Privacy policy

Last updated: August 3, 2026

This Privacy Policy explains how Playnook ("Playnook", "we", "us") handles information when you use the Playnook mobile app (on Android and iOS) and the website at playnook.app (together, the "Service"). Playnook is a tool for parents and carers to plan simple play activities with their child and keep a private record of how they went.

Playnook is operated by Rimas Hussain. Questions or privacy requests: hello@playnook.app.

In short.
· Almost nothing about your child leaves your phone. The child's profile, activity log, notes, and photos are stored only on your device — we can't see them, and they aren't uploaded to us.
· The one thing we collect is your account email, through Google Firebase Authentication, so you can log in and recover your account.
· We show no ads, and we never sell your personal data.
· Subscriptions are handled by the app stores (Google Play / Apple App Store) — we only learn whether your subscription is active, never your card details.
· Our website uses Google Analytics (cookies) to understand traffic.

1. Information we collect

a) Stored only on your device — not sent to us. When you use the app, the following is saved in the app's private on-device storage. It is not transmitted to Playnook or any server we control:
· Child profile: a name or nickname you choose, age range, interests, any diagnosis tags you optionally add, and skill focus.
· Activity log: which activities you did, duration, your rating, and your notes.
· Photos you take or attach within the app (profile picture and per-session photos).

b) Account information (via Google Firebase Authentication). To create and secure your account we use Firebase Authentication, a Google service. Depending on how you sign in, this processes your email address; authentication identifiers/tokens (and, for Google or Apple sign-in, the identifier those providers return); and technical data Firebase collects to secure sign-in, which can include your IP address, device/user-agent information, and sign-in timestamps.

c) Subscription information (if you subscribe). Paid subscriptions are processed by Google Play Billing (on Android) or the Apple App Store / StoreKit (on iOS). We receive only your subscription status (for example, active or expired) so we can unlock premium features. We do not receive or store your full payment-card details — the app store handles payment.

d) Website analytics. Our website (playnook.app) uses Google Analytics 4 (cookies) to understand how visitors find and use the site — for example page views, approximate location (country/region), device type, and referring source. This is aggregated usage data about the website; it has no access to anything inside the app.

e) What we do NOT collect. We do not use advertising SDKs, we do not track you across other apps or websites for advertising, we do not collect precise location, and we do not sell personal information.

2. How we use information

· To provide the app's features — planning activities, logging sessions, showing progress, generating reports (all computed on your device).
· To authenticate you and let you recover access to your account.
· To manage your subscription entitlement.
· To understand and improve our website (analytics).
· To comply with legal obligations and protect the Service against abuse.

3. Legal bases (UK/EU GDPR)

Where GDPR / UK GDPR applies, we rely on:
· Performance of a contract — to provide the app and your account, and to manage subscriptions you buy.
· Legitimate interests — to keep the Service secure and to understand website traffic in a privacy-light way (you can object; see your rights below).
· Consent — where required (for example, non-essential website cookies); you can withdraw consent at any time.
· Legal obligation — where we must retain or disclose information by law.

4. How we share information

We do not sell your personal data and do not share it for cross-context behavioural advertising. We share limited information only with:
· Service providers (processors) who run parts of the Service on our behalf: Google (Firebase Authentication, Google Play Billing, Google Analytics) and, on iOS, Apple (App Store / StoreKit). They process data under their own terms.
· Legal / safety — if required by law, regulation, or valid legal process, or to protect rights and safety.
· Business transfers — if Playnook is involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction (you'll be notified).

You may also choose to share your own data — for example by exporting a backup file or sending a progress report through your device's share sheet. Where that data goes is entirely your choice.

5. Third-party services

These providers may process data as described above. Their privacy policies apply:
· Google (Firebase, Analytics, Play) — policies.google.com/privacy
· Apple (App Store) — apple.com/legal/privacy

6. International data transfers

Our providers (Google, Apple) are global and may process information on servers outside your country, including the United States. Where required, such transfers are covered by appropriate safeguards (for example, the European Commission's Standard Contractual Clauses) implemented by those providers.

7. Data retention

· On-device data (profile, log, notes, photos) is kept until you delete it in the app (More → Data & privacy → Delete all data) or uninstall the app. On Android the app disables cloud backup, so an uninstall/reinstall starts from a clean slate; on iOS, deleting the app removes its data.
· Account data in Firebase Authentication is retained until the account is deleted; after deletion Google removes it from live and backup systems within roughly 180 days. Firebase retains sign-in IP logs for a short period (a few weeks) for security.
· Website analytics data is retained per our Google Analytics configuration.

8. Security

On-device data is stored in the app's private storage. Account authentication runs over encrypted connections and is handled by Google Firebase. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

9. Your privacy rights

Everyone: because most of your data lives on your device, you can view, change, export, or delete it directly in the app at any time.

UK/EU (GDPR): you have the right to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You may also lodge a complaint with your local data protection authority.

California (CCPA/CPRA): you have the right to know what personal information we collect, to delete it, to correct it, and to opt out of "sale" or "sharing." We do not sell or share personal information, and we honour Global Privacy Control (GPC) signals on our website. We will not discriminate against you for exercising your rights.

To exercise account-related rights (for example deleting your Firebase account), email hello@playnook.app. On-device data can be exported or erased directly in the app.

10. Children's privacy

Playnook is intended for parents and carers (adults). It is not directed to children, and we do not knowingly collect personal information directly from a child. Any information about a child is entered by the parent and stored privately on the parent's own device. If you believe a child has provided us personal information directly, contact us and we will delete it.

11. Cookies

Our website uses cookies for Google Analytics as described above. You can control cookies through your browser settings, and where required we ask for consent before non-essential cookies run.

12. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, provide a more prominent notice.

13. Contact

Playnook — Rimas Hussain — hello@playnook.app.