Privacy Policy

1. Who we are

Pampo: Spot the Difference ("Pampo", "the app") is made by BORING APPS SRL, a company based in Romania ("we", "us"). We are responsible for the information described in this policy (under the GDPR, we are the "controller").

Contact: hello@boring-apps.dev.

This policy is written for parents and guardians. It covers the Pampo app for iPhone and iPad. Pampo is in the App Store's Kids category, for children 5 and under.

2. What stays on the device

The app saves these things only on the device, so the game can pick up where your child left off:

• Progress: which pictures are finished, the suns earned, the friends collected, and the difficulty level.
• Grown-ups' settings: sound on or off, the language of the guide's lines, and whether the game may switch to easier pictures.
• Small picture previews the app keeps to load faster.

None of this is sent to us or to anyone else. Deleting the app deletes it. If you back up the device to iCloud or a computer, the backup can include it, just like other app data.

3. Purchases

Farm and Meadow are free. The other worlds are one-time in-app purchases, and only a grown-up can start one, behind the grown-up gate (see section 5).

Purchases go entirely through Apple's App Store. The app asks Apple for the prices, Apple runs the payment, and Apple tells the app on this device which worlds your family owns. We never see your name, your Apple Account or your payment details, and the app sends us nothing about purchases. Apple gives us only totals, such as how many of each world were sold in each country. Apple's handling of purchases is covered by Apple's Privacy Policy. Family Sharing and Ask to Buy are Apple features, run by Apple.

This matches the App Privacy details on the App Store: "Data Not Collected".

Crash reports from Apple

If you chose to share analytics with app developers in iOS Settings (Privacy & Security → Analytics & Improvements), Apple may send us anonymous crash reports, which help us fix bugs. They don't identify you or your child. You can turn this off in the same place.

4. What the app never does

• No ads of any kind, and no ad networks.
• No analytics and no third-party code of any kind: no analytics tools, no ad SDKs, no purchase-tracking services. We don't record how your child plays.
• No tracking. The app doesn't use the advertising identifier (IDFA) and never asks for permission to track.
• No accounts. There is nothing to sign up for or log in to.
• No personal information from children. No names, emails, phone numbers, photos, voice recordings, contacts or location. No camera, no microphone.
• No chat, no social features. Children can't talk to anyone, share anything or see anything other people made.
• No push notifications.

5. The grown-up gate

Everything meant for adults sits behind a grown-up gate: purchases, the settings, and the links to support and to this policy. To pass it, you tap three numbers in the order they are written as words (for example "Tap five, then two, then nine") within ten seconds. Young children who can't read yet can't pass it. Each time the settings are closed, or the app goes to the background, the gate locks again.

The gate keeps little fingers out of purchases and links. It is not a way of collecting consent, because there's nothing to consent to: the app doesn't collect personal information from your child.

6. Children's privacy laws

United States: COPPA

Pampo is directed to children. Under the Children's Online Privacy Protection Act (COPPA), we don't collect personal information from children: no names, contact details, photos, voice or location. The app sends no information about your child, or about the device, to us or to any third party.

European Union and Romania: GDPR

We follow the General Data Protection Regulation (GDPR). Article 8 of the GDPR requires a parent's consent when an online service relies on consent to process a child's personal data. Pampo doesn't ask children for consent, because it doesn't collect their personal data. Purchases are made by the adult who owns the Apple Account, and are processed by Apple, not by us.

United Kingdom: UK GDPR and the Children's Code

We follow the UK GDPR, and we built Pampo with the ICO's Age Appropriate Design Code (the Children's Code) in mind: high privacy by default, no profiling, no geolocation, no sharing of children's data, no nudges to give up privacy, and grown-up controls that are explained in plain language.

7. How long we keep data

• On the device: until you delete the app, or clear progress with "Start over" in the settings.
• With us: nothing, because the app sends us nothing. If you email us, we keep the conversation only as long as we need it to help you.

8. What parents can do

• Delete everything on the device: delete the app. All progress and settings go with it. If you reinstall, purchases can be restored from your Apple Account.
• Clear progress only: in the settings (behind the gate), use "Start over" for one world or for all of them. Purchases stay.
• Refunds: purchases are handled by Apple. Ask for a refund at reportaproblem.apple.com.
• Turn off purchases entirely: in iOS Settings → Screen Time → Content & Privacy Restrictions → iTunes & App Store Purchases.
• Ask us anything, or use your rights: depending on where you live, you may have the right to access, correct or delete personal data, to restrict or object to its use, and to data portability. Write to hello@boring-apps.dev, and we'll reply within one month.
• Complain to a regulator: you can contact your data protection authority. In Romania that's the ANSPDCP (dataprotection.ro). In the UK it's the ICO (ico.org.uk). We'd like the chance to help first.

9. Where data is processed

Data on the device stays on the device. The app sends nothing to our servers or to any third party, so there are no transfers to describe. Purchases are processed by Apple under Apple's own privacy policy.

10. Security

Data on the device is protected by the device's own security. The app's only connections are to Apple's App Store for prices and purchases, over encrypted connections.

11. Changes to this policy

If we change this policy, we'll update the date at the top. We won't start collecting personal information from children, add ads, add analytics or add third-party code without first updating this policy and the App Store privacy details.

12. Contact

Questions about privacy, or about your child's data? Email hello@boring-apps.dev. A person reads every email.

BORING APPS SRL, Romania · hello@boring-apps.dev