Child Information Protection
Effective: 2026-10-11
This page is a plain-language summary of how Pumlo protects children. It is not a substitute for the full Privacy Policy or Terms of Service, but it captures the commitments we make to families using the App. Where this page and the Privacy Policy say the same thing, both are binding.
No Account, No Identity
There is no sign-up. The App never asks for, receives, or keeps your child's name, phone number, email, mailing address, exact birthday, exact age, gender, contacts, or precise location. The snapshots and voice clips your child can make inside the Baby Phone toy stay on this device and are never sent anywhere (see "Camera and Microphone" below). The age band shown during onboarding (2–3, 4–5, or 6–9) is the only thing about your child the App knows, and it stays on this device.
No Ads, No Tracking
The App contains no advertising of any kind, no behavioural-tracking SDKs, no analytics services that build profiles, and no cross-app trackers. Your child cannot be served personalised ads, retargeted, or fingerprinted by the App.
Camera and Microphone: Toy Use Only, On This Device
The Baby Phone toy can use the camera as a mirror, with a shutter that saves a snapshot to your Photos app, and the microphone as a parrot that records a few seconds and plays them straight back. Spin Art and Coloring Book can save a finished picture to your Photos app. iOS asks for each permission only when the feature is first used; nothing is captured without a visible tap in the toy, nothing leaves the device, and the games still work if you say no. The App never reads your existing photos and does not request contacts, calendar, location, Bluetooth, or motion sensors, so it cannot follow your child around the device.
No Outside Communication
There is no chat, no messaging, no friend system, no leaderboards, and no user-generated content that anyone else can see. Your child cannot interact with strangers through the App. The only sharing is by a grown-up: behind the Parent Gate, a parent can send a badge picture or a friend offer code through the iOS share sheet.
Subscriptions Are Adult-Only
All purchase, restore, and data-deletion actions live behind a Parent Area that requires reading a spelled-out number to enter — a task designed for adults. Three wrong answers triggers a 30-second cooldown. This makes accidental in-app purchases by children effectively impossible. Subscriptions themselves are processed by Apple App Store; the App never sees payment information.
You Control the Data
Everything the App stores lives only on this device. From the Parent Area you can erase all of it in two taps with Delete Local Data. Doing so does NOT cancel an Apple subscription — that is managed in the system Settings → Apple ID → Subscriptions.
Daily Time Limit
In Settings you can set a daily play-time limit (there is none by default). Once a child reaches that limit, the App locks itself for the rest of the day and shows a "see you tomorrow" screen. This is enforced by the App locally; no telemetry is sent.
Subscription Verification (Apple Only)
To verify subscription state and support "Restore Purchase", the App uses Apple's standard on-device StoreKit framework, which talks directly to Apple. No third-party subscription service is involved. Nothing about your child — no profile, no age, no behavioural events — is sent to anyone.
Compliance Posture
The App is designed to comply with the spirit of laws like the U.S. Children's Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation including its child-specific provisions (GDPR-K), and the U.K. Age Appropriate Design Code, by minimising data collection to the point of effectively eliminating it. Where applicable law requires verifiable parental consent for collecting child data, this App side-steps the requirement by not collecting child data in the first place.
Reporting a Concern
If something about the App feels off — a behaviour you didn't expect, a setting that seems wrong, a question about how your data is handled — please email [email protected]. We respond within 7 days.