Android privacy

Who is responsible?

TinyFingers is published by Sharp-Mind SRL, Belgium, company number 0719.287.068, VAT BE0719287068. For questions about your data, contact contact@tinyfingers.net.

Play without a TinyFingers account

The app does not ask for a TinyFingers account, a child profile, or a child’s name or date of birth. The games have no advertising, player messaging or public profiles. The app does not include GA4, advertising pixels or a TinyFingers tracking identifier.

Information stored on your device

Sound, language, appearance and game preferences are saved locally. Some activities let you keep a creation in a local notebook. This information is not sent to a TinyFingers server or synced between devices. It remains on the device until it is deleted in the game, you clear the app’s data or you uninstall the app. Unsaved drawings may be lost when you leave an activity.

The app does not access your contacts, location, microphone or camera. It does not send keystrokes, drawings or gameplay gestures to a TinyFingers analytics service.

Google Play purchases and subscriptions

Google Play handles purchases through your Google account and payment method. TinyFingers does not receive your full payment card details or Google password.

The app receives the transaction information needed for access and sends the Google purchase token to our verification service over an encrypted connection. The service checks the subscription product, status and expiry with Google. The token and its hash identify a transaction; they do not create a TinyFingers account and are not used to track a child.

The service stores the encrypted token, its hash, a hash of the last paid order, the plan, subscription status, dates needed for verification and whether the purchase is a real or test purchase. This verification database does not retain the full Google response, your name, email address, order number or a device identifier.

To limit offline access, it reads only the fields needed to confirm the period covered by the last successfully paid order. The order number is used for this check but is not retained in plain text in this database.

This processing is necessary to fulfil your subscription: it grants and restores access and checks renewals, expiry and refunds. Google may notify our service when a subscription changes. No gameplay events, drawings, keystrokes or child profiles are sent with these checks.

A signed authorisation is stored encrypted on the device, without automatic backup, so you can play offline for up to 30 days within your confirmed paid period. It is removed when the app’s data is deleted. Reinstalling requires a new online restore.

Sharp-Mind can consult the orders and subscription statuses available to publishers in Google Play Console to handle billing questions, support requests or refunds. Google’s processing of account data, payments and data from its own services is also governed by its policies: https://policies.google.com/privacy?hl=en

Verification service retention and security

Verification records are kept while the subscription is being monitored, then deleted in the daily cleanup after 60 days have passed since final expiry or confirmed termination. Encrypted backups may retain them for a further 14 days before rotation. These periods apply to our verification service; billing records and data held directly by Google follow their own rules.

The service receives the IP address needed for the connection and temporarily keeps it in memory to limit abuse; it is not stored in the subscription database. It does not use it to locate a child or build a profile. Service logs contain operational codes but no purchase tokens, access authorisations or IP addresses. Their storage volume is limited, and older entries are automatically replaced. Infrastructure error logs may contain connection information needed for diagnosis. These security measures are based on our legitimate interest in protecting the service and subscriptions.

The service is hosted for Sharp-Mind on an OVHcloud VPS. Hosting, backups and Google notifications are technical processing separate from the games. They do not sync drawings or preferences.

Access for app review

If you use the access code supplied to Google Play’s review team, the app sends it to our service over an encrypted connection, together with a random value for that request. The service compares a hash of the code with the authorised value; it does not retain the received code, create an account or simulate a purchase. The IP address is temporarily processed in memory to limit abusive attempts. A signed authorisation lasting no more than 24 hours is stored encrypted on the device, outside backups. It can be removed in Parents or renewed by entering the code again while that code remains authorised. This processing provides access for app review and protects that access, in Sharp-Mind’s legitimate interest.

Technical information

The app uses Android System WebView to display the bundled games and the Google Play Billing library for subscriptions. Google Play Billing includes diagnostics about the use of its payment functions, successes or failures and connection issues to improve payment reliability. Google’s own processing is also governed by its privacy policy. This is not a TinyFingers gameplay tracking or targeted advertising system. Any local TinyFingers payment diagnostic logs contain technical stages and result codes, without purchase tokens or account details.

From the Parents menu, before starting a game, you can run a check using Google Play Age Signals. Depending on your Google settings and applicable rules, Google Play may ask you to share an age range or complete a check in Google Play or Family Link. TinyFingers temporarily processes the result, any shared age range and approval status on your device, solely to handle the age checks applicable to the app. This information is not stored permanently, sent to our server or linked to your purchases. We do not ask for a date of birth or use the installation identifier provided by this API. An age range that is not shared or is unavailable never means the user is an adult; the content of each game stays the same and remains suitable for children. If Google reports that verification is required or parental approval is pending or declined, TinyFingers asks you to resolve this in Google Play before starting another game. This check does not run during a game. Google Play carries out its own processing under Google’s policies.

When you contact support

We receive your email address, message, purchase references and any attachments you choose to send. We use them to understand your request and respond, to fulfil your subscription when relevant, or for general enquiries in our legitimate interest in providing support. Sharp-Mind uses Microsoft Exchange for email. The person responsible for support at Sharp-Mind can access this correspondence, as can Microsoft to provide the email service. Our retention period is 24 months after the enquiry is resolved. Sharp-Mind manages this retention manually; we do not state that messages are automatically deleted when the period ends. Material needed to meet a legal obligation or handle a dispute may be kept separately for the relevant period. Please do not send personal information about your child, passwords or payment card numbers.

Requests about your data

You can email contact@tinyfingers.net to ask for access to, correction or deletion of the data Sharp-Mind holds about you. You can also exercise other rights that apply to your situation, including restriction, objection and portability. We may request the information strictly needed to verify your request. Some data may need to be retained to meet a legal obligation or handle a dispute.

For local data, use the game’s controls or clear the app’s data to remove information stored on your device. This does not cancel a subscription. For your Google account and data held directly by Google, also use Google’s settings and tools.

You can raise a complaint with a supervisory authority, including the Belgian Data Protection Authority: https://www.autoriteprotectiondonnees.be/citoyen/agir/introduire-une-plainte

The app and the website

This policy describes the TinyFingers Android app. The tinyfingers.net website has a separate policy because it includes advertising and audience measurement. Choosing to open a web link takes you outside the bundled games and may lead to a service governed by its own policies.