Privacy Policy
Effective 12 August 2026
Mitten is a learning-game app for young children, used by a parent or carer. This policy explains what we store, why, and how to delete it. It is written to be read, not to be survived.
Who this is for
Mitten is designed for children aged 3–8, used with a parent. Children never create an account and never sign in. Every account, payment and settings screen sits behind a parental gate.
What we store
- A device identifier. Created automatically on first launch so your games stay on your device. It is not linked to your identity.
- Child profile details you enter: a first name (or nickname) and a chosen emoji avatar. We never ask for a last name.
- The child’s age, used to pitch the difficulty and content of generated games.
- What you ask for when generating a game: interests, subject, language.
- Game progress: which games were played, which words or facts were answered correctly, and how confident the child is with each. This is what lets Mitten bring back words a child found hard.
- Your notification preferences and reminder times, if you turn notifications on.
- If you sign in with Apple or Google: your email address and the provider’s account identifier. Signing in is optional and exists only to sync progress across devices.
What we do not do
- We do not collect location, contacts, photos, microphone or camera data.
- We do not show advertising of any kind.
- We do not sell or share personal data with third parties for advertising.
- We never send notifications to a child. Notifications go to the parent only.
- We do not build profiles of children for marketing.
How games are generated
When you request a game, the interests, subject, language and age you entered are sent to our server and to an AI model provider (Anthropic) to build the game. We do not send your child’s name, your email, or any device identifier as part of that request.
Payments
Subscriptions are processed by the app store you bought them from — Google Play on Android, the Apple App Store on iOS. Payment details are handled by Google or Apple and never reach us. We use RevenueCat to check whether a subscription is active. See Google’s, Apple’s and RevenueCat’s privacy policies for how they handle data.
Push notifications
If you enable notifications, we use OneSignal to deliver them and store a push subscription identifier. You can turn them off at any time in Settings or in your device settings.
How long we keep it
As long as you use the app. You can delete everything at any time.
Deleting your data
In the app: Account → Your data → “Delete my data”. This removes your profiles, generated games and saved progress.
No longer have the app installed? You can still request deletion here — no reinstall needed.
Children’s privacy
We aim to comply with the Google Play Families policy, the Apple App Store Kids category guidelines, COPPA and GDPR, including its provisions on children’s data. We collect the minimum needed to make a game work. If you believe a child has provided data you would like removed, contact us and we will remove it.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold about you, and to object to or restrict how we use it. Contact us and we will action it within 30 days.
Security
Data is encrypted in transit using HTTPS.
Changes
We will update this page and change the effective date above if this policy changes.