Privacy Policy for Jack & Joe World

Effective 8 August 2026Last updated 8 August 2026App version 2.5
Google Play edition — com.hellobard.jackandjoe

Who we are

Jack & Joe World is made and published by:

Hello Bard AS is the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.

What this policy covers

This policy covers the Android application Jack & Joe World (com.hellobard.jackandjoe), distributed through Google Play.

It does not cover Google Play itself, or any other service operated by another company. Those services have their own privacy policies, listed later in this document.

This is a children's app

Jack & Joe World is made for children and is intended to be enjoyed with a parent or carer nearby. We treat it as a child-directed service under the United States Children's Online Privacy Protection Act (COPPA), and we apply the protections that the GDPR and the UK Age Appropriate Design Code expect for children's services.

In practice that means:

• We do not knowingly collect personal information from children, or from anyone else.
• We do not show behavioural or targeted advertising, because we show no advertising at all.
• We do not profile users, and we do not make automated decisions about anyone.
• The app has no social features. Nothing your child makes or does can be seen by another person.
• The app contains no links out to the open web, no browser windows, and no third-party content.
• Purchases are protected by a parental gate, described below.

If you believe a child has somehow provided us with personal information, please write to support@hellobard.com and we will delete it.

What Hello Bard AS does not do

We think a privacy policy is more useful when it is specific. Every item on this list is a deliberate choice in how the app is built:

• No advertising. No ad network, no ad SDK, no sponsored content, no cross-promotion.
• No advertising ID. The app actively strips the advertising identifier permission (AD_ID) out of its own build, so that no component included in the app is able to request it.
• No analytics. The app contains no analytics software. We do not measure sessions, screens, taps, time spent, or which pages your child likes best.
• No crash or performance reporting to us. Automatic crash reporting is switched off.
• No tracking across apps or websites. We do not participate in any such scheme.
• No accounts and no sign-in. The app never asks for a name, email address, photo or birthday.
• No selling or sharing of personal data. We have no personal data, and we would not sell it.
• No permissions requested. The app does not ask for the camera, microphone, location, contacts, photo library or file storage, and it cannot use them.
• No push notifications, newsletters or marketing. We have no way to contact your child.

What stays on your device

The app saves a small amount of information locally so that it behaves the way you left it. This information never leaves the device, is never sent to us, and is deleted when the app is uninstalled.

• Your reading settings. Whether on-screen text is shown, and whether narration is played.
• Tip records. A simple marker noting that a tip was completed, so the app can say thank you. It contains no payment details and no personal information.
• Coloring pages. Artwork your child creates is held in the app's memory while the page is open and is not written to storage or sent anywhere.
• The parental gate answer. The year you enter is checked and then discarded. It is never saved and never transmitted.

None of this identifies you or your child.

The tip jar and in-app purchases

Jack & Joe World is not free-to-play and contains nothing your child must buy to keep reading. The app includes an optional tip jar, where a grown-up can choose to support our work with a small one-off payment. There are four tip amounts, and they unlock no content.

The parental gate

Before the tip jar opens, the app asks for a year of birth and checks that the person answering is an adult. That answer is used once, in memory, and is then cleared. It is never stored and never transmitted.

How payment works

We never see or handle payment details. When you choose a tip, the payment is completed entirely inside Google Play's own purchase flow, using the payment method already on your Google account. The app receives a single message back saying that the purchase succeeded, and nothing else. We do not receive your name, your email address, your card number, or your billing address.

Nothing leaves your device until you open the tip jar

The tip jar is built on Unity's in-app purchasing software. To check prices and complete a purchase, that software must connect to Google Play, and doing so transmits a device or installation identifier. This is required for purchasing to function at all, and it is the reason this policy cannot claim that the app sends nothing whatsoever.

On Android we have deliberately deferred that connection. The purchasing system stays completely dormant when the app starts. It is only switched on once a grown-up has passed the parental gate and actually opened the tip jar. Until that moment, the app makes no network connection at all. If nobody in your household ever opens the tip jar, nothing ever leaves your device.

