Privacy Policy
Last Updated: January 2025
1. Introduction
But Why? ("we," "our," or "us") is committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, and protect information when you use our mobile application ("App").
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, name (for account creation)
- Child Profiles: Child names and ages (stored locally on device)
- User Content: Questions, photos, and voice recordings you submit
2.2 Information We Collect Automatically
- Device Information: Device type, operating system, app version
- Usage Data: How you interact with the app, features used
- Performance Data: App crashes, loading times, error reports
2.3 Information from Third Parties
- Apple/Google Sign-In: If you choose to sign in with Apple or Google
- Payment Information: Processed securely by our payment processor (RevenueCat)
3. How We Use Your Information
3.1 Provide Our Services
- Process your questions and generate explanations
- Create personalized experiences based on child ages
- Maintain your account and subscription
3.2 Improve Our Services
- Analyze usage patterns to improve the app
- Debug and fix technical issues
- Develop new features
3.3 Legal Compliance
- Comply with applicable laws and regulations
- Protect against fraud and abuse
- Respond to legal requests
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- Service Providers: With trusted third parties who help us operate the app (payment processors, cloud hosting)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
5. Data Storage and Security
5.1 Where Your Data is Stored
- User Accounts: Encrypted in our secure database
- AI Processing: Questions are processed by OpenAI's servers (see OpenAI's privacy policy)
- Images: Stored temporarily for processing, then deleted
5.2 Data Retention
- Account Data: Retained while your account is active
- Usage Data: Anonymized and retained for up to 2 years
- Child Profiles: Stored locally on your device only
5.3 Data Security
- Industry-standard encryption for data in transit and at rest
- Regular security audits and updates
- Limited employee access to personal data
6. Children's Privacy
COPPA Compliance
We comply with the Children's Online Privacy Protection Act (COPPA):
- We do not collect personal information from children under 13 without parental consent
- Parents can review, modify, or delete their child's information
- We do not advertise to children under 13
Parental Controls
- All child profiles require parental account creation
- Parents control all data associated with their children
- Easy account deletion removes all associated data
7. Your Rights and Choices
7.1 Access and Control
- View Data: Access all data associated with your account
- Export Data: Download your data in a portable format
- Delete Data: Permanently delete your account and all data
- Correct Data: Update your account information
7.2 Communication Preferences
- Control marketing communications
- Opt out of non-essential emails
- Manage notification preferences
8. Third-Party Services
8.1 OpenAI
We use OpenAI's API to generate explanations. Their privacy policy applies to data processing for AI responses.
8.2 RevenueCat
Payment processing is handled by RevenueCat. Their privacy policy applies to payment data.
8.3 Analytics Services (Future)
We may use analytics services to understand app usage. These services collect anonymized data only.
9. International Data Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers.
10. Changes to This Privacy Policy
We may update this Privacy Policy with notice. We will notify you of material changes via:
- In-app notifications
- Email to your registered address
- Updates to our website
11. Contact Us
12. California Privacy Rights
California residents have additional rights under CCPA. Contact us to exercise these rights.
13. Data Protection Officer
For GDPR-related inquiries:
Data Protection Officer: dpo@explainthis.app