MishMash Privacy Policy

Effective Date: February 6, 2026. Last Updated: March 4, 2026

Introduction

Welcome to MishMash! This Privacy Policy explains how Appcific Technologies Pty Ltd ("we," "us," or "our") collects, uses, and protects information when you and your child use the MishMash mobile application ("App").

MishMash is designed for children ages 3-12 and their families. We are committed to protecting children's privacy and complying with the Children's Online Privacy Protection Act (COPPA), Apple's App Store Guidelines for Kids, and Google's Families Policy.

Our Core Privacy Principle: MishMash is built on a "local-first" philosophy. