Buddy.ai: Kids Learning Games

"Voice recordings and transcriptions: stored until account deletion or for a maximum 15 years, whichever occurs first. Progress data: stored until account deletion. Payment data: retained for a period of 5 years to support fraud prevention efforts."

A 15-year retention period for children's voice recordings is extraordinarily long, especially for data collected from minors who will be adults long before the retention period expires.

"We may update this Privacy Policy to comply with applicable laws. Material changes will be announced through prominent notice or direct notification. Your continued use after changes indicates acceptance of the new Privacy Policy."

The company can change the privacy policy and treats continued use of the service as acceptance of the new terms, which is especially concerning for a children's app where parents may not notice changes.

"We work with analytics providers: Amplitude for user behavior analysis, Statsig for user behavior analysis, AppsFlyer for attribution (strict mode), Firebase Analytics for basic app functionality, Segment for data routing, Crashlytics for app stability, Sentry for technical logs analysis. We work with advertising and monetisation service providers with disabled Advertiser IDs collection: Facebook for advertising (autologging is disabled), Ngrow for communication with parents."

Data is shared with a large number of third-party services including Facebook for advertising and multiple analytics providers, which creates a broad data-sharing footprint despite claims of strict data protection.

"Device Information: Cookie ID, User agent, Session data, Platform and SDK version, Device model and specifications, Operating system details, Android Advertising ID (by Firebase Analytics only). Location and Settings: Country-level location only (from IP or device settings), Language preferences, Time zone."

The app collects detailed device information including Android Advertising ID and device model/specifications, which goes beyond what's strictly necessary for an educational children's app.

"We work with advertising and monetisation service providers with disabled Advertiser IDs collection: Facebook for advertising (autologging is disabled). AppsFlyer for attribution (strict mode). Our emails may contain tracking code to monitor: Email opens, User actions, Communication effectiveness."

The use of Facebook advertising pixels, AppsFlyer attribution tracking, and email tracking code enables cross-service tracking of user behavior across the app, web, and email channels.

"Location and Settings: Country-level location only (from IP or device settings). Language preferences. Time zone. No precise location tracking. Country-level location from IP address."

While not precise GPS tracking, the app collects country-level geolocation from IP addresses and device settings as part of its automatic data collection.

"Data deletion is initiated upon request. Some data may be temporarily retained in backups before permanent deletion. Marketing opt-out processed within 24 hours. Local on-device data may still exist until you delete the App or perform data deletion from the in-App or device settings menu."

The deletion process involves multiple stages, email verification steps, and data may persist indefinitely in backups with no defined timeline for permanent removal from backup archives.