Numiko — Privacy Policy
The short version: Numiko is a maths app for children aged 4 to 8, and everything it knows about a child stays on the device. There is no account and no sign-in, and we never ask for a child's name, photo, voice or location. Nothing about your child leaves the device unless a parent agrees to the anonymous statistics, and even then nothing identifies the child.
There are no ads and no third-party analytics or advertising code in the app. Besides a purchase, what goes over the internet is the anonymous statistics, if a parent agreed, and a question report, if a parent chooses to send one. Neither carries anything about the child. The app may also download new questions from our server, sending nothing about the child. A purchase is handled by the App Store or Google Play, and only a parent can start one, behind the parental gate.
1. Who we are
Numiko is published by BrotherAI. If you have a question about this policy or about your child's information, write to brotheraicompany@gmail.com. We answer every message.
Numiko is made for children aged 4 to 8, to be set up and looked after by a parent or another adult who cares for the child ("you" in this policy).
2. What the app keeps on the device
The app saves the following in its own storage on the phone or tablet. We cannot see it, and we keep no copy of it.
| What | Why it exists |
|---|---|
| Each child's profile: the animal the child picked and their age in years. No name. | So each child gets questions that suit their age, and can find their own garden. |
| Each child's progress: how far they have come in each skill, which questions they saw recently, and how many minutes they played on each of the last eight days | So the next question is neither too easy nor too hard, no question repeats too soon, and the daily time limit you set can work. |
| Stickers a child has earned | So the sticker album stays full. |
| Settings: language, the daily play time, slow mode, reduced motion, and the time of the daily reminder if a parent switched it on | So the app behaves the way you set it up. |
| Your answer on the anonymous statistics screen | So the app knows whether you agreed (see section 4). It starts as "no". |
| Whether VIP is active, and until when | So VIP keeps working without a network connection. |
3. Device backup
The app's storage is part of the device's own backup: iCloud Backup on Apple devices and Android Auto Backup on Android, if you have them switched on. That is how a child's progress can move to a new device without an account. These backups belong to your Apple or Google account, follow your settings there, and we have no access to them.
4. Anonymous statistics: only if a parent says yes
Behind the parental gate, the app asks whether it may share anonymous statistics so we can improve the questions for every child: for example, which questions turn out too hard for most children of an age. The answer starts as "Don't send", and the app works in full whatever you choose. You can change your mind at any time in the parent area.
If you agree, the app sends the anonymous records described here to our own server, a few at a time, when it opens and after a session. If you do not agree, nothing is sent.
What a record holds: which screens are opened; a session started or finished and how long it took; a step reached in a skill; a question answered (the skill, the step, right or wrong, how long it took, and which kind of mistake it was, and, when we compare two ways of asking a question, which way this phone was given); the child's age band (4-5, 6 or 7-8, never the exact age); the app's language and version; whether VIP is on; that a parent opened the VIP page or tried a purchase, and the result.
What a record never holds: a name, a photo, the child's voice, the location, contacts, the advertising identifier, any identifier of the device, or anything a child or a parent types.
Where it goes: to our own server only. The server throws away the network address the records came from and does not log it. It keeps counts per question step, not per child, to tune how hard the questions are. Of the usage events, it keeps only the steps of a purchase (a parent opened the VIP page, chose a plan, and what the store answered), as counts per day; the others it throws away as they arrive. Nothing is passed on to anyone else: no analytics service and no advertising service.
Reporting a question: from the child's report screen in the parent area, behind the parental gate, a parent can report one question of the last session as wrong or unclear, choosing a reason from a list. The report sends that question's skill, step and the number that rebuilds it, the reason, and the app's language and version. It holds nothing about the child and nothing typed. Reporting is a parent's own choice, and a report is sent whether or not the anonymous statistics are switched on. Our server keeps reports for one year.
5. The random install identifier
After you agree to the statistics, the app makes a random identifier on the device, with the first record it keeps. It is not taken from the device, the store or anything else, and it says nothing about who your child is.
It is used only for the internal operation of the app: to count how many installations use a feature, and to tell apart two records from one device and two records from two devices, so that counts are not doubled. It is never used for advertising, never used to build a profile of a child, and never linked to any other identifier.
If you withdraw your agreement, the identifier is deleted and the records waiting on the device are erased. If you agree again later, the app makes a new identifier, which cannot be linked to the old one.
6. How long information is kept
- On the device: until you delete a child's profile in the parent area (which erases that child's progress), or delete the app.
- On our server: counts per question step, and counts per day of the steps of a purchase. They hold nothing about any child or device, and we keep them as long as Numiko is published. Question reports are kept for one year.
7. Purchases
Numiko VIP is sold and billed by the store you installed from, the Apple App Store or Google Play. We never see payment details. The store tells the app on the device whether VIP is active. A purchase can only be started by an adult, in the parent area, behind the parental gate.
A purchase is governed by the store's own privacy policy and terms: Apple Privacy Policy · Google Privacy Policy.
8. Permissions the app holds
On Android, the app holds six permissions:
- Internet access and network state: Google Play's billing component uses them to sell VIP and to tell the app whether VIP is active. Internet access is also used to send the anonymous statistics a parent agreed to, and a question report a parent chooses to send, to Numiko's own server. It is also used to download new question content from that server.
- Google Play billing: to sell VIP through Google Play.
- Notifications (POST_NOTIFICATIONS) and run at startup (RECEIVE_BOOT_COMPLETED): only for the daily reminder a parent can switch on in the parent area. It is off until a parent turns it on, and the phone asks for permission then. The second permission only puts the reminder back after the phone restarts.
- Vibration (VIBRATE): declared by the component that shows the daily reminder, so that notification can vibrate like any other. It reads nothing and sends nothing.
9. What the app never asks for
The app does not ask for the camera, the microphone, the location, contacts, photos or files, and it sends no notifications, except the daily reminder if a parent switches it on. Links to web pages (this policy, the terms, managing a subscription) are only in the parent area, behind the parental gate, and open in the browser.
10. Children's privacy
Numiko is made for children, and we follow the rules that protect them, including the US Children's Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation and Vietnam's Personal Data Protection Law. That is why the app has no account, collects no name, contact detail or location, shows no ads, contains no third-party analytics or advertising code, keeps a child's progress on the device, and shares anonymous statistics only with a parent's agreement, which is off until a parent turns it on. A parent can also choose to send a report about one question; it carries nothing about the child. The app may also download new questions from our server, sending nothing about the child.
The parental gate is an adult-level task in front of the parent area, purchases, links and settings. It keeps a child out of those places; it is not how we ask for consent. Consent for the statistics is a separate choice in the parent area.
11. Your rights
Your child's information is on your device, in your hands: you can see their progress in the parent area, delete a child's profile there, or delete the app to erase everything. We hold no record we can tie to a child or a device; you can still write to us at any time, and we will help.
12. Changes to this policy
If a future version of Numiko sends anything off the device that this page does not describe, we will update this page and the store listing before that version ships, and the new "Last updated" date will show it. Anything that would need a parent's new agreement will ask for it in the app first.