Privacy

None of the apps asks a child to sign in, because none of them has accounts to sign into. None contains advertising or an advertising SDK. None tracks you across other apps or websites, and none builds a profile of your child. A child’s name, the photos you add, the recordings you make, and a child’s progress never leave the device they were made on.

What the apps do send is small, technical, and described plainly in each section below, so you can judge it rather than take our word for it.

The site itself collects nothing about you. There are no accounts, no forms, and nothing to sign up for, so there is nothing for us to store. It sets no cookies and runs no analytics — no pixels, no fingerprinting, no third-party scripts loading in the background. Nothing here follows you to another site, and nothing from another site follows you here.

The one exception is worth being plain about. The server that delivers this site keeps ordinary web-server logs: the IP address making the request, the browser’s user-agent string, the page requested, and the time it was requested.

These logs exist to keep the site running and to spot abuse. They are not used to build a profile of you, they are not combined with anything else, and they are never sold or shared. An IP address counts as personal data, which is why it is mentioned here rather than rounded down to “we collect nothing at all”.

When you first open Visual Cards it asks for your child’s first name and rough age. The name is used only to greet them on screen. It is stored on the device and never sent anywhere — not to us, not to anyone else. The age is kept as a broad band, which is what decides which cards are shown.

The app lets you build your own cards from photos and your own voice. Those photos and recordings are written to the app’s storage on the device and are never uploaded. They exist on that device only; if you delete the app, they go with it.

Visual Cards contains no analytics. The app does not send usage events to us or to any analytics service, and nothing records which cards a child looked at or for how long.

Visual Cards does register the device with us, and it does so whether or not you allow notifications — if you decline, the record is written with no notification address and a note that notifications are off. That record is described under What a device record contains below.

Stories sends nothing about your device unless you turn notifications on. Until that toggle is switched, no identifier is created, no notification address is requested, and no device record is written. Turn the toggle back off and the notification address is deleted.

Stories contains no analytics of any kind. Where you are in a story, which stories have been read, the bedtime window, and the daily time limit are all kept on the device and are not sent to us. There is no per-child profile in the app to send.

If you do turn notifications on, the device record described below is written, along with the bedtime window and daily limit — those two because a reminder that ignores them would be worse than no reminder.

Clever Owl (on the App Store as Clever Owl Toddler Learning) is a learning game for iPhone and iPad, made for children of about 18 months to 3 years and played by the child. The screens meant for a grown-up — settings, notifications, and the subscription — sit behind a simple sum that a toddler cannot answer.

The app has no accounts. Your child’s progress and the app’s settings are kept on the device and are never sent to us. Clever Owl contains no analytics, no advertising, and no tracking, and nothing it sends is about your child.

Nothing is sent until the first-run welcome is finished. After that, once per launch and again whenever one of its values changes, Clever Owl sends a short device report to our own backend (a hosted database in the European Union, in Frankfurt), whether or not notifications are allowed. The report contains exactly these things and nothing else: a random identifier created when the app is installed (32 random characters, never your advertising ID or any identifier from the operating system, and not included in device backups); the platform and OS version; the device model and manufacturer; the app version and build number; the app’s language, the device’s region, and the time zone; whether the first-run welcome has been finished; whether Clever Owl Plus is active and, if so, whether it is the monthly or yearly plan; how many times the app has been opened; whether notifications are allowed; and, only if you allow notifications, the notification address described below.

Once the welcome is finished, Clever Owl asks once whether it may send notifications. If you allow them, Firebase Cloud Messaging (a Google service) issues a notification address for the device, and the app includes it in the device report. Notifications are for grown-ups: occasional updates about the app, never promotions or offers to buy. You can turn them off at any time in the device’s Settings.

We use the device report to send those notifications and to know which versions and devices are in use. It is not sold, not shared for advertising, and not combined with anything else. A device record is deleted 12 months after the device last reported to us, so deleting the app means its record is gone within a year; if you would like it removed sooner, email us and we will delete it.

Hello Phone is a toy phone for iPhone and iPad, made for children of about 1½ to 3½.

The app has no accounts. Hello Phone contains no analytics, no advertising, and no tracking, and nothing it sends is about your child.

Hello Phone sends a short device report to our own backend, the same hosted database in the European Union (in Frankfurt) that Clever Owl uses. The report contains exactly these things and nothing else: a random identifier created when the app is installed (32 random characters, never your advertising ID or any identifier from the operating system); the platform and OS version; the device model and manufacturer; the app version and build number; the app’s language, the device’s region, and the time zone; whether the first-run welcome has been finished; whether Hello Phone Plus is active and, if so, whether it is the monthly or yearly plan; how many times the app has been opened; whether notifications are allowed; and, only if you allow notifications, the notification address described below.

