Ranked #26 of 38 in Game Puzzle
Red Flags
1Warnings
7"In order to allow us to continue offering out Apps free of charge or at low cost, we integrate Ad Partners' technologies into our Apps to display advertisements to you. Some Ad Partners may collect device identifiers (i.e. IDFA on iOS) that may be used to enable advertising tracking and thus display targeted ads. By reviewing the permissions in Ad Partners' technologies, we have effectively disabled their collection function by default. However, such technologies methods can not be fully guaranteed."
Third-party ad partner SDKs are integrated directly into the apps and may collect device identifiers for advertising tracking, even in apps targeted at children. BabyBus admits they cannot fully guarantee these partners' data collection is disabled.
"Some Ad Partners may collect device identifiers (i.e. IDFA on iOS) that may be used to enable advertising tracking and thus display targeted ads. In order to prevent Targeted Ads, we encourage you to disable our Apps from collecting this device identifier when prompted for an authorization notification or through the privacy settings on your phone system."
Ad partners collect device identifiers like IDFA to track users across apps for targeted advertising, enabling cross-service tracking profiles even for children's apps.
"We also collect certain information automatically through your use of our Apps. This type of data does not identify you personally but may uniquely identify the device you are using. Under some legislation, these data might be considered as personal information: (1) Internet Protocol (IP) address; (2) Broad geographic location (e.g. country or city-level location) based on your IP address."
BabyBus passively collects IP addresses and derives geographic location from them, tracking users' city-level location automatically without explicit consent.
"We also collect certain information automatically through your use of our Apps... (3) Log and usage data, such as game progress, game time, achievements, and error and crash reports; (4) Device information, including the device type, device model, device maker, device operating system and its language or other technical data."
The app passively collects detailed device fingerprinting data including device type, model, maker, OS, and language โ particularly concerning for apps aimed at children.
"We may occasionally update this Privacy Policy. When we do, we will indicate the date that this Privacy Policy was last updated. Any changes we make will be effective immediately upon notice. The updated version will be effective as soon as it is accessible."
BabyBus can change its privacy policy at any time with changes taking effect immediately, with no requirement for user consent โ especially problematic for a children's app where parental consent should be re-obtained.
"You have the right to delete your personal information by contacting us at privacy@babybus.com. You acknowledge and agree that as a result of deleting your BabyBus account, you will lose access to our services, including the BabyBus account, subscriptions and App-related information linked to such account and lose the possibility to access other services through the BabyBus account."
Account deletion requires emailing support rather than offering a self-service option, and the policy warns of total loss of subscriptions and access as a consequence, which may discourage deletion.
"We will only store your information as long as necessary to fulfill the purposes for which the information is collected and processed. Upon the expiration of such period, your personal data will be deleted or anonymized, as requested by applicable law."
No specific retention timelines are provided โ data is kept for as long as BabyBus deems 'necessary,' giving them broad discretion to retain personal information indefinitely.