The app collects nothing.

1. Who we are

BrainQuest Island is published by Bright Pebble Studios, 1401 Lavaca Street, #7208, Austin, TX 78701 ("we", "us"). We are responsible for the personal information described in this policy, which covers the BrainQuest Island iPad app (the "app") and the website at brainquestisland.com (the "website"). You can reach us at support@brainquestisland.com.

2. What the app stores on your iPad

• Child profiles: a nickname, age, buddy, language and settings. A real name is never required.
• Learning progress: games played, answers, time, stars, XP, badges and skills practised.
• Saved games and creations such as gardens, stories, machines and poems.
• Time limits and Parent Zone settings.
• Your parent PIN and recovery answer, stored only as hashes in the iPad's Keychain.
• A local error log that contains no personal information beyond internal profile numbers.

The app does not store photos, location, contacts or any advertising identifier. This information is kept by the app on your device and is under your control. We cannot see it.

3. What leaves the iPad

Nothing, on its own. The app contains no network code, no analytics and no advertising or third-party tracking libraries. Games run in a sandbox that blocks every web request, and the app never opens a web browser or links to a website. Spoken instructions and read-aloud stories are produced on the iPad itself, and spoken text is never logged or sent anywhere.

The only ways data leaves the device are the ones you trigger yourself behind your PIN: exporting an archive to the Files app, or sharing a single creation by AirDrop or print. Where it goes after that is up to you.

Purchases. The early-access app has nothing to buy. If optional purchases such as a one-time Family Pass are added later, they will sit behind the parent PIN and be handled entirely by Apple. We will not receive your name, Apple Account or payment details. The app checks a purchase on the iPad.

4. What Apple may share with us

Apple distributes the app, and its handling of your information is covered by Apple's privacy policy. Apple may share some information with us:

• If you join the beta (TestFlight). Apple tells us which testers installed which build, the device model and iPadOS version, and, depending on how you joined, your name and email address. Crash reports, and any feedback and screenshots you choose to send through TestFlight, also come to us. We use this only to fix problems and improve the app.
• If you have turned on "Share with App Developers" in your iPad's Analytics settings, Apple may send us crash reports and statistics about app use that do not identify you. You can switch this off in Settings › Privacy & Security › Analytics & Improvements.
• App Store reports. Apple gives us totals for downloads and sales by country. These do not identify anyone.

5. When you email us or send us files

If you email us, we receive your email address, your name if your email includes it, and whatever you write. We use it only to reply and to fix what you tell us about. We never add you to a mailing list unless you ask.

If you send us an exported archive, a screenshot or a creation to help with a problem, we use it only for that purpose and delete it when we are done. Exports hide children's names by default. Please leave that switched on.

Testing programmes. Sometimes we invite families to help test the app, for example by sharing samples of how their child writes numbers so that Scribble Math can read children's handwriting. We only do this with a parent's written consent, given on a form that explains exactly what is collected, how it is anonymised, and how to withdraw. The samples stay on the iPad until the parent chooses to share them. When we receive them, we keep only the anonymised handwriting and delete the rest, and a parent can ask us to delete their child's samples at any time. We never ask children for information directly.

6. This website

The website has no advertising on it. Its fonts and images are served from the website itself.

Cookies, only if you agree. On your first visit, a banner asks whether we may use cookies. Until you say yes, the website sets no cookies and sends nothing to Google. Your answer is kept in your browser's storage on your device so that the banner does not appear on every page, and we ask again after a year. You can change your answer at any time with Cookie settings at the bottom of every page. Saying no after a yes also deletes the website's Google cookies from your browser.

Google Analytics. If you agree, we use Google Analytics, a service from Google, loaded through Google Tag Manager, to count visits and see which pages people find useful. It sets cookies so that it can tell visits apart, and Google receives information such as your IP address (used to estimate your country and city), your browser and device type, the pages you view, how long you stay, and the page that linked you here. We see totals and trends, not who you are, and we do not connect them to beta sign-ups or to anything in the app. Google keeps this data for no more than 14 months. Google's handling of it is described in Google's privacy policy and in how Google uses information from sites that use its services. You can also block Google Analytics on every website with Google's opt-out browser add-on.

Advertising cookies. We may also ask, as a separate question in the banner, whether Google may use advertising cookies to show our ads to people who have visited this website when they later use other websites and apps (remarketing). That choice is off unless you turn it on, and nothing about your child is ever used for it. If your browser sends a Global Privacy Control signal, the website treats it as a no to advertising cookies.

Beta sign-up form. If you ask to join the beta on our beta page, we receive the email address you enter and, if you give them, your name and which iPad your child will use. The form is for parents and guardians aged 18 or over, and it asks nothing about your child. We store your sign-up in a database at our hosting provider, Cloudflare, and send a copy to our support inbox through our email delivery service, Resend, so that we can invite you to TestFlight. We use it only to send you the invitation and to write to you about the beta. We never add you to a mailing list or share your details with anyone for their own use. Your IP address is used for a few minutes, in memory only, to stop repeated sign-ups, and is not stored with your sign-up. To leave the list, email us and we will delete your sign-up.

