Privacy Policy

1. Who we are

Little Green Studios (“we”, “us”, “our”) is the developer of the Android applications to which this Privacy Policy applies. We are based in the United Kingdom.

For the purposes of UK GDPR and EU GDPR, Little Green Studios is the data controller for any personal data processed in connection with our apps. Our contact details are set out in Section 13.

2. Scope of this policy

This policy applies to all Android applications published by Little Green Studios that are designed as educational aids for children aged 3 to 13. It explains what information our apps collect (or do not collect), why, and how we protect it.

Our apps are intended for use by young children under the supervision of a parent or guardian. We design our apps to comply with:

• The Children's Online Privacy Protection Act (COPPA) — United States
• The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
• The EU General Data Protection Regulation (EU GDPR)
• The Google Play Families Policy
• The UK Age Appropriate Design Code (Children's Code)

3. Information we collect

We aim to collect the absolute minimum information necessary to operate our apps. Depending on the specific app, we may collect:

3.1 Information collected automatically

• App performance data: Crash reports and error logs, which may include device model, Android version, and a randomly generated installation ID. This data does not identify any individual.
• Aggregate usage statistics: Anonymous counts of which features are used (e.g. how many times a level is played). No individual child is identified.

3.2 Information provided by the parent or guardian

Some apps offer optional features (such as progress tracking or a parent dashboard) that require an account. If you choose to create a parent account, we collect:

• Parent or guardian email address
• A password (stored in hashed form — we never store plain-text passwords)
• Your child's first name or nickname and age range (e.g. “4–6 years”) — not a full name or date of birth

We collect this information only from the parent or guardian, never directly from the child.

3.3 In-app purchases

All payments are processed exclusively through the Google Play billing system. We do not receive or store your payment card details.

4. Information we do not collect

We want to be explicit about what we do not collect:

• We do not collect a child's full name, home address, telephone number, or date of birth.
• We do not collect photographs, audio recordings, or video from the device camera or microphone unless an app feature explicitly requires it and parental consent has been obtained.
• We do not collect precise or coarse geolocation data.
• We do not build advertising profiles on children.
• We do not display behavioural or interest-based advertising.
• We do not enable social features (such as chat, messaging, or public profiles) within our apps.
• We do not sell personal data to any third party.

5. How we use information

We use the limited information we collect only for the following purposes:

• To operate and improve the app: Crash logs and aggregate usage data help us fix bugs and improve educational content.
• To provide optional account features: If a parent account is created, we use the email address to enable login and account recovery only.
• To communicate with parents: We may send transactional emails (e.g. password reset, important policy updates) to the parent email address. We will not send marketing emails without explicit opt-in consent.
• To comply with legal obligations: We may process data as required by applicable law.

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

6. How we share information

We do not sell, rent, or trade personal data. We share data only in the following limited circumstances:

• Service providers: We may share data with trusted third-party providers (such as cloud hosting or crash-reporting services) who process data on our behalf under data processing agreements and are not permitted to use the data for their own purposes.
• Legal requirements: We may disclose data if required to do so by law, court order, or to protect the safety of a child.
• Business transfers: In the event of a merger, acquisition, or sale of assets, we will notify affected parents and ensure the same level of privacy protection is maintained before any data is transferred.

7. Third-party services

Our apps may integrate the following third-party services. Each is bound by its own privacy policy and, where applicable, a data processing agreement with us:

• Google Play Services & Billing — for app distribution and payment processing. See Google's Privacy Policy.
• Firebase Crashlytics (if used) — for anonymous crash reporting. Crash reports do not contain personal data. See Firebase Privacy & Security.

We do not integrate third-party advertising SDKs, social media SDKs, or any analytics that track individual children across apps or websites.

8. Parental rights and controls

As a parent or guardian, you have the following rights regarding your child's data. To exercise any of these rights, please contact us at privacy@littlegreenstudiosapp.co.uk.

8.1 Right to access

You may request a copy of any personal data we hold about you or your child.

8.2 Right to correction

You may ask us to correct inaccurate or incomplete information.

8.3 Right to deletion

You may ask us to delete your child's data at any time. We will action deletion requests within 30 days. You can also delete a parent account directly within the app settings, which will permanently remove all associated data.

8.4 Right to withdraw consent

Where processing is based on consent (e.g. an optional parent account), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8.5 Right to object and restrict processing

You may object to, or request restriction of, processing in certain circumstances as set out under UK/EU GDPR.

8.6 Right to complain

If you are in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EU, you may contact your local supervisory authority.

8.7 Verifiable parental consent (COPPA)

For features that require collection of a child's information, we obtain verifiable parental consent before collection begins, in accordance with COPPA. Parents may review, modify, or request deletion of their child's information at any time by contacting us.

9. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Crash and performance logs: Retained for up to 90 days, then automatically deleted.
• Parent account data: Retained for as long as the account is active. If an account is inactive for more than 24 months, we will notify the parent and delete the account if no response is received.
• Deleted account data: Removed from live systems within 30 days of a deletion request. Backups are purged within 90 days.

10. Security

We take the security of children's data seriously and implement appropriate technical and organisational measures, including:

• Encryption of data in transit (TLS 1.2 or higher) and at rest.
• Hashed and salted storage of passwords — we never store plain-text credentials.
• Access controls limiting who within our organisation can access personal data.
• Regular security reviews of our apps and infrastructure.

No system is completely secure. In the unlikely event of a data breach affecting children's personal data, we will notify affected parents and relevant authorities in accordance with applicable law.

11. International data transfers

Our apps are developed in the United Kingdom. If data is processed outside the UK or European Economic Area, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) before any transfer takes place.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes — particularly any that affect how we handle children's data — we will notify parents by email (if an account exists) and display a prominent notice within the app at least 30 days before the change takes effect.

The “Last updated” date at the top of this page always reflects the most recent revision. Continued use of the app after the effective date constitutes acceptance of the updated policy.

13. Contact us

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to report a concern about how we handle children's data, please contact us:

• Email: privacy@littlegreenstudiosapp.co.uk
• Post: Little Green Studios Ltd, 3rd Floor, 86–90 Paul Street, London, England, EC2A 4NE
• Company number: 999H9SGMC00014  ·  Ref: 001611/369

We aim to respond to all privacy-related enquiries within 5 business days.