Abjad Privacy Policy

Last Updated: September 5, 2026

1. Introduction

Native Melon Consulting ("we") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Abjad.

We serve children and families, and comply with the Children's Online Privacy Protection Act (COPPA), Apple's guidelines for apps in the Kids category, and Google Play's Designed for Families program requirements.

2. Information We Collect

From Parents and Account Holders:

  • Contact details: name, email, phone number, company name
  • Transaction information: purchase history and payment method type (full card numbers are not retained; Apple App Store or Google Play Store processes payments)

Automatically Collected Data:

  • Usage analytics regarding feature interaction, session duration, game progress, and error logs
  • Anonymous activity events: which song, game, or in-app action occurred (including purchase, reward, certificate, and error/crash events), which world or screen it belongs to, its outcome, coarse device region, and an anonymous per-install identifier — logged with no persistent link to a child's profile (see Section 3)
  • Device details: model, operating system version, app version
  • IP address for fraud prevention and geographic compliance
  • Push notification token: if a parent or account holder opts in to notifications (via Settings, behind a parental gate), the app registers an Expo push token tied to your device, along with app language and a last-active timestamp used to avoid sending reminders to active devices (see Section 3a)

Child Profiles: Profile data includes name, avatar selection, and in-app progress. By default, all profile data is stored locally on your device only and is never transmitted to our servers or shared with third parties. If a parent or account holder enables the optional Cloud Sync feature in Settings, profile data is instead transmitted to Apple Game Center (iOS) or Google Play Games Services (Android) to back up and restore progress across devices — see Section 3b. Free users maintain one profile; premium users create up to five.

What Is NOT Collected from Children: We do not knowingly collect children's personal information transmitted to our own servers, including email addresses, photos, or location data. App usage requires no account registration. (Profile data transmitted via the optional Cloud Sync feature described above goes to Apple's or Google's saved-game service, not our servers — see Section 3b.)

3. Anonymous Activity Analytics

To understand how the app is actually used, so we can improve it, diagnose problems, and evaluate product and business performance, the app logs anonymous activity events to our own database. This covers app usage broadly — for example, song and game plays and completions, in-app purchase and reward flow steps, certificate creation and sharing, and crash and error diagnostics — and may expand over time to cover other in-app actions as the app evolves, without changing the privacy protections below.

These events:

  • carry an anonymous, self-generated per-install identifier (not a hardware ID, and not an advertising identifier) used only to count unique devices for aggregate engagement metrics, along with a coarse premium/free status flag
  • are never linked to a child's name, avatar, or profile, and the per-install identifier cannot be reversed to reveal a device's owner or any personal information
  • may include coarse, non-precise signals such as device region (country-level) and app version, used only in aggregate for market- and release-level analysis — never precise location
  • are first-party only — sent directly to our own database, never shared with advertising or third-party analytics services
  • are used only to measure aggregate device-level engagement (e.g., how many devices used the app in a given period), never to build an individual profile of a specific child or to track a person across apps or services

3a. Push Notifications

If enabled by a parent or account holder (opt-in only, gated behind a parental confirmation in Settings), the app sends two kinds of notifications:

  • Local streak reminders, scheduled entirely on-device and requiring no server involvement
  • Server-sent "come back" reminders for devices inactive for 72 hours, sent via our Supabase backend through Expo's push notification service

These notifications:

  • rely on a device push token, app language, and a last-active timestamp — no child name, avatar, or profile data
  • can be disabled at any time via Settings, which also deletes the stored push token from our servers
  • are never used for advertising or shared with third-party marketers
  • may include a deep-link destination (e.g., opening to the Adventure Map) that is read entirely on-device from the notification payload

3b. Cloud Sync (Game Center / Play Games Services)

If a parent or account holder enables Cloud Sync in Settings, the app signs in to Apple Game Center (iOS) or Google Play Games Services (Android) — Apple's and Google's own saved-game services — to back up and restore child profile data across devices.

