create and manage accounts – verify your identity via OTP and maintain your account
• Deliver the Service – provide age-appropriate games, books, songs, and letter-tracing activities
• Personalise content – use child age (if provided) to curate learning content
• Register physical toys – link your Cubbie Box toy to your account via NFC
• Send notifications – deliver relevant in-app messages about new content or account events (you can opt out in device settings)
• Improve the App – use aggregated analytics and crash data to fix bugs and enhance features
• Ensure security – detect fraud, enforce our Terms of Service, and protect our users
• Comply with legal obligations – meet applicable data protection and children's privacy laws

4. How We Share Your Information

We do not sell your personal information. We share data only in the following limited circumstances:

4.1 Service Providers

We engage third-party service providers who process data strictly on our behalf and under confidentiality obligations. This includes our backend infrastructure provider, analytics platform (Firebase), and crash-reporting service (Firebase Crashlytics).

4.2 Legal Requirements

We may disclose your information if required to do so by law, court order, government request, or to protect the rights, property, or safety of Little Cubbie, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our assets, your data may be transferred to the successor entity. We will notify you before your personal information becomes subject to a different privacy policy.

4.4 With Your Consent

We will share your information with any other party only with your explicit prior consent.

5. Third-Party Services

The App integrates the following third-party SDKs. Each operates under its own privacy policy:

Google's privacy policy is available at policies.google.com/privacy.

6. Data Storage & Security

Your account data is stored on secure servers hosted on cloud infrastructure with industry-standard protections, including:

• Encryption in transit (TLS 1.2 or higher for all API communications)
• Encryption at rest for sensitive fields (phone numbers, authentication tokens)
• OTP-based authentication — we never store raw passwords
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security reviews and dependency updates

While we take reasonable precautions, no system is completely secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you as required by applicable law.

7. Children's Privacy COPPA

Cubbie Playtime is designed for use by parents and guardians on behalf of their young children. We do not knowingly allow children to independently create accounts or submit personal information.

7.1 How Children's Data Is Handled

• Child profile data (name, avatar, optional birthday) is entered exclusively by the parent or guardian Account Holder.
• Children's names and birthdays are not shared with advertising networks, analytics services, or any third party.
• Avatars are selected from a predefined library of images; no photos of children are collected.
• The "Prefer not to say" option is provided for date of birth so no child age needs to be disclosed to use the App.

7.2 Compliance with COPPA (United States)

We comply with the Children's Online Privacy Protection Act (COPPA). If we learn that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will delete it promptly. To report or request deletion of such data, contact us at privacy@littlecubbie.com.

7.3 Parental Controls

Parents and guardians can at any time:

• Review, edit, or delete a child's profile via Account Settings in the App.
• Delete the entire account (including all child profiles) via the "Delete Account" option in Account Settings.
• Withdraw consent by contacting us directly.

8. Data Retention

After account deletion, we may retain minimal records for a limited period as required by applicable law (e.g., for tax, legal, or fraud-prevention purposes), after which all identifiable data is permanently deleted.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

9.1 Rights Available to All Users

• Access – request a copy of the personal data we hold about you
• Correction – update inaccurate or incomplete information via Account Settings
• Deletion – request deletion of your account and all associated data
• Opt-out of notifications – disable push notifications via your device's notification settings at any time

9.2 European Users (GDPR) GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you additionally have the right to:

• Portability – receive your data in a structured, machine-readable format
• Restriction – ask us to restrict processing of your data in certain circumstances
• Object – object to processing based on legitimate interests
• Lodge a complaint – with your local supervisory authority

Our lawful basis for processing is contract performance (to operate the App) and, where applicable, consent (for optional features).

9.3 Indian Users (DPDP Act 2023) DPDP

If you are located in India, the Digital Personal Data Protection Act 2023 grants you the right to:

• Access a summary of your personal data and processing activities
• Correction and erasure of your personal data
• Grievance redressal through our Data Protection Officer
• Nominate another individual to exercise your rights on your behalf

9.4 California Users (CCPA) CCPA

California residents have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information.

To exercise any of your rights, contact us at privacy@littlecubbie.com. We will respond within 30 days (or as required by applicable law).

10. International Users

Cubbie Playtime is available globally. Your data may be processed and stored in data centers located in India and/or other countries. Where we transfer personal data outside of your home jurisdiction, we apply appropriate safeguards such as standard contractual clauses (for EEA/UK users) to ensure your data receives a level of protection consistent with applicable privacy laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do:

• We will update the "Effective Date" at the top of this page.
• For material changes, we will provide notice via the App or by email (if you have provided one).
• Continued use of the App after notice constitutes acceptance of the revised policy.

We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: privacy@littlecubbie.com
• Website: littlecubbie.com/contact
• App: Account Settings → Help & Support

For grievances under India's DPDP Act 2023, you may also reach our Data Protection Officer at the email address above, with "DPDP Grievance" in the subject line.