Capyzeno

Privacy Policy

Numelody

Introduction

Thank you for using Numelody. Numelody is a local-first touch-screen music toy for children ages 4–8. We take children's privacy seriously, and this policy explains in plain language how we handle (and how we do not handle) your family's data.

Our core promise: Numelody is a local-first app - no accounts, no ads, no third-party tracking SDKs, no cloud sync, no microphone recording. Your child's profiles, settings, favorites, progress, activities, and artwork are all stored locally on your device. Children's content never leaves the device.

1. Information We Store

Numelody stores only the following information on your device:

  • Child profiles: Avatar, age group, optional nickname (up to 20 characters), and settings - stored only on this device
  • Progress and artwork: Completed song records, free-play captures (up to 60 seconds of note events, no audio files) - stored only on this device
  • Additional song packs: Pack files downloaded by parents from HTTPS addresses, atomically installed after verification
  • App preferences: Sound, accessibility, and difficulty settings - stored in local system preferences

We never ask for accounts or real identities; we do not request microphone permission; we do not capture real instrument input. Deleting the app also deletes all of the above data.

2. Information We Do Not Collect

We explicitly state that we do not collect:

  • Children's real names, birthdates, email addresses, phone numbers, or any identifying information
  • Children's location data
  • Microphone recordings, audio samples, or performance audio
  • Device identifiers, advertising identifiers (IDFA), or tracking fingerprints
  • Uploads of children's artwork, favorites, progress, or performance events
  • User behavior logs, usage statistics, or performance analytics

3. Children's Privacy (COPPA)

Numelody is designed for children ages 4–8. We handle data according to the strictest children's privacy principles, in line with the spirit of the U.S. Children's Online Privacy Protection Act (COPPA):

  • We do not collect any personal information from children
  • We do not display third-party advertising
  • We do not integrate any third-party advertising, tracking, or analytics SDKs
  • We do not offer open chat, community features, or communication with strangers
  • We do not request the microphone, do not record, and do not publicly share children's artwork
  • Any action that could move data off the device requires a parent to pass the grown-ups-only gate first

4. Parent Gate Coverage

The following actions require the parent gate (adult verification) to access:

  • Purchasing the full version (subscription or lifetime)
  • Restoring purchases and managing subscriptions
  • Opening the privacy policy, terms of use, or external web pages
  • Downloading, repairing, or deleting additional song packs
  • Exporting the anonymous diagnostic file
  • Deleting child profiles, artwork, or all local data

Children using the app cannot reach any of these actions on their own.

5. Network Usage

Numelody is a local-first app; the vast majority of features work fully offline. Network is only required in these scenarios:

  • StoreKit purchases and restores: Full-version purchases, subscription verification, and entitlement restoration are handled by Apple - we never see your payment details
  • Additional song pack downloads: Parents proactively provide an HTTPS address + 64-bit SHA-256 + estimated size; the app verifies and atomically installs; download shows progress and supports pause, resume, and cancel

We have not integrated any third-party advertising, analytics, or tracking SDKs. Core play, play-along, free play, and music worlds are all available offline.

6. Anonymous Diagnostic File

Parents can generate an anonymous diagnostic file on the "About & Support" page for issue reporting. The file contains only: app and system versions, storage state, network category, audio route category, purchase status, and song pack health state. It does not contain nicknames, profile IDs, favorites, song progress, artwork, or performance events. The diagnostic file only leaves the device when a parent actively shares it.

7. Data Deletion

Parents can at any time, from "Data & Reset":

  • Clear the current child's progress
  • Restore the current child's default settings
  • Restart the first-time tutorial
  • Clear all profiles, progress, artwork, and additional song packs

Deletion requires a second confirmation. Once executed, it is immediate and irreversible. Deleting local data does not cancel or remove App Store purchase entitlements.

8. Data Security and Hearing Safety

Because data is stored locally on your device, data security depends on your device's own protections. We recommend:

  • Set a passcode or biometric lock on your device
  • Turn on "Guided Access" or similar parental controls for your child
  • Periodically check song pack health via the parent gate
  • Monitor device volume: Prolonged high volume may damage children's hearing; use age-appropriate volume-limited headphones or external speakers

9. Policy Updates

We may update this privacy policy from time to time. Updated policies will be published on this page with an updated "Last updated" date. No matter how the policy changes, our core promise to you stays the same: children's content never leaves your device.

10. Contact Us

If you have any questions or suggestions about this privacy policy, please contact us at:

Last Updated: 2026年7月19日