This feature:

  • is off by default; the app otherwise only ever performs a silent, no-prompt sign-in check and does not transmit any profile data unless a parent has turned the feature on in Settings
  • transmits the child profile data described in Section 2 (chosen name, avatar, and in-app progress) to Apple's or Google's saved-game storage, governed by Apple's or Google's own privacy policy, not ours — we do not receive or store a copy of this data ourselves
  • is used solely to preserve and restore a family's own progress across their devices
  • offers to restore only on a fresh install or new device with no existing local progress, so it cannot silently overwrite a child's current profile
  • can be turned off at any time in Settings

4. In-App Purchases

Paid features are available as one-time purchases with no recurring subscriptions. Processing occurs through Apple App Store or Google Play Store directly.

RevenueCat validates purchase receipts and manages entitlements, collecting:

  • Anonymous device-level identifiers
  • Purchase receipts and entitlement status
  • App usage events related to purchase flows

RevenueCat does not receive children's personal information. Users may restore purchases through app settings using their App Store or Google Play account.

5. How We Use Your Information

Information serves these purposes:

  • Delivering and maintaining core app functionality and offline gameplay
  • Validating and managing purchase entitlements
  • Backing up and restoring progress across devices when a parent enables Cloud Sync (Section 3b)
  • Understanding which songs and games are played, to guide product improvements
  • Sending opt-in push notification reminders (Section 3a) to re-engage inactive users
  • Diagnosing crashes, fixing bugs, and improving the App
  • Responding to parent or user inquiries
  • Complying with legal obligations including COPPA, GDPR, and app store policies

We do not sell or rent personal information to third parties.

6. Disclosure of Your Information

Information sharing occurs only when:

  • Service providers (RevenueCat, Supabase, Apple Game Center, Google Play Games Services, cloud infrastructure providers) bound by data processing agreements or platform terms require it
  • Legal compliance demands it through law, court order, or user safety protection
  • Business transfers occur during mergers or acquisitions with equivalent privacy protections maintained

Supabase hosts our first-party anonymous activity analytics (Section 3), purchase/entitlement records, and push notification tokens (Section 3a). It receives no child-identifying data. Expo's push notification service relays notification delivery on our behalf and receives only the device push token needed to deliver the message. When a parent enables Cloud Sync (Section 3b), child profile data is sent directly to Apple Game Center or Google Play Games Services under their own respective privacy policies — we do not act as an intermediary for that data.

7. Data Security

We take reasonable technical and organizational measures to protect your information. However, no method of internet transmission or electronic storage is 100% secure, so we cannot guarantee absolute security. Child profile data remains locally stored and untransmitted unless a parent opts in to Cloud Sync (Section 3b), in which case it is protected under Apple's or Google's own security practices for their saved-game services.

8. Children's Privacy (COPPA)

We commit to COPPA compliance through:

  • Not knowingly collecting personal information from children under thirteen transmitted to our own servers without verifiable parental consent
  • Excluding third-party analytics SDKs that profile children — our own anonymous, first-party activity analytics (Section 3), whatever app actions they come to cover, use only an anonymous per-install identifier for aggregate device counts, carry no link to a child's identity, and are not shared with ad-tech or third-party analytics services
  • Storing child profile data locally only by default, with cross-device sync only available if a parent explicitly opts in via Settings (Section 3b), and only to Apple's or Google's saved-game services, never our own servers
  • Granting parents full control and deletion capabilities via Settings → Profiles, including disabling Cloud Sync at any time
  • Promising immediate deletion if personal information is inadvertently collected

9. Your Rights

Rights vary by location. Parents may request deletion of child-associated information. Child profiles can be deleted directly within the App via Settings → Profiles without contacting support. Data synced via Cloud Sync can be removed by disabling the feature in Settings and deleting the saved game through Apple's or Google's own account management tools. Other rights requests should be directed to the company.

10. Changes to This Privacy Policy

We may update this policy periodically, posting revised versions with updated effective dates. Material changes affecting children's data trigger additional notification steps for parents.

11. Contact Us

For questions or privacy requests: Native Melon Consulting — [email protected]