ToyJoy Box – Privacy Policy

Welcome to ToyJoy Box! We are Nishaan Tech, a small developer team (Nitin & Ishaan) dedicated to creating safe, joyful digital experiences for young children.

We take the privacy of children extremely seriously. This Privacy Policy explains in plain language how we handle information when your child uses ToyJoy Box. We have written this policy to comply with:

• Google Play Families Policy
• Children's Online Privacy Protection Act (COPPA) – United States
• General Data Protection Regulation (GDPR-K) – European Union
• California Consumer Privacy Act (CCPA) – California, USA

This Privacy Policy applies to all users of ToyJoy Box, which is specifically designed for children between the ages of 3 and 8 years.

The app should always be used under parental supervision for children under 13 years of age, in accordance with COPPA requirements. If you are a parent or guardian with questions or concerns, please contact us using the information in Section 14.

ToyJoy Box is designed with a privacy-first architecture. We do NOT collect any of the following:

• Names, email addresses, or any personally identifiable information (PII)
• Phone numbers, home addresses, or location/GPS data
• Photos or videos (photos taken in-app are stored only on your device — see Section 5)
• Contacts or social network information
• Advertising identifiers (Google GAID / Apple IDFA)
• Behavioural profiles or usage analytics
• Purchase history or financial information
• Device identifiers beyond anonymous crash reporting

ToyJoy Box stores toy information (names, categories, photos) exclusively on your child's device. This data:

• Never leaves the device
• Is never transmitted to our servers or any third-party servers
• Is only accessible within the app on that specific device
• Can be deleted at any time by clearing app data or uninstalling the app

Parents and guardians have full control over locally stored data through standard Android device management (Settings → Apps → ToyJoy Box → Clear Data).

5.1 Purpose

ToyJoy Box may request access to your device's camera and photo storage. These permissions are used solely to allow a child or parent to add a photo of a physical toy to the app (for example, photographing a toy car to add it to the digital toy box).

5.2 How We Use These Permissions

• Camera: Used only when the user actively taps "Add Photo" to take a new picture
• Storage / Gallery: Used only when the user taps "Choose from Gallery" to select an existing photo
• Photos are stored only on the device and are never uploaded, transmitted, or shared

5.3 Revoking Permissions

Permissions can be revoked at any time via Settings → Apps → ToyJoy Box → Permissions. Revoking camera or storage will simply disable the photo feature; all other app functionality continues normally.

6.1 What It Does

We use Google Firebase Crashlytics to improve the stability of ToyJoy Box. When the app crashes or encounters an error, Crashlytics automatically sends an anonymous technical report so we can identify and fix problems quickly.

6.2 What Crashlytics Collects

Crashlytics collects only anonymised, non-personal technical data:

• Type of crash or error
• Device model and Android OS version (e.g., "Android 13")
• App version number
• Stack trace (technical log of where the crash occurred)
• Timestamp of the crash

6.3 Google's Privacy Policy

Firebase Crashlytics is operated by Google. You can review their privacy practices at firebase.google.com/support/privacy.

ToyJoy Box contains NO advertisements of any kind. We do not:

• Display banner ads, interstitial ads, video ads, or sponsored content
• Use advertising SDKs (such as AdMob, Meta Audience Network, etc.)
• Share data with advertising networks or data brokers
• Track behaviour for ad-targeting purposes

ToyJoy Box does not offer in-app purchases, premium subscriptions, virtual currencies, or any commercial transactions. There is no mechanism for children to spend money inside the app.

9.1 COPPA (United States)

ToyJoy Box is directed at children under 13 years. We comply fully with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from any child. Because we collect no personal data at all, no parental consent mechanism is required. If you believe we have inadvertently collected information about your child, contact us immediately and we will delete it.

9.2 GDPR-K (European Union / EEA)

Under the GDPR, children's personal data is entitled to special protection. We comply by collecting no personal data from children. Our use of Firebase Crashlytics is based on legitimate interests (ensuring app stability) and is limited to fully anonymised technical data that cannot be linked to any individual.

9.3 Parental Rights

As a parent or guardian, you have the right to:

• Review any personal data we hold about your child (we hold none)
• Request deletion of any data related to your child
• Withdraw consent at any time (consent is not required as we collect no data)
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at nitinsameer@gmail.com.

Although ToyJoy Box does not collect personal data, we take the security of locally stored toy data seriously. Data is protected by your device's own security mechanisms. We recommend:

• Keeping your Android device updated with the latest security patches
• Using a screen lock (PIN, pattern, or biometric) on your device
• Ensuring your child uses the app in a supervised environment

Since ToyJoy Box does not collect personal data, there is no data retained on our servers to delete. Locally stored toy data is retained on the device until:

• The user manually deletes individual toys within the app
• The parent clears app data via Settings → Apps → ToyJoy Box → Clear Data
• The app is uninstalled from the device

Crash reports sent via Crashlytics are retained per Google Firebase's own data retention policies: firebase.google.com/support/privacy.

ToyJoy Box does not contain links to external websites, social media platforms, or third-party applications. Children cannot navigate away from the app to any other website or service.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal compliance. When we make material changes, we will:

• Update the Effective Date shown at the top of this page
• Notify users via an in-app notice on the next app launch
• Update this page at nitinsameer.github.io/my-toy-box-privacy/

We encourage parents and guardians to review this policy periodically. Continued use of ToyJoy Box after any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the privacy practices of ToyJoy Box, please reach out: