Privacy Policy

What we store

If you create a parent account, we store your email address, your kids' first names, each kid's birth month and year, daily activity totals per kid, and device tokens that let a computer connect to your account.

What we never store

We never collect photos of your kids, audio recordings of your kids, last names, or exact birthdays. We only need a first name and a birth month, never more.

One exception, and we would rather tell you than have you find it. If you change your Wi-Fi from the portal instead of from the computer itself, your Wi-Fi password passes through us on its way to the computer. It is deleted the moment the computer confirms it, it is never shown back to anyone including you, and it is never used for anything else. If you would rather it never touched us at all, change Wi-Fi on the computer itself: hold the gear, enter your PIN, and open Wi-Fi. That path never leaves the house.

Your child never uses the online service

Kids use Sandcastle on the installed computer without going online. They don't sign in, don't create an account, and don't interact with any online service directly. Only a parent, through the portal, does that.

Update checks, even without an account

A computer that has never been connected to an account still checks for software updates about once a day. It asks our download server, packs.sandcastle.kids, for a small public file that names the newest version. The request carries no account, no name and nothing about your child. It does reach our download host, Cloudflare, so the computer's internet address and the name of the software appear in Cloudflare's ordinary request logs. If you open the update screen on the computer, the installed version number is in that request too. Nothing in it ties the computer to an account.

How long we keep it

If you cancel Cloud, we delete your account data 30 days after cancellation. Before that, you can request an export or a deletion at any time by writing to [email protected].

No sharing, no ads

We don't sell or share your data with third parties for marketing, and we don't run ads anywhere in Sandcastle or on this site.

Who processes payments and hosting

Cloud subscription payments are processed by Stripe. Account data is hosted on Supabase. Neither company can use your data for anything besides providing their service to us.

Contact

Questions, exports, or deletion requests go to [email protected].