If you allow notifications, Firebase Cloud Messaging (a Google service) issues a notification address for the device, and the app includes it in the device report. You can turn notifications off at any time in the device’s Settings.

We use the device report to send those notifications and to know which versions and devices are in use. It is not sold, not shared for advertising, and not combined with anything else. If you would like a device’s record removed, email us and we will delete it.

Toddler Tap (on the App Store as Toddler Tap Learning) is a touch-and-discover game for iPhone, iPad and Android, made for children of about 1 to 4 years. The screens meant for a grown-up — settings, notifications, and the subscription — sit behind a simple sum that a toddler cannot answer.

The app has no accounts. Your child’s progress and the app’s settings are kept on the device and are never sent to us. Toddler Tap contains no analytics, no advertising, and no tracking, and nothing it sends is about your child.

Nothing is sent until the first-run welcome is finished. After that, once per launch and again whenever one of its values changes, Toddler Tap sends a short device report to our own backend, the same hosted database in the European Union (in Frankfurt) that Clever Owl and Hello Phone use, whether or not notifications are allowed. The report contains exactly these things and nothing else: a random identifier created when the app is installed (32 random characters, never your advertising ID or any identifier from the operating system, and not included in device backups); the platform and OS version; the device model and manufacturer; the app version and build number; the app’s language, the device’s region, and the time zone; whether the first-run welcome has been finished; whether Toddler Tap Plus is active and, if so, whether it is the monthly or yearly plan; how many times the app has been opened; whether notifications are allowed; and, only if you allow notifications, the notification address described below.

Once the welcome is finished, Toddler Tap asks once whether it may send notifications. If you allow them, Firebase Cloud Messaging (a Google service) issues a notification address for the device, and the app includes it in the device report. Notifications are for grown-ups: occasional updates about the app, never promotions or offers to buy. You can turn them off at any time in the device’s Settings.

Toddler Tap also fetches its settings and extra content packs from the same backend. Those requests are anonymous: they carry nothing about your child and do not include the device’s identifier.

We use the device report to send those notifications and to know which versions and devices are in use. It is not sold, not shared for advertising, and not combined with anything else. A device record is deleted 12 months after the device last reported to us, so deleting the app means its record is gone within a year; if you would like it removed sooner, email us and we will delete it.

Little Barn is an animal-care game for iPhone, iPad and Android, made for children of about 2 to 5 years.

The app has no accounts. Your child’s progress and the app’s settings are kept on the device and are never sent to us. Little Barn contains no analytics, no advertising, and no tracking, and nothing it sends is about your child.

Nothing is sent until the first-run welcome is finished. After that, once per launch and again whenever one of its values changes, Little Barn sends a short device report to our own backend, the same hosted database in the European Union (in Frankfurt) that Clever Owl, Hello Phone and Toddler Tap use, whether or not notifications are allowed. The report contains exactly these things and nothing else: a random identifier created when the app is installed (32 random characters, never your advertising ID or any identifier from the operating system, and not included in device backups); the platform and OS version; the device model and manufacturer; the app version and build number; the app’s language, the device’s region, and the time zone; whether the first-run welcome has been finished; whether Little Barn Plus is active and, if so, whether it is the monthly or yearly plan; how many times the app has been opened; whether notifications are allowed; and, only if you allow notifications, the notification address described below.

Once the welcome is finished, Little Barn asks once whether it may send notifications. If you allow them, Firebase Cloud Messaging (a Google service) issues a notification address for the device, and the app includes it in the device report. You can turn them off at any time in the device’s Settings.

We use the device report to send those notifications and to know which versions and devices are in use. It is not sold, not shared for advertising, and not combined with anything else. A device record is deleted 12 months after the device last reported to us, so deleting the app means its record is gone within a year; if you would like it removed sooner, email us and we will delete it.

Little Corner Shop is a pretend-shop game for iPhone, iPad and Android, made for children of about 2 to 5 years.

The app has no accounts. Your child’s progress and the app’s settings are kept on the device and are never sent to us. Little Corner Shop contains no analytics, no advertising, and no tracking, and nothing it sends is about your child.

