Pixiplay العربية

Privacy Policy

Last updated: 14 September 2026

Pixiplay is made for children, so we built it to need as little information as possible. We do not ask for your name or email address. We do not show ads. We do not use analytics or tracking tools, and we never sell or share your data.

The short version. The app creates an anonymous account on your device so your child's progress is saved. Parents can add up to five child profiles with a name, a birth month and year, and an avatar. That, plus which activities were played and your subscription status, is everything we hold.

1. Who we are

Pixiplay ("we", "us") provides the Pixiplay educational app for children. This policy explains what the app collects, why, and what you can do about it. It covers the Pixiplay app and the pixiplay.app website.

2. No account, no sign-up

You do not create an account to use Pixiplay, and there is nothing to sign up for. The first time the app runs, it registers the device with our server, which creates an anonymous account identified only by a randomly generated number. No email address, name, phone number or postal address is requested or stored at any point.

The device is then authenticated with a security token. We store only a cryptographic hash of that token, never the token itself, so it cannot be recovered from our database.

Optional: linking an Apple or Google account

If you want to reach the same account from a second device, you can optionally link an Apple or Google account. When you do, we receive an identity token from Apple or Google and store only the opaque subject identifier it contains — a meaningless string of characters that lets us recognise the same person again. Any email address or name in that token is deliberately discarded and never written to our database. Linking is entirely optional and is not required to use the app or to subscribe.

3. What we store

DataWhy we hold it
A random account identifier To attach your profiles, progress and subscription to something. It is not derived from you or your device.
A hash of the device token, the date the device was registered, and the date it was last used To keep the device signed in securely and to identify devices that are no longer used.
Child profiles: display name, month and year of birth, avatar, daily time limit To pick the right content for a child's age and to enforce the daily play limit the parent sets. The name can be a nickname; we never verify it. We do not ask for the day of birth.
Learning progress: which activities were played and when, best and most recent score per activity, saved favourites To show progress, continue where a child left off, and keep favourites across devices.
Subscription status: whether a subscription is active, which store sold it, the product, the purchase identifier, the renewal date and whether it auto-renews To unlock paid content and to help with billing support.

An optional account link adds the Apple or Google subject identifier described in section 2. That is the complete list.

4. What we do not collect

5. Children's privacy

Pixiplay is designed for children and is set up by a parent or guardian. Profiles are created and managed by the adult who installs the app, behind a parental area. We collect the minimum needed to run the app, we do not use children's data for advertising or marketing, we do not profile children, and we do not disclose their data to third parties for their own purposes.

If you believe a child has provided us with information beyond what is described here, please contact us and we will delete it.

6. Who else is involved

We use a small number of service providers to run the app. They process data on our behalf and are not permitted to use it for their own purposes:

The pixiplay.app website additionally loads a typeface from Google Fonts, which means Google receives the request for that file. The website sets no cookies and runs no analytics.

We do not sell personal data, and we do not share it for advertising.

7. How long we keep it

We keep your data for as long as the account is in use. Deleting a child profile in the app immediately and permanently removes that profile together with all of its progress, scores and saved activities. This cannot be undone.

To delete the whole account and everything attached to it, contact us at the address below and we will erase it.

8. Security

All traffic between the app and our servers is encrypted with HTTPS. Device tokens are generated with a cryptographically secure random generator and are stored only as hashes, so a copy of our database would not yield a usable credential. Access to production systems is restricted and secrets are held in a managed key vault.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete the data we hold, to object to or restrict how we use it, and to complain to your data protection authority. Because the account carries no name or email address, we may need you to make the request from the device itself so we can identify the right account. Write to us and we will help.

10. Changes to this policy

If we change how we handle data we will update this page and change the date at the top. If a change is significant, we will make it clear in the app.

11. Contact

For any privacy question, or to request deletion of an account, email privacy@pixiplay.app.

Pixiplay LTD · contact@pixiplay.app · +972 50-958-0382
This policy applies to the Pixiplay app and pixiplay.app.
← Back to pixiplay.app