Last updated: 15 October 2026
Pixiplay is made for children, so we built it to need as little information as possible. We do not ask for your name; the only name we hold is one you may give a child profile, and it can be a nickname. If you choose to link your account to an email address, we use it only to send a one-time code and keep just a fingerprint of it, never the address itself. We do not show ads. We do not use analytics or tracking tools, and we never sell or share your data.
The short version. The app creates an anonymous account on your device so your child's progress is saved. Parents can add up to five child profiles with a name, a birth month and year, and an avatar. That, plus which activities were played and your subscription status, is everything we hold.
1. Who we are
Pixiplay ("we", "us") provides the Pixiplay educational app for children. This policy explains what the app collects, why, and what you can do about it. It covers the Pixiplay app and the pixiplay.app website.
2. No account, no sign-up
You do not create an account to use Pixiplay, and there is nothing to sign up for. The first time the app runs, it registers the device with our server, which creates an anonymous account identified only by a randomly generated number. No parent's name, phone number or postal address is requested or stored at any point, and no email address is required. The only name we hold is the one a parent may give a child profile (see section 3).
The device is then authenticated with a security token. We store only a cryptographic hash of that token, never the token itself, so it cannot be recovered from our database.
Optional: linking an email address
If you want to reach the same account from another device, you can optionally link it to your email address from the parents area. We send a one-time six-digit code to that address to confirm it is yours; the email is delivered by Microsoft Azure's email service.
We do not store your email address. We hold it only as long as it takes to send the code, and store instead a one-way fingerprint protected by a secret key. It lets us recognise the same address when you sign in, but the address cannot be recovered from it. Sign-in codes are stored the same way and deleted within a day.
The app keeps the address on your device only, to show you which email the account is linked to; it is removed when you unlink or delete the account. We never use your address to contact you, and the email we send contains only the code. Linking is entirely optional and is not required to use the app or to subscribe.
3. What we store
| Data | Why we hold it |
|---|---|
| A random account identifier | To attach your profiles, progress and subscription to something. It is not derived from you or your device. |
| A hash of the device token, the date the device was registered, and the date it was last used | To keep the device signed in securely and to identify devices that are no longer used. |
| Child profiles: display name, month and year of birth, avatar, daily time limit | To pick the right content for a child's age and to enforce the daily play limit the parent sets. The name can be a nickname; we never verify it. We do not ask for the day of birth. |
| Learning progress: which activities were played and when, best and most recent score per activity, saved favourites | To show progress, continue where a child left off, and keep favourites across devices. |
| Subscription status: whether a subscription is active, which store sold it, the product, the purchase identifier, the renewal date and whether it auto-renews | To unlock paid content and to help with billing support. |
If you link an email address, add the fingerprint described in section 2 and short-lived fingerprints of sign-in codes, deleted within a day. That is the complete list.
4. What we do not collect
- No advertising. The app contains no ads, no ad networks and no advertising identifiers.
- No analytics or tracking. We do not use any analytics, attribution or behavioural tracking product.
- No profiling. We do not build profiles about your child or make automated decisions about them beyond showing age-appropriate content.
- No contact details. No phone number or postal address, and no email address — only its fingerprint, if you link one.
- No location data.
- No photos, video or contacts from the device.
- No payment details. Card and payment information is handled entirely by Apple and Google and never reaches us.
- No cookies are set by our app or our servers.
5. Children's privacy
Pixiplay is designed for children and is set up by a parent or guardian. Profiles are created and managed by the adult who installs the app, behind a parental area. We collect the minimum needed to run the app, we do not use children's data for advertising or marketing, we do not profile children, and we do not disclose their data to third parties for their own purposes.
If you believe a child has provided us with information beyond what is described here, please contact us and we will delete it.
6. Who else is involved
We use a small number of service providers to run the app. They process data on our behalf and are not permitted to use it for their own purposes:
- Microsoft Azure — hosting, database, content storage, and sending sign-in codes by email (Azure Communication Services). Our servers and data are located in Western Europe.
- RevenueCat — manages subscription status on our behalf. It receives the anonymous account identifier and purchase information from the app stores, plus basic technical information its software needs to validate purchases: device model, operating system and app version, language, and IP address.
- Apple App Store and Google Play — process all payments. Their own privacy policies apply to them.
The pixiplay.app website serves its fonts locally; it does not request fonts from Google. The website code sets no cookies and includes no analytics.
We do not sell personal data, and we do not share it for advertising.
Like any online service, our servers and hosting provider keep short-lived technical logs to run and secure the service, for example the time of a request and, at the hosting level, the IP address it came from. These logs contain no child profile data, are not used to identify or track anyone, and are deleted automatically on a rolling basis.
7. How long we keep it
We keep your data for as long as the account is in use. Deleting a child profile in the app immediately and permanently removes that profile together with all of its progress, scores and saved activities. This cannot be undone. Our hosting provider keeps encrypted automatic database backups, which expire within 7 days; after that nothing of the deleted data remains.
To delete the whole account and everything attached to it, open the parents area in the app, tap Account, then Delete account. See Delete your account for what is removed, or contact us at the address below.
8. Security
All traffic between the app and our servers is encrypted with HTTPS. Device tokens are generated with a cryptographically secure random generator and are stored only as hashes, so a copy of our database would not yield a usable credential. Access to production systems is restricted and secrets are held in a managed key vault.
9. Your rights
Depending on where you live, you may have the right to access, correct, export or delete the data we hold, to object to or restrict how we use it, and to complain to your data protection authority. Because the account carries no name and no readable email address, we may ask you to make the request from the device itself, or from the email address you linked, so we can identify the right account. Write to us and we will help.
10. Changes to this policy
If we change how we handle data we will update this page and change the date at the top. If a change is significant, we will make it clear in the app.
11. Contact
For any privacy question, or to request deletion of an account, email privacy@pixiplay.app.
This policy applies to the Pixiplay app and pixiplay.app.