Totologic privacy policy

Last updated 26 October 2026.

Totologic is a learning app for children aged 3 to 8. A parent creates the account and sets up each child's profile; children play, but never create accounts or give us information themselves. This policy explains what we collect, why, who helps us run the app, and how you can delete everything.

What we collect

From you, the parent: your name, your email address and a password (stored only in scrambled, hashed form). We use your email to verify your account, send password-reset codes and contact you about your account.

About each child, entered by you: a first name or nickname (optional), their age, and your answers to the setup questions - such as what they enjoy, what you'd like them to work on and how they handle a challenge. We use these to choose the right starting level and activities.

While a child plays: which puzzles and reading activities they did, whether each answer was right, how long it took, stars earned, and the learning plan and skill levels we work out from that. We use this to pick what comes next and to show you their progress.

Where you signed up from: when you create your account, in the app or on our website, we note the approximate area - country, region or state, and city - worked out from your internet connection's IP address at that moment, to understand where families find Totologic. We don't keep the IP address itself, never use your device's GPS or precise location, and never collect anything about where a child is.

Subscriptions: whether you have a plan, which one, and when it renews. Payment happens in Google Play or the App Store - we never see your card or payment details. If you start a free trial, we note when it ends and email you shortly before, so you know when your plan begins.

Crash reports: if the app crashes, a report with the device model, operating system and app version and what went wrong, so we can fix it. Crash reports don't include names or email addresses.

Signing up on our website: you can also create your account on our website by answering the setup questions there. We collect the same details as above, note which advert brought you there (if any), and email you a welcome message with the link to the app. To improve those questions we also count, anonymously, which steps are reached and whether creating the account worked - using a random number made for that visit and kept only in your browser for that session, never your name or email. These counts are deleted after 180 days.

Emails about your child's learning: when your child reaches a milestone or makes real progress in the app, we may email you about it, with an idea for what to try next - a few emails a week at most. To decide when something is worth telling you, we keep a record of those moments (for example, "mastered patterns") and of the emails we send - whether they were delivered or opened, and whether you clicked them. These records are deleted after 180 days. Every email has a link to unsubscribe. We only mention Totologic Premium in them if you've chosen to hear about it.

What we don't collect

• No precise (GPS) location and nothing about where your child is; no contacts, photos, camera or microphone access - nothing your child says is recorded.
• No advertising ID and no ads in the app. We never sell data, and never use anything about a child for advertising or profiling. (The only thing we share for advertising is described under "Our adverts" below.)
• Paintings your child saves go to your device's gallery only - they aren't uploaded.

Who helps us run Totologic

We share data only with the service providers that run parts of the app for us, only for that purpose, and never for their own advertising:

• Our hosting provider - stores the account and progress data described above.
• Brevo - sends our emails, such as verification codes and learning updates, and tells us whether they were delivered.
• RevenueCat - keeps track of subscription status, using a random account number (not your name or email).
• Google Play / Apple App Store - take subscription payments.
• Sentry - receives the crash reports described above.
• Google Fonts - the app downloads its typefaces from Google, which receives your device's IP address as part of that request.

Our adverts

If you signed up on our website after reaching it from Facebook or Instagram (for example, by tapping one of our adverts), we let Meta, the company behind Facebook and Instagram, know that you signed up - and, if you later start a free trial or subscribe in the app, that this happened and the plan's price. This shows us which adverts bring parents who find Totologic useful, and helps Meta show them to similar parents. We send only your email address in scrambled form (a "hash", which lets Meta recognise it if it belongs to a Facebook or Instagram account, without us sending the address itself), the reference code Facebook or Instagram added to the link and, at sign-up, your device's IP address and browser type. We never send anything about your child. None of this is sent if you signed up any other way, or if your browser sent a Global Privacy Control signal when you signed up. For parents in US states with privacy laws we ask Meta to limit its use of this information ("Limited Data Use"). Meta handles it under its own privacy policy, and you can control how Meta uses information from businesses in your Facebook or Instagram settings ("Your activity off Meta technologies").

The puzzles, stories and voices in the app are prepared on our servers, some with the help of AI and text-to-speech services. No information about you or your child is sent to those services.

Children's privacy

Totologic is designed for children and follows Google Play's Families policy and the App Store's rules for apps made for kids. Information about a child is only ever provided by their parent, who can see, change or delete it at any time. If you believe a child has given us information without a parent's involvement, send us a message and we'll delete it.

How long we keep it

We keep your account, your children's profiles and their progress for as long as your account exists. When your account is deleted, all of it is deleted with it. We keep only the store's record of subscription payments (no names or email addresses), as we're required to for accounting and fraud prevention.

Deleting your account

In the app, tap the profile button, then Delete account. Without the app, use https://app.totologic.com/delete-account, or send us a message using the email address on your account. We'll confirm by email that we've received your request, delete your account and everything on it within 1 month, and email you when it's done. We keep a record that the request was made and completed. Deleting your account doesn't cancel a subscription - cancel that in Google Play or the App Store.

Your rights

Depending on where you live - including under Kenya's Data Protection Act, the EU and UK GDPR and the US Children's Online Privacy Protection Act (COPPA) - you can ask to see the information we hold about you or your child, correct it, delete it, or stop us using it. Send us a message and we'll respond within 30 days.

Keeping it safe

Everything travels between the app and our servers encrypted (HTTPS), passwords are stored hashed, and only the people who maintain Totologic can access the data.

Changes

If we change this policy, we'll update the date at the top, and email you before any change to what we collect about children takes effect.

Contact

Questions or requests: send us a message and we'll reply by email.