Privacy Policy
Nimbo World collects no data. This page lists, item by item, what is not collected.
Last updated: 9 September 2026 · Version 1.2
In short
- Nimbo asks for no personal information from you or your child.
- No account, no sign-in, no email address.
- There is no ad network, analytics tool, or crash-reporting service.
- Everything the app creates stays on the device only.
- Reminders arrive switched off, are scheduled on the device, and no remote notification exists.
- Deleting the app deletes all of the data it produced.
1. Personal data collected
None. Nimbo does not request, read or transmit any of the following:
- Name, surname, username
- Date of birth (only an age band — “3–4” or “5–6” — is selected; it stays on the device and is used to set content difficulty)
- Email address, phone number, postal address
- Photos, video, audio recordings
- Location
- Contacts, calendar, health data
- Advertising identifiers (IDFA / GAID), cookies or tracking pixels
The app contains no text input field of any kind. Because there is nowhere for a child to type, it is not possible for them to enter personal information by accident.
2. What is stored on the device
Nimbo keeps the following in your device's local storage. It never leaves the device and we cannot access it:
| Data | Purpose |
|---|---|
| Completed activities, earned stickers and badges | Showing progress |
| Stars, day streak, collection and the chosen avatar | The island world and its shop |
| Screen-time records and the daily limit | Parental controls |
| Drawings and coloring pages | The art gallery |
| Audio, language, accessibility and sleep settings | Remembering preferences |
| Reminder choices and their times | Reminders scheduled on the device |
| Selected age band | Setting content difficulty |
| Purchase state | Keeping full access unlocked |
When you generate a PDF report in the parent area, it is produced in the device's cache. It does not leave the device unless you choose to share it, and Nimbo never uploads it anywhere. The report contains no child's name, because Nimbo never knows it.
3. Network traffic
Nimbo works offline. The only network request the app makes on its own is:
- An anonymous GET to
https://nimboapp.vercel.app/config/app-config.jsonat each launch. The request only downloads the configuration file; it sends no information in a body, header or query parameter. It carries no device identifier, user identifier or usage data.
The purpose is to deliver a maintenance notice or a required-update notice. If the request fails, the app uses its cached or bundled configuration and continues to work normally.
The reminders a parent can switch on use no network either: the time you choose is handed to the device's own scheduler. Nimbo registers no push token and talks to no notification server, so the app is not remotely addressable.
4. Third-party services
Nimbo contains exactly one third-party component:
RevenueCat (purchase validation)
When full access is purchased, or “Restore Purchases” is used, RevenueCat, Inc. validates the purchase receipt. In that process:
- Nimbo provides no identity information to RevenueCat; an anonymous app user ID is used.
- Advertising-identifier collection is disabled and is never called.
- RevenueCat processes the store receipt and basic device/country information in order to validate the purchase. This data is not used for advertising or tracking.
- Details: revenuecat.com/privacy
The purchase itself is carried out by the Apple App Store or Google Play. Your payment details stay with the store; Nimbo never sees card information.
The app contains no ad network, analytics tool (Google Analytics, Firebase Analytics and similar), crash-reporting service or social media SDK.
The app may occasionally open the store's own rating prompt. That window belongs to the operating system; Nimbo does not learn your rating, your review, or whether you saw it at all.
5. Children's privacy
Nimbo is designed for children and collects no personal data from them.
- COPPA (US, 16 CFR Part 312): because Nimbo collects no personal information from children under 13, it performs no processing that would require verifiable parental consent.
- GDPR-K (EU, Article 8): as no personal data of a child is processed, the age-related consent condition does not arise.
- KVKK (Türkiye, Law No. 6698): no personal data is processed within the meaning of the law; progress records held on the device are not transferred to the data controller and are not accessible to us.
The app has no feature that lets a child communicate with anyone: no chat, comments, user-content sharing, social network connection or web browsing. Every link that leaves the app sits behind an adult verification step.
6. Permissions
| Permission | Why |
|---|---|
| Modify audio settings (Android) | Audio routing for game sounds and sleep sounds. |
| Notifications (iOS and Android) | Requested only when a parent switches reminders on. Reminders are scheduled on the device; nothing is sent remotely. |
| File picker | Opens only while restoring a backup, and reads only the file you pick. |
Camera, microphone, location, contacts and photo permissions are never requested. The notification permission is not asked for at launch but at the moment a parent switches a reminder on; every reminder arrives switched off, and none of them points at a purchase. The check in front of the parent area needs no permission either: Nimbo never asks for a fingerprint, a face scan or a device passcode — it asks a multiplication question inside the app.
7. Backup files
Nimbo has no account and no cloud sync, so a lost phone would take every star and drawing with it. Parent Area → Backup is the answer to that: progress, stars, drawings and settings are written to a single JSON file and the device's share sheet opens.
- The file is yours. Nimbo uploads it nowhere, keeps no copy, and does not know where you saved it.
- Restoring reads only the file you picked, and writes back only the records it recognises.
- Purchases are not part of a backup; they are tied to your store account and come back through “Restore Purchases”.
- The file contains no child's name, because Nimbo never knows it.
8. Deleting data
Because we hold no data about you on any server, there is no record to delete. To remove the data on the device, simply uninstall the app; progress, drawings, settings and reports go with it. A backup file or PDF report you exported earlier stays wherever you saved it — deleting those is up to you.
Your purchase is tied to your store account. If you delete and reinstall the app, you can recover full access from Parent Area → Purchases with Restore Purchases.
9. Changes to this policy
If this policy changes, the date and version number on this page are updated. If an update changes the app's data behaviour, the change is also noted in the app's release notes.
10. Contact
Data controller: Mahir Uslu (Türkiye)
Privacy questions are answered within 30 days at the latest.