Privacy Policy
Version 1.0, effective 23 October 2026.
Squishy Vibes is made for children, so we collect as little as possible. We do not ask for a name, email, phone number, photo, location or birthday. There are no ads, no analytics, no tracking across apps or websites, and no advertising identifier. We never sell or share personal information.
What the App uses, and why
| What | Where it stays | Why |
|---|---|---|
| A random app user ID (Firebase anonymous sign-in, no name or email) | Our Firebase project, stored in Europe | To remember whether the Full Game was bought on this account |
| Full Game status and the App Store transaction details Apple gives us | Our Firebase project, stored in Europe; checked with Apple | To confirm a purchase is real and to restore it |
| Microphone sound while the talk button is held | Only in the device's memory for a few seconds | To play the voice back in a funny voice. It is never recorded to a file, stored or sent anywhere |
| Paintings, stickers, game progress, coins, days played, settings | Only on the device | So the child's creations and progress are there next time |
| Photos | The device's Photos library, only when the photo button is tapped | To save a picture of a squishy. The App can add photos but cannot see the library |
| Daily reminder | Scheduled on the device, only if a grown-up turns it on behind the parental gate | A gentle daily nudge. No server is involved |
The App asks iOS for permission before using the microphone, Photos or notifications, and each can be turned off in the iPhone Settings app at any time.
Service providers
We use Google Firebase (Google Cloud, servers in the European Union) to store the app user ID and Full Game status, and to run the check with Apple. Google acts only on our instructions as our processor. Apple processes payments under its own privacy policy. No other third party receives information from the App.
Children's privacy (COPPA, GDPR-K and similar laws)
We do not knowingly collect personal information from children beyond a persistent identifier used only to support the App's internal operations (remembering a purchase), which the U.S. Children's Online Privacy Protection Act (COPPA) allows without collecting other information. There is no chat, no sharing with other players, no public profiles and no links out of the App without a parental gate. Parents can ask us at any time to review or delete the data linked to their child's app user ID, and to stop further collection, using the contact details below or the in-app delete option.
Your rights where you live
- European Union, EEA and United Kingdom (GDPR and UK GDPR). Emanuel Gall (Cluj-Napoca, Romania) is the controller. We rely on performing our contract with you (delivering and restoring the Full Game) and on our legitimate interest in keeping the App working and secure. You have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to complain to your local data protection authority (in Romania, ANSPDCP). Data is stored in the EU; where Google may access it from outside the EU, it is protected by the European Commission's Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.
- United States, including California (CCPA/CPRA) and other state privacy laws. We do not sell or share personal information, do not use it for targeted advertising and do not profile anyone. You can ask to know, correct or delete the information we hold, and we will not treat you differently for asking.
- Brazil (LGPD), Canada (PIPEDA), Australia, Japan, South Korea, India and other countries. You have the rights your local law gives you, such as access, correction and deletion, and we will honour them the same way.
To use any right, write to contact@squishyvibes.app. We answer within 30 days, or sooner if your law requires.
How long we keep data
The app user ID and Full Game status are kept while the App is in use so a purchase can be restored. You can delete them at any time with the delete option in Settings (behind the parental gate) or by emailing us; we then remove them within 30 days, except where the law requires us to keep purchase records. Everything else stays only on the device and is gone when the App is deleted.
Security
Data is sent over encrypted connections and stored in Google's secured cloud. Only we can access it.
Changes
If we change this policy in a meaningful way, the App will ask a grown-up to read and accept the new version before play continues.
Contact
Emanuel Gall, Cluj-Napoca, Romania, contact@squishyvibes.app.