Privacy policy

Last updated: 22 October 2026

Short version

The Exploroo app collects no personal data and sends nothing to us. Lessons, progress, settings and the optional selfie stay on your own device. There are no ads, no tracking, no analytics and no accounts.

Who is responsible

Jörg Schmid, Aleksandar Tanev, 469A, Sofia, Bulgaria, [email protected]. We are the controller under the GDPR.

What stays on the device

Which lessons are done, the music on/off setting, and, if a parent allows it, a selfie used for the certificate. This is stored in the app only. If you delete the app or its data, it is gone. We have no copy and cannot restore it. The app is excluded from Android cloud backup.

Camera and microphone

The camera is used only if a parent allows the selfie. The microphone is used in the sound-check game so the child can say a sound; the sound is analysed on the device, may be played back once, and is not saved or sent. You can refuse either permission and the app still works.

Purchases

Payments are processed by Google. We receive from Google only the information that a subscription is active, not your card or bank details. Google’s privacy policy applies to that processing. Legal basis: performance of the contract (GDPR Art. 6(1)(b)).

Children

The app is made for children and is used under parent control. We knowingly collect no personal data from children and do not share any. The app is designed to comply with the GDPR, COPPA and the Google Play Families policy.

This website

The website is hosted by Cloudflare, which processes your IP address in technical logs to deliver the page and prevent abuse (legitimate interest, Art. 6(1)(f)). The site sets no cookies, loads no external fonts or scripts and uses no analytics. If you email us we use your message only to answer it and delete it after 12 months unless the law requires longer.

Recipients and transfers

Our hosting provider (Cloudflare) and Google, as described. If a provider processes data outside the EU, it is under EU standard contractual clauses or an adequacy decision.

Your rights

You may ask for access, correction, deletion, restriction and portability, and you may object to processing based on legitimate interest. Email [email protected]. You may complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the authority in your country.

Changes

If we ever add a feature that uses data, such as accounts, analytics or cloud backup, we update this policy and the Google Play Data safety form before the update is released.