Privacy policy

Last updated 10 October 2026

Who is responsible

The controller of the data described here is Simen Øian Gjermundsen, who makes The Kids App. Contact: mail@simengjermundsen.com.

What stays on the device

The app stores a few things on the device only: the content list and the files it has downloaded, so everything works offline, plus which things have been opened and how many times, on which days the app was used in the last month, when day passes were bought and when the current one expires, and how many times the parent check has been postponed. This is used to pace the countdown in the free version, to suggest a fitting plan on the parent check, and to show the icon of your child’s most-opened thing on the purchase screen. None of it leaves the device. Deleting the app deletes it.

Downloading content

The app gets the list of videos, photos and sounds from our server at simengjermundsen.com and downloads the files from Amazon CloudFront, a content network run by Amazon Web Services. Like any use of the internet, these services receive the device’s IP address and ordinary technical details of each request, such as the time and which file is fetched. This is used only to deliver the content and keep the service secure, is kept only in server logs that the providers delete automatically, and is never combined with other data. Amazon Web Services processes this on our behalf, and transfers to the USA rely on the EU–US Data Privacy Framework.

Purchases

Purchases are made in the App Store or on Google Play. Apple and Google handle payment and your payment details as independent controllers. We never see your name, email address or card details. To know which purchases are active, and so that you can restore them, the app uses RevenueCat, Inc. (USA) as a processor acting on our behalf. RevenueCat receives the purchase record from Apple or Google, a random ID created by the app, and the technical details any server receives, such as the IP address, device type and app version. The ID isn’t linked to your name or contact details, and isn’t used for advertising or tracking. This transfer to the USA is protected by the EU Standard Contractual Clauses in RevenueCat’s data processing agreement. See RevenueCat’s privacy policy.

When you email us

If you email us, we use your name, email address and message only to reply. The email is deleted once the matter is closed and we no longer need it.

What we never do

The app shows no ads, contains no advertising or analytics tools, doesn’t track your child across apps or websites and doesn’t sell data. It doesn’t use the camera, microphone, location or contacts.

Children

The app is made for young children and is designed to collect as little as possible: nothing that identifies your child, and nothing from the camera or microphone. Children can’t type anything into the app. The only things sent from the device are the technical details needed to fetch content and check purchases, as described above. Purchases and links that lead out of the app sit behind a parent check.

Legal basis

Delivering content, running the servers and this website securely and answering emails are based on our legitimate interests in providing the service, keeping it secure and helping you (GDPR Article 6(1)(f)). Handling purchases is necessary to perform the contract you enter into when you buy (Article 6(1)(b)). The app makes no automated decisions about you. The plan suggestion on the parent check is worked out on the device and sent nowhere.

Your rights

You have the right to access, correct or delete personal data about you, to restrict or object to how it’s used, and to receive it in a portable format. Because the app doesn’t know your name, include the order number from your Apple or Google receipt so we can find the right record. Email mail@simengjermundsen.com. You can also complain to the Norwegian Data Protection Authority, Datatilsynet.

This website

This website sets no cookies, uses no analytics and loads nothing from other companies. Fonts, images and film are served by the website itself. It’s hosted by Vercel Inc. (USA), which processes data on our behalf and keeps ordinary technical logs, such as IP addresses, for a short period for security and operations. Transfers to the USA rely on the EU–US Data Privacy Framework.

Changes

If this policy changes, we’ll publish the new version here with a new date.