Nothing is sent until the first-run welcome is finished. After that, once per launch and again whenever one of its values changes, Little Corner Shop sends a short device report to our own backend, the same hosted database in the European Union (in Frankfurt) that Clever Owl, Hello Phone, Toddler Tap and Little Barn use, whether or not notifications are allowed. The report contains exactly these things and nothing else: a random identifier created when the app is installed (32 random characters, never your advertising ID or any identifier from the operating system, and not included in device backups); the platform and OS version; the device model and manufacturer; the app version and build number; the app’s language, the device’s region, and the time zone; whether the first-run welcome has been finished; whether Little Corner Shop Plus is active and, if so, whether it is the monthly or yearly plan; how many times the app has been opened; whether notifications are allowed; and, only if you allow notifications, the notification address described below. Little Corner Shop sends no age band.

Once the welcome is finished, Little Corner Shop asks once whether it may send notifications. If you allow them, Firebase Cloud Messaging (a Google service) issues a notification address for the device, and the app includes it in the device report. Notifications are for grown-ups: occasional updates about the app, never promotions or offers to buy. You can turn them off at any time in the device’s Settings.

We use the device report to send those notifications and to know which versions and devices are in use. It is not sold, not shared for advertising, and not combined with anything else. A device record is kept for at most a year after the device last reported to us, then deleted. It carries no name, so we cannot find one device’s record on request.

Little Cook is a toy-kitchen game for iPhone, iPad and Android, made for children of about 2 to 5 years. The screens meant for a grown-up — settings, notifications, and the subscription — sit behind a simple sum that a toddler cannot answer.

The app has no accounts. Your child’s progress and the app’s settings are kept on the device and are never sent to us. Little Cook contains no analytics, no advertising, and no tracking, and nothing it sends is about your child.

Nothing is sent until the first-run welcome is finished. After that, once per launch and again whenever one of its values changes, Little Cook sends a short device report to our own backend, the same hosted database in the European Union (in Frankfurt) that Clever Owl, Hello Phone, Toddler Tap, Little Barn and Little Corner Shop use, whether or not notifications are allowed. The report contains exactly these things and nothing else: a random identifier created when the app is installed (32 random characters, never your advertising ID or any identifier from the operating system, and not included in device backups); the platform and OS version; the device model and manufacturer; the app version and build number; the app’s language, the device’s region, and the time zone; whether the first-run welcome has been finished; whether Little Cook Plus is active and, if so, whether it is the monthly or yearly plan; how many times the app has been opened; whether notifications are allowed; and, only if you allow notifications, the notification address described below. Little Cook sends no age band.

Once the welcome is finished, Little Cook asks once whether it may send notifications. If you allow them, Firebase Cloud Messaging (a Google service) issues a notification address for the device, and the app includes it in the device report. You can turn them off at any time in the device’s Settings.

We use the device report to send those notifications and to know which versions and devices are in use. It is not sold, not shared for advertising, and not combined with anything else. A device record is deleted 12 months after the device last reported to us, so deleting the app means its record is gone within a year; if you would like it removed sooner, email us and we will delete it.

Huroof (on the App Store as Montessori Huroof) is an Arabic-letters tracing app for iPhone, iPad and Android, made for children of about 2 to 6 years, in Arabic and English. The screens meant for a grown-up — settings, notifications, and the subscription — sit behind a simple sum that a toddler cannot answer.

The app has no accounts. Your child’s progress and the app’s settings are kept on the device and are never sent to us. Huroof contains no analytics, no advertising, and no tracking, and nothing it sends is about your child.

Nothing is sent until the first-run welcome is finished. After that, once per launch and again whenever one of its values changes, Huroof sends a short device report to our own backend, the same hosted database in the European Union (in Frankfurt) that Clever Owl, Hello Phone, Toddler Tap, Little Barn, Little Corner Shop and Little Cook use, whether or not notifications are allowed. The report contains exactly these things and nothing else: a random identifier created when the app is installed (32 random characters, never your advertising ID or any identifier from the operating system, and not included in device backups); the platform and OS version; the device model and manufacturer; the app version and build number; the app’s language, the device’s region, and the time zone; whether the first-run welcome has been finished; whether Huroof Plus is active and, if so, whether it is the monthly or yearly plan; how many times the app has been opened; whether notifications are allowed; and, only if you allow notifications, the notification address described below. Huroof sends no age band.

Once the welcome is finished, Huroof asks once whether it may send notifications. If you allow them, Firebase Cloud Messaging (a Google service) issues a notification address for the device, and the app includes it in the device report. Notifications are for grown-ups: occasional updates about the app, never promotions or offers to buy. You can turn them off at any time in the device’s Settings.

