Privacy Policy

The short version

You create the account. Your child never gets a login of their own.
About your child, Pupkin stores a first name or nickname, an age range, a time zone, and the record of the practice they complete. There is no field for a surname, birthday, school, address, photo, or a child's email address.
There are no ads, no advertising identifiers, and no third-party analytics or crash-reporting services in the apps or on this website.
Pupkin does not sell personal information and does not share it for advertising.
You can review or delete your child's data at any time by emailingsupport@pupkin.app.

Who operates Pupkin

Pupkin is operated by Calvera Labs, at [POSTAL ADDRESS], telephone [PHONE]. For anything relating to privacy, your child's data, or this policy, email support@pupkin.app.

Where this policy says "we", it means Calvera Labs. Where it says "the apps", it means the Pupkin applications for iOS and Android. Where it says "this site", it means pupkin.app.

What we collect from you, the parent

Your email address: Collected when you create an account, and used to sign you in, to send you the confirmation that records your consent, and to send the weekly summary email if you have it switched on. If you sign in with Google, we receive your email address and the fact that Google has verified it; we do not receive your Google password.
Your consent record: When you give consent for a child to use Pupkin, we store the time you gave it, which of your accounts gave it, which version of the consent notice you were shown, and how your control of the email address was established. This is the record that lets us show consent was obtained.
Your delivery preferences: Whether you want the weekly email, and the day, hour and time zone to send it.
Your subscription status: If you subscribe, we store whether the subscription is in a trial, active, lapsed, paused or retrying, whether it will renew, which product it is, which store it came from, and when it expires. We never receive or store your card number, and we do not receive your billing address.

What we collect about your child

This list is not a summary. It is the complete set of fields a child profile has, and the app cannot write a field that is not on it. The limit is enforced by our database rules as well as by the apps.

A first name or nickname: Whatever you type. It is shown to your child in the app and appears in your weekly email so you can tell your children's summaries apart. A nickname works exactly as well as a real name.
An age range: A range, not a date of birth. Pupkin supports ages 6 to 8, so this is the only value.
A time zone: Used to decide which calendar day a completed session belongs to, which is what makes a streak mean the same thing for a family that travels.
Which activity types are switched on, and an optional puppy name: Your settings for that child, and whatever your child decided to call the puppy.
The record of practice completed: For each session: when it was finished, which activity type it was, how many items were right, wrong, partly right or skipped, the points earned against the points available, how many attempts each item took and how long it took, and the difficulty settings in force at the time. This is what the puppy's growth and your weekly email are calculated from.
Progress derived from that record: Experience points, level, the puppy's growth stage and mood, and the current and longest streak. These are computed on our servers from the practice record, never sent up by the app, which is also why the numbers in your weekly email are trustworthy.

What we never collect

Not "do not currently collect". These are fields the system has no room for, and adding one would be a deliberate, visible change to our database rules:

A surname, a date of birth, a school, a class, or an address.
A photograph, a video, a voice recording, or a handwriting sample.
An email address, phone number, or any contact detail for a child.
Location data of any kind, at any precision. A time zone is not a location.
Contacts, calendar, microphone, camera, or photo-library access.
An advertising identifier, or any identifier used to track anyone across apps or sites.
Behavioural profiles for advertising, and any data sold or licensed to anyone.

Verifiable parental consent

The law in the United States requires an operator to obtain a parent's verifiable consent before collecting personal information from a child under 13. In Pupkin, consent is not a screen you can skip past. A child profile cannot exist until consent has been recorded, and that is enforced by our database rules independently of the apps.

The method we use is email-plus:

You prove you control your email address, either by following the verification link we send or by signing in with a Google account whose address Google has already verified.
You are shown the consent notice in the app and agree to it explicitly. We record which version of that notice you were shown.
We then send a second, confirmatory email to the same address. That email exists so that if someone gave consent in your name, you find out and can object.

