The whole policy: we collect nothing.

Nothing. Toddler Mode has no analytics, no advertising SDKs, no crash reporters, no accounts, and no server of ours to send anything to. We never see your data, your photos, or even how many people use the app.

The iPhone app can display photos from your photo library in its kid-safe slideshow and gallery modes. The app reads and displays photos on your device only. It never uploads them, copies them off the device, or shares them. It contains no sharing, editing, or deleting functionality. You control which photos appear.

Camera play mode shows a live viewfinder for pretend photography. The camera session has no photo or video output attached. It cannot capture, save, or transmit anything.

If you choose to connect Google Photos, you sign in on Google's own page. The app never sees your password. You pick specific photos in Google's picker, and the app downloads those picks to your device for offline display. Tokens live in your device Keychain, and Disconnect removes them. You can delete every imported photo at any time. Nothing leaves your device again.

The optional parent PIN on iPhone and the unlock password on Mac live only in the device's encrypted Keychain. We never receive them.

Toddler Mode is a parent utility. A parent installs and configures it, then hands the device to their child inside a locked play session. The apps collect no personal information from anyone, child or adult.

If this policy ever changes, the update appears here with a new date. The apps are built to collect nothing, so don't expect news. Questions: hello@happyduckling.app.