Privacy policy

Who this policy covers

This policy covers the Kids Brain Teasers mobile apps and web/PWA. It explains what the Kids Brain Teasers team ("we") handles when a family plays as a guest or a grown-up chooses to create an account. Questions can be sent to info@morshed.com.au.

Guest play

Guest progress, settings, language, accessibility choices, selected character, vehicle, adventure completions, points, and collection items are stored on the device. Guest progress is not attached to a grown-up account unless the grown-up signs in and chooses a family profile for play.

Information we handle

• Grown-up account information: email address, password hash, email-verification state, recovery records, and session/security records. Passkeys store a public key and operational metadata; the private key stays with the authenticator.
• Family information: household roles, family rules, consent choices, child-profile aliases chosen by a grown-up, and device/session summaries.
• Gameplay information: selected content, regular adventure completions, route progress, personal bests, points earned or spent, obstacle and animal point events, and collection progress. Private races may also store invitation/session data and a gameplay replay used to verify the result.
• Optional services: a device push token when a grown-up enables notifications, verified store transaction data if paid products are introduced, and support or privacy-request messages a grown-up sends us.
• Security and diagnostics: minimised device, browser, network, error, and audit information used to protect accounts, prevent abuse, diagnose reliability, and operate the service. Routine analytics are designed not to contain child aliases, email addresses, private race codes, or raw movement routes.

How we use information

We use information only to:

• provide offline play, accounts, family controls, and cloud sync;
• award and protect progress, points, and collection items;
• operate private code-only races without open chat;
• secure accounts, detect replay or abuse, and recover access;
• deliver grown-up notifications that were explicitly enabled;
• answer support, access, export, correction, and deletion requests;
• measure coarse reliability and improve the service; and
• meet legal, safety, store, accounting, and security obligations.

What we do not collect for ordinary play

The app does not request GPS or precise location, contacts, camera, microphone, phone number, or a child's email address. There is no public child profile, behavioural advertising, open chat, or sale of personal information. Country-based circuits are suggested from the device's language/region setting, not GPS.

Advertising

The initial Google Play release has advertising disabled. A later reviewed release may show a single clearly labelled contextual banner on selected menu screens using Google AdMob. Ads will not appear during active play, races, pause screens, or grown-up flows. Any enabled ad request is configured as child-directed, non-personalised, and limited to a General content rating; the app does not request Android's advertising-ID permission. If this changes, we will update this policy and the Google Play Data safety and ads declarations before release.

Service providers and disclosure

We use service providers for hosting, databases, content delivery, authentication/security, email, push notifications, store verification, privacy-safe analytics, and—only in a reviewed ads build—contextual advertising. They may process data only to provide those services or meet their legal obligations. We may also disclose information when required by law, to protect a child or another person, to investigate abuse or security incidents, or as part of a business transfer with appropriate safeguards. We do not sell family or child information.

Storage, security, and retention

Data sent between the app and our production service uses HTTPS. Passwords are stored as one-way hashes; mobile refresh credentials use Keychain/Keystore storage; and access to family data is limited by account roles. We retain account and synced gameplay data while the account is active. When deletion is completed, we remove or de-identify associated personal data unless limited security, transaction, audit, backup, or legal records must be retained for a justified period. Backup copies age out under the backup retention schedule and are not used as active account records.

Providers may process information in Australia or other countries. We use contractual and technical safeguards appropriate to the information and service involved.

Grown-up choices and children's privacy

A grown-up can play entirely as a guest, control family profiles, withdraw optional choices, revoke devices, download a family data export, or ask us to correct or delete information. Child profiles are alias-only and controlled by a grown-up. We do not knowingly ask a child to create an account or submit direct contact details. If you believe a child provided personal information without appropriate permission, contact us so we can investigate and remove it.

Delete an account and its data

A grown-up can request deletion at any time. Email info@morshed.com.au from the account email with the subject Kids Brain Teasers account deletion. Tell us whether you want the whole family account deleted or only a particular child profile.

1. We verify the requester is authorised to control the account.
2. We delete or de-identify the requested account, family profiles, synced gameplay, points, consents, devices, and related active service records.
3. We confirm completion and explain any narrowly retained security, transaction, audit, backup, or legal record and why it is kept.

Deleting an online account does not automatically erase guest data stored only on a device. That local data can be removed by clearing the app's storage or uninstalling the app.

Changes and contact

We may update this policy when features, providers, laws, or store requirements change. Material changes will receive a new effective date and, where appropriate, a grown-up notice or renewed choice.

Privacy, support, access, correction, export, and deletion requests: info@morshed.com.au.