🔒 Privacy Policy

We do not collect any personal information. BrainPlay has no servers that receive your data, and specifically the app:

• Does not require an account, sign-in, or email address
• Does not contain advertisements or any advertising SDK
• Does not use analytics, telemetry, or crash-reporting services
• Does not use the advertising ID, or any cross-app or cross-site identifier
• Does not send us your child's name, age, photos, voice, scores or progress
• Does not ask for camera, microphone, location, contacts or file access

A grown-up sets up a profile for each child. All of it stays in the app's private storage on your device, and the app itself transmits none of it (Android's own backup is described in section 3):

BrainPlay uses Google Firebase to host the questions and pictures the games are made of. The app only ever reads from it — there is no code path in the app that writes, uploads or sends anything about your child to any server. Three things travel over the network:

• Game content requests. The app asks for questions suited to an age band, and that request contains a number — for example 7. It carries no name, no account, no device identifier and nothing that identifies your child, and the age is not stored on the server.
• Downloads. Question text and game pictures come down to your device and are cached there so the games keep working offline.
• App verification. Firebase App Check uses Google Play Integrity to confirm the request is coming from a genuine, unmodified copy of BrainPlay, so our content cannot be scraped or abused. This is handled by Google Play services on your device and involves no information about your child.

Android's own backup. If backup is switched on in your device's settings, Android copies one small BrainPlay progress file into the backup of the Google account signed in on the device: profile names, ages and avatars, scores, stars, badges, medals and daily-quest progress, settings, parental-control settings, and the parental PIN as a salted hash (never the PIN itself). Android puts it back if BrainPlay is reinstalled on that device, or on a new device set up from that backup. Android and Google do this under your Google account — the file never reaches us and we cannot read it. Downloaded questions and pictures are not included. To stop it, turn off backup in your device's settings.

Optional tips. In the grown-up area, behind the parental PIN, a grown-up may choose to leave a small tip to support BrainPlay. A tip unlocks nothing — every game stays free — and nobody has to tip. The payment is handled entirely by Google Play, under the Google account on the device: BrainPlay and we never see card, UPI or bank details. Google Play shares with us only the order information it gives every developer (such as an order number, the tip chosen, its price and the country), which we use only for our accounts and for refunds. On the device, BrainPlay remembers only that a tip was made, to say thank you. Google's handling of payments is described in the Google Payments Privacy Notice.

BrainPlay is designed for children aged 3 to 13 and is intended to be set up by a parent or guardian. We take the position that the safest way to protect a child's data is not to collect it:

• No personal information about a child is ever transmitted or stored on our servers
• No behavioural profile is built, and no data is used for advertising or personalisation beyond choosing questions at the right level, which happens entirely on the device
• There is no chat, no messaging, no user-generated content and no way to contact anyone through the app
• There are no external links or advertisements a child could tap, and nothing a child can buy: the only purchase is an optional tip for grown-ups, behind the parental PIN, that unlocks nothing

The name and age a grown-up enters are for the app's own use on that television. They are visible only on that device. Removing the profile removes them from the device, and from the Android backup the next time it runs.

Because everything is stored locally, you are in complete control:

• Delete a child's profile in the grown-up area — their name, age, scores, stars, badges and settings are permanently removed from the device
• Clear app data in Android settings — every stored item is erased
• Uninstall the app — Android removes it from the device. If Android backup is on, the copy in your Google account stays, so a reinstall can bring the progress back; turn backup off, or delete the device's backup from your Google account, to remove that copy too

We hold no copy of any of it, so there is nothing on our side to request, export or delete.

Your child's profile and progress stay on your device until you delete the profile, clear the app's data, or uninstall the app. Downloaded questions and pictures are cached to keep the games working offline and are refreshed or removed by the app as content changes. We operate no user database, so we retain nothing. If Android backup is switched on, the latest copy of the progress file also stays in your own Google account until a newer backup replaces it, or until Google removes the backups of a device that has not been used for a while.

BrainPlay uses exactly one third-party platform — Google Firebase — and only these parts of it:

• Cloud Firestore — hosts the question banks the app downloads (read-only)
• Cloud Storage — hosts the game pictures and animated icons (read-only)
• App Check with Play Integrity — verifies that requests come from a genuine copy of the app

For the optional tip described in section 3, BrainPlay uses Google Play Billing. Google Play processes the payment; BrainPlay receives only whether the tip went through.

Separately, if you have switched on Android's own backup, Android — part of the operating system and Google Play services, not something inside BrainPlay — may back up the progress file described in section 3.

BrainPlay does not include Google Analytics, Firebase Analytics, Crashlytics, any advertising network, or any social-media or login SDK.

• All network traffic uses HTTPS
• Child data lives in the app's private storage, which Android isolates from other apps
• The parental PIN is stored as a salted SHA-256 hash with an attempt lockout
• App Check restricts our content to genuine copies of the app
• The smallest possible attack surface: no accounts, nothing uploaded to us, and only three permissions

We may update this Privacy Policy from time to time. Any change will be reflected in the "Last Updated" date at the top of this page. If a future version of BrainPlay ever collects more than it does today, this policy will be updated before that version is released.

If you have any questions or concerns about this Privacy Policy or about BrainPlay, please get in touch:

Email: thopukaramahesh@gmail.com