PíoPrivacy Policy
In short
- Pío has no accounts, no ads and no tracking.
- Your child’s profile, progress and paintings stay on your device (and in your own device backups, if you use them). We never receive them.
- We count anonymous usage statistics to keep the app working and improve it. They contain no names and no free text.
- Parents can erase everything on the device at any time.
1. Who we are
The controller of the information described here is the developer of Pío: Hai Cohen, trading as Pío Team (“we”).
- Address: Gurey Yehuda 4, Ramat Gan, Israel
- Telephone: +972 50-727-6478
- Email: pioteam.studio@gmail.com
2. What stays on the device
These are stored on your phone or tablet, and in your own device backups (such as iCloud or Google backup) if you use them. We never receive them:
- child profiles (a story character chosen as the profile picture, never a photo, and an optional first name)
- progress, words learned and paintings
- settings
Delete all data in the grown-ups’ area erases all of it, and removing a child erases that child’s data. Uninstalling the app also erases it. Copies in your own device backups follow your backup settings. Please do not enter a surname in the optional name field.
Pío does not use the microphone, camera, location or contacts. It has no advertising, no advertising ID and no tracking.
3. What leaves the device
Usage statistics (always on)
- We count which stories, pages and activities are used, and the steps of the paywall.
- Each event carries only a random ID for that one session of the app, which is never stored on the device, plus the app version and platform.
- Events go to our endpoint on Cloudflare, which drops IP addresses, and are then stored in PostHog (EU).
- They contain no names and no free text.
“Share more to improve Pío” (off by default)
A parent can turn this on in the grown-ups’ area. It adds a random ID kept on the device, so returning visits can be counted, and links usage to the subscription status. Turning it off deletes that ID.
Purchases
Subscriptions are handled by Apple or Google and by RevenueCat. RevenueCat receives an anonymous app user ID and the store receipts. We never see payment details.
Story downloads
Stories are delivered by Cloudflare, which processes IP addresses in order to deliver the files.
We do not sell information, do not show advertising and do not track children across other apps or websites.
4. Children
Pío is for children aged 3 to 7 using it with a parent. We do not knowingly collect personal information from children. The session ID and the opt-in ID are used only for internal operations, meaning running and improving the app. Purchases, settings and external links are behind a parental gate.
As a parent you can at any time:
- review what we hold, or ask us to delete it, by emailing pioteam.studio@gmail.com;
- refuse further collection by turning off “Share more to improve Pío”, choosing Delete all data, or uninstalling the app. Turning off “Share more” does not stop your child using Pío.
5. How long we keep information
We keep only what running and improving Pío needs, for no longer than it needs it.
| Information | Where | Kept |
|---|---|---|
| Child profiles (picture, optional first name), progress, words, paintings, settings | On your device, and in your own device backups if you use them. We never receive them. | Until a parent chooses Delete all data, deletes a child, or uninstalls the app |
| Usage events with a session ID | PostHog (EU), received through our endpoint on Cloudflare, which drops IP addresses | 13 months, then deleted automatically |
| The “Share more to improve Pío” device ID, and events carrying it | The ID on your device; events in PostHog (EU) | The ID: until a parent turns the option off, which deletes it at once. Events: 13 months |
| Subscription records (anonymous app user ID, store receipts) | RevenueCat, and Apple or Google | While the subscription exists, then as long as tax and consumer law require for purchase records |
| Request logs (IP address, time) | Cloudflare | We keep none ourselves; only Cloudflare’s own short-term logs |
| Support emails | Our support mailbox | 2 years after the last message in a conversation |
A parent can ask what we hold, or ask us to delete it, at pioteam.studio@gmail.com. We answer within 30 days. Usage events can’t be traced to a family unless “Share more to improve Pío” was on, so we will explain that, and we will delete any subscription record on request.
6. Service providers
We use these processors: Apple, Google, RevenueCat, Cloudflare and PostHog. Information may be processed outside your country, with safeguards where the law requires.
7. Your rights and the legal basis
Under the GDPR and UK GDPR you can ask for access to, deletion of, or to object to the processing of information about you or your child, and you can complain to your data protection authority. Other laws, such as Israel’s Privacy Protection Law and US state laws, give similar rights.
- Our legal basis for anonymous usage statistics is legitimate interests (running and improving the app).
- Our legal basis for “Share more to improve Pío” is your consent, which you can withdraw at any time.
Most information is on your device, where Delete all data removes it. For anything else, email us.
8. This website
This website sets no cookies and uses no analytics or tracking. Cloudflare, which hosts it, processes IP addresses to deliver the pages.
9. Changes
If we change this policy in a way that matters, we will update the date above and tell parents in the grown-ups’ area before it applies.