1.Who this policy covers
HeeHee is designed for parents and guardians. The adult creates the account, sets up their child's profile, chooses the missions and rewards, and marks missions complete. A child never logs in, never enters their own data, and is not shown advertising.
Because the app involves information about a child, we hold ourselves to children's-privacy standards including the U.S. Children's Online Privacy Protection Act (COPPA) and, where it applies, the EU/UK General Data Protection Regulation provisions for children (GDPR-K). We collect the minimum needed to make the app work, and nothing more.
2.Information we collect
Information about the parent or guardian
- Account details — when you sign in with Apple or Google, we receive your name and email address from that provider. If you use Sign in with Apple's "Hide My Email," we only ever see a private relay address. We use this to identify your account and contact you about the service.
- Subscription and purchase information — if you subscribe, the purchase is processed by Apple or Google and by our payment provider (RevenueCat). We receive confirmation of your subscription status and a purchase identifier. We never see or store your card number, bank details, or full payment information — those stay with the app store and are handled under their own policies.
- Device and usage information — basic, non-identifying analytics such as which screens are used, whether a purchase completed, and crash or error reports, so we can fix problems and improve the app. This is tied to a random account identifier, never to a child's name.
Information about the child (entered by the parent)
When you set up a child in the app, you provide, and we store:
- The child's first name (or a nickname — it's a free text field you control)
- An age range (a broad band, not a date of birth)
- A chosen character or "buddy" (an in-app illustration, not a photo)
- The child's activity in the app — the missions you create, which ones are marked complete, and the coins/points earned and spent
3.How we use information
- To provide the core app — saving your child's missions, coins, streaks and rewards so they are there when you reopen the app and are not lost if you change phones.
- To manage your account and your subscription, including free trials and renewals.
- To send reminders you choose to enable (for example, a nightly nudge to mark off missions). These are delivered as notifications on your own device; you can turn them off at any time in the app or in your phone's settings.
- To keep the app working — diagnosing crashes, fixing bugs, and understanding which features are used, using aggregated and de-identified analytics.
- To protect the service against fraud, abuse, and security threats, and to meet our legal obligations.
We do not sell your information. We do not use a child's information to advertise to them or to anyone else. We do not build advertising profiles.
4.How information is stored and shared
Your family's data is stored on secure servers we operate, so that it is available across your devices and preserved if your phone is lost or replaced. We share information only with the service providers that make the app function, and only to the extent they need it:
| Provider | Purpose | What they receive |
|---|---|---|
| Apple & Google | Sign-in and subscription billing | Your account identity and purchase records (parent only) |
| RevenueCat | Manages your subscription status | A parent account identifier and subscription state; parent name/email may be attached. No child data. |
| Analytics & error reporting (PostHog) | Diagnose crashes and improve the app | A random parent identifier plus app-usage events. Configured so a child's name cannot be sent. |
| Cloud hosting | Runs our servers and stores your data | Encrypted application data at rest and in transit |
These providers act on our behalf and are not permitted to use your family's information for their own purposes. We may also disclose information if required by law, to protect the rights and safety of our users, or as part of a business transfer (in which case this policy continues to apply to the transferred data).
5.Children's privacy (COPPA & GDPR-K)
HeeHee is a parenting tool used by an adult. A child does not create an account or interact with the app directly. The parent or guardian provides the limited information about their child described in Section 2, and by doing so consents to us storing it to run the app for their family.
- We collect only the minimal child information needed for the app to work.
- We never require a child to disclose more than is reasonably necessary.
- We do not condition a child's participation on disclosing more information than needed.
- A parent can review, edit, or delete their child's information at any time from within the app.
If you believe we have collected information from or about a child in a way that does not comply with this policy or applicable law, contact us using the details below and we will address it promptly.
6.Your rights and choices
You are in control of your family's data:
- Access and correction — view and edit your child's name, age range, buddy, missions and rewards directly in the app.
- Deletion — you can delete your entire account from inside the app (in the "More" section). This permanently erases your family's profiles, missions, rewards, activity history and account, on our servers, in one step.
- Notifications — turn reminders on or off at any time.
- Regional rights — depending on where you live (for example, under GDPR in the EU/UK, or under U.S. state privacy laws such as the CCPA in California), you may have additional rights to access, correct, delete, or port your data, and to object to certain processing. We honor these rights for all users; contact us to exercise them.
7.Data retention
We keep your family's information for as long as your account is active. When you delete your account, the associated data is erased from our systems. We may retain limited records where the law requires it (for example, transaction records for tax purposes), and de-identified, aggregated analytics that can no longer be linked to you may be retained to understand overall app usage.
8.Security
We protect your information with industry-standard safeguards, including encryption in transit and at rest, access controls, and the principle of collecting as little as possible. No method of transmission or storage is ever completely secure, but we work to protect your family's data and to respond quickly if a problem arises.
9.International users
HeeHee is operated from the United States, and your information may be processed in the United States or other countries where we or our service providers operate. These countries may have data-protection laws different from those in your country. Where required, we take steps to ensure your information receives an adequate level of protection when it is transferred.
10.Changes to this policy
We may update this policy from time to time. When we make a material change, we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of HeeHee after an update means you accept the revised policy.
11.Contact us
If you have any questions about this policy or your family's information, or you'd like to exercise any of your rights, reach us at:
Spearmint LLC
Email: [email protected]
We aim to respond to privacy requests within 30 days.