Privacy Policy — Harpaboo

Last updated: 2026-06-09

The short version

Harpaboo is an offline food-allergy education game for children ages 2–12. It has no accounts, no sign-in, no ads, no analytics, and no servers. We do not collect, transmit, sell, or share any personal information. Everything the app stores stays on your device, under your control.

Information the app stores on your device

To make the game work, Harpaboo keeps the following on your device only:

• Child profiles: a name or nickname you choose, an age range (we never ask for or store a birthdate), and the allergens you select.
• Per-child gameplay progress: levels played, stars, and badges.
• Per-child food safety overrides you set in the parent area.
• A salted hash of the parental-gate PIN (never the PIN itself).

This information never leaves the device through any system we operate. We have no servers and no way to see it.

What we don't do

• No ads or third-party advertising SDKs.
• No analytics, telemetry, or behavior tracking of any kind.
• No advertising identifiers.
• No accounts, sign-in, email collection, or social features.
• No camera, microphone, location, or contacts access.
• No in-app purchases shown to children.

Device backups

If you use your platform's standard device backup (iCloud Backup on Apple devices, Android Auto Backup on Android), the app's on-device data — profiles, allergen selections, progress, and the PIN hash — is included in that backup like any other app's data. That backup is operated by Apple or Google under your existing account settings and controls; Harpaboo does not operate, see, or have access to it. You can exclude the app from backups in your device settings.

Children's privacy (COPPA)

Harpaboo is designed for children with parent-managed setup. We comply with the Children's Online Privacy Protection Act (COPPA) the simplest way possible: the app collects no personal information from anyone, child or adult, and transmits nothing. We store an age range rather than a birthdate, and a nickname is fully supported in place of a real name. Settings that affect a child's experience sit behind a parental gate.

Third parties

We share data with no one. There are no third-party services, SDKs that phone home, or data processors in the app.

Deleting your data

Delete an individual child profile from the parent area, or remove all app data by uninstalling the app (and deleting it from your device backup if you choose). Because we hold no copies, deletion on your device is complete.

Changes to this policy

If a future version of the app changes how data is handled, we will update this policy and the "Last updated" date before that version ships.

Contact

Questions about privacy: support@shelleney.com