Privacy policy

1 · Who we are

Little Learners is published by BytesFort, registered at 1st Floor, Gourmet Bakers, 25-A Main Blvd, near Hardees, Batala Colony Faisalabad. We are the data controller for the information described here. This policy covers the Little Learners app on iOS and Android and this website. It does not cover the App Store or Google Play themselves, which have their own policies. This policy is governed by the law of Pakistan.

2 · What we collect

Everything the app holds is listed below. Nothing else is collected, and nothing here is optional beyond what the table says. Information is collected only when you or your child actively use a feature that needs it — we do not collect or process data in the background without user action.

3 · Children's privacy

The app is intended for children under 13 and is built to meet COPPA, the GDPR's provisions on children's data and the ICO Age Appropriate Design Code. In practice that means six commitments:

• Only a parent can set things up. Accounts, profiles, purchases and settings all sit behind a parent gate a young child cannot pass.
• We collect only what the games need. A first name and an age band is the whole of it. No surname, no birthday, no school.
• Nothing a child enters is ever public. Names, photos and progress are visible only inside your own app.
• No chat, no messaging, no social login. There is no way for anyone to contact your child through the app.
• No behavioural advertising or profiling. We never use a child's data to target anything, and we do not sell or share it for advertising.
• You can review or delete everything, whenever you like. Parent Zone → Privacy & data, or the deletion page.

If you believe a child has given us information without your consent, email company@bytesfort.com and we will delete it.

4 · How we use information

Information is used solely to:

• Provide the games and save progress
• Keep your account and subscription working
• Honour your screen-timer choices
• Reply when you contact us
• Fix crashes you have opted to report
• Meet our legal and tax obligations

We do not sell, rent, or trade personal information to third parties. We do not use any of it to build advertising profiles or to train AI models. Our legal bases under the GDPR are: performance of a contract with you (running the app and your subscription), your consent (optional crash reports and any photo you upload), legitimate interests (keeping the service secure), and legal obligation (financial records). Where we rely on consent, you can withdraw it at any time in Parent Zone → Privacy & data.

5 · Who we share it with

We do not sell personal data and we never share children's data for advertising. Information may be shared only with trusted service providers when necessary to run the app. Each is contractually bound to use the data only on our instructions and is expected to maintain privacy and security protections equal to or greater than industry-standard practices.

We may also disclose information if the law requires it, or to a buyer if the business is ever sold — in which case this policy continues to apply and we will tell you before anything changes.

6 · Photos and the camera

A profile photo is entirely optional — most families use one of the drawn avatars instead. If you choose a photo, the app asks the system for one-off access to that single image; it never browses or scans your library, and it does not request camera access at all. The image is stored in the app's private storage on the device and is not uploaded to us, backed up to our servers, or included in crash reports. Removing it in Parent Zone → Children deletes the file immediately.

7 · Advertising and tracking

There is no advertising in Little Learners — no banners, no interstitials, no rewarded video, no cross-promotion. There are no ad networks, no analytics SDKs, no social media SDKs and no tracking pixels in the app. We do not use advertising identifiers, we do not fingerprint devices, and there is nothing in the app that follows your child anywhere else.

This website sets no cookies and runs no analytics. Our host keeps standard server logs (IP address, page requested, timestamp) for 14 days for security purposes only.

8 · How long we keep it

• Profiles and progress — until you delete them, or until the account is inactive for 24 months, after which we delete them automatically.
• Support emails — 12 months from your last reply.
• Crash reports — 90 days.
• Billing and tax records — 6 years, because the law requires it. Held separately from your account and containing no child data.
• Encrypted backups — overwritten on a 90 day cycle after deletion.

9 · Your rights and choices

Depending on your jurisdiction, you may have certain rights regarding your information, including:

• The right to access the information we hold
• The right to request correction of inaccurate information
• The right to request deletion of information where applicable
• The right to restrict or object to a particular use
• The right to export your data in a portable format
• The right to withdraw consent for future processing

You can also withdraw consent for crash reporting or remove a profile photo at any time without contacting us. We respond within 30 days and never charge for a request. The fastest routes are Parent Zone → Privacy & data inside the app, or the account deletion page on this site. If you are unhappy with how we have handled a request, you may complain to the relevant data protection authority in your country.

10 · Security

We implement reasonable technical and organizational safeguards designed to protect user information. Data in transit is encrypted with HTTPS/TLS and data at rest is encrypted on our servers. Passwords are stored only as salted hashes. Access to production systems is limited to the people who need it, protected by multi-factor authentication, and logged. Third-party service providers used by our applications are expected to maintain security protections equal to or greater than industry-standard security practices. No system is perfect, so if a breach ever affects your data we will tell you and the relevant regulator within the timeframes the law requires.

11 · International transfers

Account data may be stored and processed on servers operated by our hosting and service providers, which can be located outside Pakistan. Where personal data is transferred internationally, we take appropriate steps so that it continues to be protected in line with this policy and applicable law.

12 · Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page and, where material, shown as a notice in the Parent Zone the next time you open the app. Where the law requires it we will ask for your consent again. We will never reduce your protections retroactively without telling you first.

13 · Contact us