Abjad Privacy Policy

Last Updated: July 17, 2026

1. Introduction

Native Melon Consulting ("we") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Abjad.

We serve children and families, and comply with the Children's Online Privacy Protection Act (COPPA), Apple's guidelines for apps in the Kids category, and Google Play's Designed for Families program requirements.

2. Information We Collect

From Parents and Account Holders:

  • Contact details: name, email, phone number, company name
  • Transaction information: purchase history and payment method type (full card numbers are not retained; Apple App Store or Google Play Store processes payments)

Automatically Collected Data:

  • Usage analytics regarding feature interaction, session duration, game progress, and error logs
  • Anonymous activity events: which song or game was played, which world it belongs to, and whether it was completed — logged with no persistent user or device identifier and never linked to a child's profile (see Section 3)
  • Device details: model, operating system version, app version. Device identifiers are collected "only on Android" for contextual advertising purposes; none collected on iOS
  • IP address for fraud prevention and geographic compliance
  • Push notification token: if a parent or account holder opts in to notifications (via Settings, behind a parental gate), the app registers an Expo push token tied to your device, along with app language and a last-active timestamp used to avoid sending reminders to active devices (see Section 3a)

Child Profiles: Profile data includes name, avatar selection, and in-app progress. All profile data is stored locally on your device only. It is never transmitted to our servers or shared with third parties. Free users maintain one profile; premium users create up to five.

What Is NOT Collected from Children: We do not knowingly collect children's personal information transmitted to servers, including email addresses, photos, or location data. App usage requires no account registration.

3. Anonymous Activity Analytics

To understand which songs and games are actually played, so we can improve them, the app logs anonymous activity events to our own database — one entry per game or song session, recording only the activity type (song/game), which activity and world it belongs to, and whether it was completed.

These events:

  • carry no persistent user or device identifier
  • are never linked to a child's name, avatar, or profile
  • are first-party only — sent directly to our own database, never shared with advertising or third-party analytics services
  • cannot be used to identify or track an individual child or device over time

3a. Push Notifications

If enabled by a parent or account holder (opt-in only, gated behind a parental confirmation in Settings), the app sends two kinds of notifications:

  • Local streak reminders, scheduled entirely on-device and requiring no server involvement
  • Server-sent "come back" reminders for devices inactive for 72 hours, sent via our Supabase backend through Expo's push notification service

These notifications:

  • rely on a device push token, app language, and a last-active timestamp — no child name, avatar, or profile data
  • can be disabled at any time via Settings, which also deletes the stored push token from our servers
  • are never used for advertising or shared with third-party marketers
  • may include a deep-link destination (e.g., opening to the Adventure Map) that is read entirely on-device from the notification payload

4. Advertising

The free version displays ads "on Android only" through Google AdMob. All ad requests are tagged as child-directed under COPPA and the Children's Online Privacy Protection Act.

Key practices include:

  • Non-personalized ads exclusively
  • AdMob content rating set to "G" (General Audiences)
  • No advertising identifiers used for tracking or cross-app profiling
  • AdMob may collect device identifiers and usage signals per Google's child-directed policies
  • Premium users see no advertisements

5. In-App Purchases

Paid features are available as one-time purchases with no recurring subscriptions. Processing occurs through Apple App Store or Google Play Store directly.

RevenueCat validates purchase receipts and manages entitlements, collecting:

  • Anonymous device-level identifiers
  • Purchase receipts and entitlement status
  • App usage events related to purchase flows

RevenueCat does not receive children's personal information. Users may restore purchases through app settings using their App Store or Google Play account.

6. How We Use Your Information

Information serves these purposes:

  • Delivering and maintaining core app functionality and offline gameplay
  • Validating and managing purchase entitlements
  • Serving contextual advertisements to free-tier users
  • Understanding which songs and games are played, to guide product improvements
  • Sending opt-in push notification reminders (Section 3a) to re-engage inactive users
  • Diagnosing crashes, fixing bugs, and improving the App
  • Responding to parent or user inquiries
  • Complying with legal obligations including COPPA, GDPR, and app store policies

We do not sell or rent personal information to third parties.

7. Disclosure of Your Information

Information sharing occurs only when:

  • Service providers (RevenueCat, Google AdMob, Supabase, cloud infrastructure providers) bound by data processing agreements require it
  • Legal compliance demands it through law, court order, or user safety protection
  • Business transfers occur during mergers or acquisitions with equivalent privacy protections maintained

Supabase hosts our first-party anonymous activity analytics (Section 3), purchase/entitlement records, and push notification tokens (Section 3a). It receives no child-identifying data. Expo's push notification service relays notification delivery on our behalf and receives only the device push token needed to deliver the message.

8. Data Security

We take reasonable technical and organizational measures to protect your information. However, no method of internet transmission or electronic storage is 100% secure, so we cannot guarantee absolute security. Child profile data remains locally stored and untransmitted.

9. Children's Privacy (COPPA)

We commit to COPPA compliance through:

  • Not knowingly collecting personal information from children under thirteen transmitted to servers without verifiable parental consent
  • Disabling behavioral advertising targeting children
  • Excluding third-party analytics SDKs that profile children — our own anonymous, first-party activity analytics (Section 3) carry no persistent identifier and are not shared with ad-tech or third-party analytics services
  • Storing child profile data locally only, never transmitting to servers
  • Granting parents full control and deletion capabilities via Settings → Profiles
  • Promising immediate deletion if personal information is inadvertently collected

10. Your Rights

Rights vary by location. Parents may request deletion of child-associated information. Child profiles can be deleted directly within the App via Settings → Profiles without contacting support. Other rights requests should be directed to the company.

11. Changes to This Privacy Policy

We may update this policy periodically, posting revised versions with updated effective dates. Material changes affecting children's data trigger additional notification steps for parents.

12. Contact Us

For questions or privacy requests: Native Melon Consulting — [email protected]