Huroof also fetches its settings and extra content packs from the same backend. Those requests are anonymous: they carry nothing about your child and do not include the device’s identifier.

We use the device report to send those notifications and to know which versions and devices are in use. It is not sold, not shared for advertising, and not combined with anything else. A device record is deleted 12 months after the device last reported to us, so deleting the app means its record is gone within a year; if you would like it removed sooner, email us and we will delete it.

This section describes the device records of Visual Cards and Stories; Clever Owl’s, Hello Phone’s, Toddler Tap’s, Little Barn’s, Little Corner Shop’s, Little Cook’s and Huroof’s are described in their own sections above. A device record is about a device and its settings, not about a child. It holds a random identifier created when the app is installed (not your advertising ID and not anything that identifies you), the notification address if you have allowed notifications, the platform and OS version, the device model and manufacturer, the app version and build number, the language, region, and time zone, whether notifications are on, whether a paid plan is active, the age band you chose, and how many times the app has been opened.

It is used to send the handful of notifications the app sends and to know which builds are in use. It is not sold, not shared for advertising, and not combined with anything else. Deleting the app leaves the record stranded and unused. For Visual Cards and Stories and the other apps above, if you would like it removed outright, email us and we will delete it. Little Corner Shop keeps no name with a device record, so we cannot find one device’s record on request: Little Corner Shop’s is deleted at most a year after the device last reported to us.

Visual Cards and Stories ship their content inside the app and check for updated content over the network. That check is an ordinary request and carries nothing about your child with it. As with any server, the server answering it sees the IP address the request came from. The content of Clever Owl and Little Cook is all inside the apps, so they make no such check. The servers that receive the device reports of Clever Owl, Hello Phone, Toddler Tap, Little Barn, Little Corner Shop, Little Cook and Huroof likewise see the IP address a report came from, but that address is not stored in the device record. Toddler Tap and Huroof also fetch their settings and content packs from our backend; those requests are anonymous and carry nothing about your child.

Little Corner Shop also reads one short notice and a minimum app version from our backend once per launch. That request is anonymous, carries no identifier, and nothing about your child.

Paid features are sold through the App Store and Google Play. Payment is handled entirely by Apple or Google — we never see your card, your billing address, or your store account. What reaches the app is the answer to one question: whether a purchase is currently active. The store’s own purchase software inside an app (StoreKit on iOS, Google Play Billing on Android) talks to Apple or Google directly, and may send them purchase and diagnostic data under their own privacy policies.

Clever Owl Plus, Hello Phone Plus, Toddler Tap Plus, Little Barn Plus, Little Corner Shop Plus, Little Cook Plus and Huroof Plus are subscriptions, each with a monthly and a yearly plan. For those bought through Apple, Apple sends our backend notices about them — for example that it started, renewed, or was cancelled, with the plan and the dates. Those notices identify the purchase by Apple’s transaction number, not by your name, email, or Apple ID, and we keep them as our record of sales.

These apps are made for children, so the limits are deliberate rather than incidental. There is no advertising and no advertising SDK. There is no behavioural tracking and no cross-app or cross-site tracking. We do not knowingly collect personal information from a child: the one piece a child might type, their first name in Visual Cards, is kept on the device and never transmitted.

If you believe a child has somehow provided us with personal information, email us and we will delete it. A device record of Little Corner Shop carries no name, so it cannot be found on request; it is deleted when it expires, as described above.

Apple and Google handle app distribution, purchases, and the delivery of notifications, under their own privacy policies; for Clever Owl, Hello Phone, Toddler Tap, Little Barn, Little Corner Shop, Little Cook and Huroof, notification addresses come from Firebase Cloud Messaging, a Google service. We use hosted databases to store device records and serve content updates; Clever Owl’s, Hello Phone’s, Toddler Tap’s, Little Barn’s, Little Corner Shop’s, Little Cook’s and Huroof’s are kept with Supabase in the European Union. Nobody else receives any of it, and none of it is sold or used for advertising by us.

You can ask what we hold about a device, ask for it to be deleted, or ask us to stop using it, except for the device record of Little Corner Shop: it carries no name, so we cannot find one device’s record on request, and it is deleted when it expires. Because there are no accounts, the simplest way to stop all of it at once is to turn notifications off and delete the app. For anything more, email us — we would rather answer a question than have you guess.

This site links to Casa Montessori at casa.lanse.io. That is a separate site with its own privacy policy, and this one stops applying the moment you follow the link.

If this policy changes, the date at the top of the page changes with it.

Questions about privacy can go to hello@lanse.io.