You can withdraw consent at any time by emailingsupport@pupkin.app. Withdrawing consent means we delete your child's profile and the practice records underneath it, because we cannot keep them without it.

Your rights as a parent

You can ask us, at any time, to show you everything we hold about your child, to delete it, or to stop collecting anything further. Emailsupport@pupkin.app from the address on your account and we will act on it. We will not make you keep using Pupkin as a condition of any of this, and we do not require a child to disclose more than is reasonably necessary to use the app.

Removing a child profile in the app marks it for deletion immediately and stops it appearing anywhere in Pupkin. The underlying practice records are deleted after that; if you want confirmation that it has happened, ask us and we will confirm it.

Depending on where you live you may also have rights to correct data, to receive a copy in a portable form, or to object to a particular use. Use the same address for those, and please say which country you are writing from so we apply the right rules.

Why we use what we collect

To sign you in and keep your household's data reachable only by you.
To run the app: to generate practice at the right difficulty, and to work out the puppy's growth, mood and streak from the work your child has actually done.
To send you the weekly summary email, if you have it switched on.
To provide and honour a subscription, and to restore it on a new device.
To keep the service secure and to fix faults.
To keep the record that consent was obtained, which we are required to be able to show.

We do not use your child's data to train machine-learning models, and we do not use it to advertise anything to you or to them.

Who else processes it

Pupkin runs on a small number of service providers, each acting on our instructions and permitted to use the data only to provide their service to us. We do not disclose your child's personal information to third parties for their own purposes.

Google (Firebase): Sign-in, database, and the server code that computes progress and generates your weekly email. This is where Pupkin's data is stored.
Our email delivery provider: Sends the consent confirmation and the weekly summary. The weekly email contains each child's first name and that week's counts, and nothing else about them. No age range, no individual answers, no identifiers.
RevenueCat: Keeps track of subscription state across iOS and Android. RevenueCat receives no information about your child. It is capable of storing a subscriber's email address, and we deliberately do not send it one.
Apple and Google, as app stores: Take the payment if you subscribe. They handle your payment details under their own privacy policies; we never see them.

We may also disclose information if the law requires it, or to protect someone's safety. If Pupkin is ever acquired, the acquirer would be bound by this policy for data collected under it, and we would tell you before anything changed.

Where it is stored, and for how long

Pupkin's data is stored on Google Cloud infrastructure in the United States. If you use Pupkin from outside the United States, your information is transferred there.

Individual practice records are deleted automatically about 400 days after they are created. Keeping a keystroke-level history of a six-year-old indefinitely has no value to you and is a liability to us.
The day-by-day totals those records roll up into are kept for as long as the profile exists, so your streak history and past weekly summaries survive.
Your account, consent record and subscription state are kept while your account exists.
When a child profile is deleted, its practice records and progress are deleted with it. When you close your account, we delete the household and everything under it.

This website

pupkin.app is a set of static pages. It sets no cookies, runs no analytics, loads no third-party scripts or fonts, and has no comment form or embedded video. Our hosting provider keeps ordinary server request logs, which include IP addresses, for security and diagnostics.

Security

Every request is encrypted in transit. Access to a household's data is enforced on our servers, not in the app, so a modified copy of the app cannot reach another family's data. The figures the puppy's growth and your weekly email are built from cannot be written by an app at all, only by our servers, from the practice record. No log line in Pupkin contains a child's name or answers.

No system is perfect. If you believe you have found a security problem, please emailsupport@pupkin.app and we will take it seriously.

Children outside the United States

Pupkin is designed to the stricter of the requirements we are subject to, and the data ceiling above applies everywhere. Where local law gives a child or parent stronger rights than this policy describes, those rights apply.

Changes to this policy

If we change how we handle your child's data in a way that goes beyond what you consented to, we will ask for consent again rather than relying on an updated page you never read. For lesser changes we will update the date at the top, and note the change in the app.

Contact

support@pupkin.app reaches a person. It is the right address for a question about this policy, a request about your child's data, or a complaint.