Information processed by Google and Unity

Because the app includes in-app purchasing, Google Play and Unity's purchasing software process certain categories of information. We list all of them here, including categories we never see ourselves, so that this policy matches the Data safety disclosures we have filed with Google Play.

Read this table as: someone processes this, and in almost every row that someone is not us.

None of these categories is shared onward by us with anyone, because none of them reaches us in the first place.

Crash logs, diagnostics and performance data are collected by Android and Google Play at platform level, according to the diagnostic sharing preference in your device settings. The app contains no crash reporting software of its own, and we receive no crash reports.

The companies involved

Two companies play a part in delivering the app on Android. Each is independently responsible for the information it processes, under its own privacy policy:

• Google LLC — distributes the app on Google Play and processes purchases. policies.google.com/privacy
• Unity Technologies — provides the game engine and the in-app purchasing software. unity.com/legal/privacy-policy

We use no other third-party services. There is no advertising network, no analytics provider, no cloud database and no customer-tracking tool involved in this app.

Our legal basis for processing (GDPR and UK GDPR)

Where the GDPR or UK GDPR applies, we rely on the following:

• Performance of a contract. When a grown-up chooses to leave a tip, processing the purchase is necessary to complete the transaction they asked for.
• Legitimate interests. Saving your reading and narration preferences on your own device lets the app work as you expect. This is a minimal interest, and no data leaves your device.

We do not rely on consent, because the app performs no analytics, advertising or tracking that would require it. There is nothing here to opt in or out of.

Where information is processed

Hello Bard AS is based in Norway and processes nothing outside your device.

Google and Unity are international companies and process information relating to purchases in the United States and elsewhere. Those transfers are governed by each company's own safeguards, including the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework, as described in their privacy policies linked above.

How long information is kept

• Information on your device stays until you delete it or uninstall the app, whichever comes first. Uninstalling removes all of it.
• Purchase records are kept by Google under its own retention policy, so that you can see your purchase history and request refunds. We have no copy to delete.
• We hold no personal data, so there is nothing on our side to retain or erase.
• Support emails. If you write to us, we keep your message for as long as needed to answer it and to keep a record of the issue, and no longer than two years.

Your rights

If you are in the European Economic Area, the United Kingdom, or another region with similar law, you have the right to request access to your personal data, to have it corrected or erased, to restrict or object to how it is used, and to receive a copy in a portable format.

We want to be straightforward about what these rights mean here: because we hold no personal data about you, there is in practice nothing for us to give you, correct or delete. If you would like us to confirm that in writing, or if you have any question at all about this policy, please write to support@hellobard.com. We will respond within 30 days.

For data held by Google Play, please contact Google directly, as it is the controller for that information.

Complaints

If you are unhappy with how we have handled your personal data, you may complain to your local data protection authority. Ours is the Norwegian Data Protection Authority:

For residents of California

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have never done so. We do not collect the categories of personal information listed in the California Consumer Privacy Act, and we do not use or disclose sensitive personal information.

Children's data receives the protections described throughout this policy, and we have no mechanism to identify a user by age, name or contact details.

Security

Because the app keeps information on your device and sends nothing to us, the main protection for your data is your device itself. We recommend keeping your device locked and Android up to date.

Where the app does communicate — only for in-app purchasing — that connection is encrypted by Google Play services and the operating system. No method of transmission or storage is completely secure, but the absence of any collected data means there is very little here to expose.

Google Play family programmes

Jack & Joe World is designed to meet the requirements of the Google Play Families Policy and the Designed for Families programme. The app contains no advertising, does not request the advertising identifier, collects no personal or sensitive information from children, contains no links out of the app, and places all purchases behind a parental gate.

Changes to this policy

If we change how the app handles information, we will update this policy, change the effective date at the top, and update the copy shown inside the app. If a change is significant, we will make it clear in the app rather than relying on you to check this page.

Older versions of the app that are still installed continue to be covered by the policy in force when they were released.

Contact us

Questions, concerns, or requests about privacy:

We read everything and we will always answer a privacy question from a parent.