Privacy Policy

Tofu ("the app") is a vocabulary and learning game designed for families and children. This policy explains the different data practices used by the Android and iOS versions.

No account or personal profile upload

Tofu does not require an account, sign-in, email address, phone number, or online child profile. A child's display name, avatar, learning progress, settings, and reminder choices are stored locally on the device and are not sent to us.

iOS

The iOS app does not include Firebase Analytics or another in-app analytics SDK. Tofu does not transmit iOS learning activity or child profile information to us. We may review aggregated sales, downloads, and product-page information made available by Apple through App Store Connect; data collected by Apple is handled under Apple's own policies.

Android analytics

The Android app uses Google Analytics for Firebase to understand the app's aggregate funnel and improve the product. It may automatically collect an app-instance identifier, approximate location derived from a masked IP address, app lifecycle and interaction events, device/app information, and in-app purchase events. Tofu also records a small allowlist of one-time milestones such as completing onboarding, playing a first word, completing a game, viewing the purchase page, and completing a purchase.

Tagged Google Play links may provide campaign source, campaign, and content labels. Tofu does not send a child's name, avatar, selected word, learning language, free-form text, or advertising identifier in analytics events.

• The Android Advertising ID and Privacy Sandbox advertising identifiers are not requested or collected by Tofu.
• Advertising storage, ad-user-data consent, and ad-personalization signals are denied.
• Analytics is used for product measurement, not behavioral advertising or cross-app tracking.
• Analytics data is encrypted in transit. Google processes it as a service provider for Tofu.

Retention and deletion

Android event-level analytics is retained for up to two months under our Google Analytics retention setting. Aggregated reports may remain available for longer. Because Tofu has no account and does not attach analytics to a name, email address, or other direct identity, we normally cannot identify an individual's analytics record. Uninstalling the app removes locally stored Tofu data. You may contact us with a privacy or deletion question using the address below.

In-app purchases

Optional purchases are processed by Google Play or Apple's App Store. Tofu does not receive or store payment card details. The store provides the app only the transaction information needed to unlock purchased content on the device.

Notifications

If enabled by a parent, learning reminders are scheduled locally on the device. Tofu does not use a remote push-marketing service.

No advertising

Tofu does not show third-party ads and does not sell personal information or share child information with advertising networks.

Children's privacy

Tofu is designed to minimize data collection. Child profile and learning details remain on device. Android measurement is limited to aggregate product analytics and is configured without advertising identifiers or personalization signals; the iOS app contains no in-app analytics SDK.

Contact us

For privacy questions or requests, contact sirapop15885@gmail.com.