Like every website, it is delivered by a server. Our hosting provider, Cloudflare, automatically processes standard technical information, such as your IP address, browser type, the page you asked for and the time, to deliver pages and protect the site from abuse. We do not use this to identify visitors, and the logs are deleted on the provider's regular schedule.

The website does not act on Do Not Track signals, because it sets no cookies until you agree.

7. Children's privacy

The app is designed for children aged 7 to 10 and is built for the App Store Kids category. We do not collect personal information from children: the app has no way to send anything to us, there is no chat or sharing between children, and nothing is shown to a child that asks for their details. Because of that, no verifiable parental consent is needed for the app itself. A summary is shown during set-up, and this full policy is in the app at Parent Zone › Settings › Privacy & export.

We aim to meet the requirements of the U.S. Children's Online Privacy Protection Act (COPPA), the EU and UK GDPR as they apply to children, the UK Age Appropriate Design Code, and Apple's Kids category rules.

If a child emails us, we will reply only to ask for a parent, and delete the message. The beta sign-up form is for adults: if we learn that a child has used it, we delete the sign-up. If you are a parent and think we hold information about your child, such as handwriting samples from a testing programme, email us and we will show it to you, delete it, or stop any further use, as you choose.

The website is for parents and guardians. It has nothing for children to play, sign up for or fill in, and its cookie banner is meant to be answered by an adult. If you think your child said yes to cookies, open Cookie settings on that browser and choose No thanks: that also deletes the website's Google cookies from it.

8. Who we share information with

We do not sell, rent or trade personal information. The only others who handle information on our behalf are the companies that host this website, measure its visits and provide our email: Cloudflare, which hosts the website and stores beta sign-ups, Google, which provides Google Analytics for the website if you agree to it, Resend, which delivers sign-ups to our inbox, and our email provider. They handle it only so they can provide those services. If you also agree to advertising cookies on the website, Google uses them to show our ads to you; we share nothing else for advertising. We may also disclose information if the law requires it, to protect someone's safety, or to a new owner of the app who agrees to keep this policy.

If you write to us or sign up for the beta from outside the country where we or our providers are based, your information will be processed there. Where the law requires it, we rely on appropriate safeguards for such transfers, such as standard contractual clauses.

9. Legal bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

• Emails and support: our legitimate interest in answering you, or the steps you ask us to take.
• Beta sign-ups: the steps you ask us to take to invite you to the beta.
• TestFlight and crash information: our legitimate interest in finding and fixing problems.
• Website server logs: our legitimate interest in running the website securely.
• Website cookies (Google Analytics and any advertising cookies): your consent, given in the cookie banner, which you can withdraw at any time with Cookie settings.
• Testing programmes: the parent's consent, which can be withdrawn at any time.

10. Your rights

Wherever you live, you can ask us what personal information we hold about you or your child, and ask us to correct it, delete it, or stop using it. If you are in the EEA or UK you also have the rights to data portability, to restrict or object to our use of your information, to withdraw consent, and to complain to your data protection authority (in the UK, the Information Commissioner's Office). If you live in California or another U.S. state with a privacy law, you have similar rights. We do not sell personal information or use it to profile anyone, and we use it for targeted advertising only if you agree to advertising cookies on the website.

Because the app's data lives only on your iPad, you can use most of these rights yourself, at any time, with the controls below. For anything we hold, such as emails, beta sign-ups or TestFlight information, email support@brainquestisland.com. We will reply within one month, and we will never treat you differently for asking.

11. Your controls in the app

• Export. Parent Zone › Settings › Privacy & export saves everything as CSV and JSON files to a folder you choose, with children's names hidden by default.
• Delete. Deleting a child profile removes all of that child's data and files immediately. Deleting the app removes everything.
• Reset. A profile can be reset to clear progress while keeping its settings.

12. Security, backups and retention

Data on the iPad is protected by iPadOS: each app is kept in its own sandbox, the device encrypts storage when a passcode is set, and the parent PIN is stored only as a hash in the Keychain. Exported files are not encrypted, so store them somewhere safe.

The app writes nothing to iCloud itself. Like other apps, its data is included in your own iPad backup (iCloud or local) so progress survives a device replacement. Those backups are controlled by you and Apple, not by us.

Data in the app is kept until you delete it. We keep emails and files you send us only as long as we need them to help you, and then delete them. We keep beta sign-ups until the early-access programme ends or you ask us to remove you, and then delete them. Google keeps website analytics data for no more than 14 months. Anonymised handwriting samples from a testing programme are kept until the parent asks us to delete them or we no longer need them to build the handwriting reader.

13. Microphone and camera

No game uses the camera. The current build never uses the microphone and never asks for permission. If a future build adds voice recording, it will be off by default, switched on per child by a parent, and recordings will stay in local files on the iPad. We will update this policy before that happens.

14. Changes to this policy

If this policy changes, the date at the top changes with it, and the copy in the app is updated in the next release. If a change affects what happens to your family's information, we will explain it in the app's release notes before it takes effect. We will never start collecting children's information without first asking parents.

15. Contact us

Bright Pebble Studios
1401 Lavaca Street, #7208, Austin, TX 78701
Email: support@brainquestisland.com