Privacy Policy — Harpaboo
Last updated: 2026-07-12
The short version
Harpaboo is an offline food-allergy education game for children ages 2–12. The app has no accounts, no sign-in, no ads, no analytics, and no servers. It does not collect, transmit, sell, or share any personal information. Everything the app stores stays on your device, under your control. The only personal information we collect anywhere is an email address you may choose to submit on our website — see "Our website" below.
Information the app stores on your device
To make the game work, Harpaboo keeps the following on your device only:
- Child profiles: a name or nickname you choose, an age range (we never ask for or store a birthdate), and the allergens you select.
- Per-child gameplay progress: levels played, stars, and badges.
- Per-child food safety overrides you set in the parent area.
- A salted hash of the parental-gate PIN (never the PIN itself).
This information never leaves the device through any system we operate. We have no servers and no way to see it.
What the app doesn't do
- No ads or third-party advertising SDKs.
- No analytics, telemetry, or behavior tracking of any kind.
- No advertising identifiers.
- No accounts, sign-in, email collection, or social features.
- No camera, microphone, location, or contacts access.
- No in-app purchases shown to children.
Device backups
If you use your platform's standard device backup (iCloud Backup on Apple devices, Android Auto Backup on Android), the app's on-device data — profiles, allergen selections, progress, and the PIN hash — is included in that backup like any other app's data. That backup is operated by Apple or Google under your existing account settings and controls; Harpaboo does not operate, see, or have access to it. You can exclude the app from backups in your device settings.
Diagnostic logs
To help us fix bugs, the app keeps a technical activity log on your device. These logs are designed to leave out names — children appear as ID codes rather than by name — and they never include PINs. Logs are automatically deleted after 7 days and never leave the device unless you choose to share them: the parent section has a "Send Logs to Developer" option that opens your device's standard share menu, where you pick the app (such as email) and send the file yourself. We operate no service that receives logs automatically.
Children's privacy (COPPA)
Harpaboo is designed for children with parent-managed setup. We comply with the Children's Online Privacy Protection Act (COPPA) the simplest way possible: the app collects no personal information from anyone, child or adult, and transmits nothing. We store an age range rather than a birthdate, and a nickname is fully supported in place of a real name. Settings that affect a child's experience sit behind a parental gate.
Third parties
The app shares data with no one. There are no third-party services, SDKs that phone home, or data processors in the app. The only third party we use anywhere is HubSpot, which processes the optional email form on our website (see "Our website" below).
Our website
This website (harpaboo.com) offers an optional "notify me" form where you can submit your email address to hear about the app's launch and updates. That email address is the only personal information we collect, and only if you choose to submit it. It is processed and stored by HubSpot on our behalf, used solely to send you the updates you asked for, and never linked to anything in the app. To have it deleted, use the unsubscribe link in any email we send or contact us at the address below. Children's data is never collected here: the form is part of the parent-facing website, not the app, and the app itself never asks for or transmits an email address.
Deleting your data
Delete an individual child profile from the parent area, or remove all app data by uninstalling the app (and deleting it from your device backup if you choose). Because we hold no copies, deletion on your device is complete.
Changes to this policy
If a future version of the app changes how data is handled, we will update this policy and the "Last updated" date before that version ships.
Contact
Questions about privacy: [email protected]