Privacy Policy — QuickDraw Academy

Last updated: August 6, 2026

QuickDraw Academy is an educational mobile game designed for children ages 6–10. This Privacy Policy explains what we do (and, more importantly, do not) collect when your child plays the game.

1. What we collect

When your child opens QuickDraw Academy for the first time, the app generates a random device identifier (a string of letters and numbers — e.g., 8a7f3c12-...) on the device. We use this identifier to back up gameplay progress to our private server so your child does not lose their stars, XP, and campaign progress if the app is reinstalled or the device is replaced.

Specifically, the data we store on our server is:

• The randomly-generated device ID (not linked to any personal account, email, or login).
• Gameplay statistics: total XP, level, total stars, duels played, duels won, current streak, best streak.
• Per-subject mastery scores: an internal numeric rating (1.0 – 8.0) per subject the app teaches that adapts question difficulty to your child's skill. (V1 ships with one subject — math — and reserves storage for future subject expansions.)
• Town progress: which towns are completed, how many stars earned, how many attempts made.
• Per-duel summaries: town, subject, rounds won, stars earned, completion timestamp. (No question-by-question history.)

That is the complete list. We do not store, log, or transmit anything else.

2. What we DO NOT collect

The app does not collect, store, or transmit any of the following:

• Your child's real name, nickname (free-text), or initials.
• Email addresses (yours or your child's).
• Phone numbers, mailing addresses, or postal codes.
• Photos, videos, audio recordings, or microphone input.
• Location data of any kind (GPS, IP-based, Wi-Fi, etc.).
• Contacts, calendar entries, or other device data.
• Browsing history, advertising identifiers, or behavioral profiles.
• Demographic data (gender, ethnicity, etc.).
• Any data from third-party services or social networks.

The cowboy nickname your child sees in the app (e.g., "Sheriff", "Quick Draw") is selected from a fixed list of 20 options curated by us. There is no free-text input anywhere in the app where your child could type a real name or other personal information.

3. Why we collect device ID + gameplay stats

The single purpose is progress backup: if your child reinstalls the app or moves to a new device, we want them to recover their stars and XP rather than starting from scratch. The device ID is the key that maps a backup row to your specific device — it is functionally anonymous (we cannot tell who owns the device).

We do not use this data to:

• Build a profile of your child's behavior.
• Send notifications, ads, or marketing messages.
• Share, sell, or trade with any third party.
• Train AI models or perform analytics beyond simple usage counts.

4. Where data goes

Backup data is stored on a private server we operate. We do not share your child's data with anyone, with these limited exceptions:

• Legal requirements: if compelled by valid legal process (e.g., a court order in our jurisdiction).
• Service infrastructure: our hosting provider (Hetzner) physically operates the server hardware, but does not have access to or process the data we store.

We do not use third-party analytics, advertising, or tracking SDKs. The app makes network calls only to our own backup server and (during setup) to Apple/Google for app delivery.

Within the app, parents can view this gameplay data through the Parent Dashboard (Settings → Parent → Parent Dashboard), protected by the same parent gate as Delete All Data. The dashboard displays the same data described in §1 in a parent-readable format (e.g., "Math: about 8-year-old level"); no data leaves your device or our server beyond what is described above.

The app contains no purchases and no advertising, so no payment or purchase data exists to collect. If optional paid content is added in a future update, this policy will be updated first to describe exactly what (anonymous) purchase-entitlement data would be processed.

5. How long we keep data

We keep backup data until you delete it. There is no automatic expiration.

To delete:

1. Open the app.
2. Tap Settings (the bottom-right tab).
3. Tap Delete All Data.
4. Confirm (the action is parent-gated — you'll need to press and hold a button for 3 seconds to prove you're an adult).

This action wipes both the on-device data and the server backup row. Deletion is immediate and permanent — we cannot recover deleted data.

6. Children's privacy and COPPA

QuickDraw Academy is designed for children ages 6–10 and complies with the U.S. Children's Online Privacy Protection Act (COPPA) and Apple's "Made for Kids" / Google's "Designed for Families" policies.

Because we do not collect personally identifiable information from children (only an anonymous device ID and gameplay stats), no parental consent is required for ordinary use of the app under COPPA Section 312.5.

Parents have the following rights with respect to their child's data:

• Right to delete: use Settings → Delete All Data to wipe all data on the device and our server.
• Right to know: this policy describes everything we collect.
• Right to refuse further collection: uninstall the app. We do not retain data after uninstall + reset.

If you are a parent and have questions or concerns, contact us at the email below.

7. International users

QuickDraw Academy is operated from the European Union. If you are using the app from outside the EU, your data will be transferred to and stored in the EU. The protections described in this policy apply regardless of where you are located.

For users in the European Economic Area (EEA) and United Kingdom, GDPR applies in addition to COPPA-style protections. Under GDPR-K (the children's provisions), our lawful basis for processing your child's gameplay data is legitimate interest (providing the backup service you opted into by installing the app), strictly limited to the purpose described in §3.

8. Security

We use HTTPS for all network traffic between the app and our server. Data is stored on servers located in the European Union (Hetzner, Germany). Server access is restricted to authenticated administrators (the developer and any future contracted operations staff). When database backups are taken, they are retained for a maximum of 30 days and are covered by the same access restrictions as the live database.

Device IDs are sufficiently random (UUID v4) that they cannot be guessed or enumerated.

9. Changes to this policy

We may update this policy from time to time. The current version is always available in-app under Settings → Privacy Policy and at this URL (quickdrawacademy.com/privacy), which is linked from the App Store / Play Store listing. Material changes will be highlighted in the next app release notes.

10. Contact

Questions about this policy or your child's data?

Email: support@quickdrawacademy.com

We aim to respond within 5 business days.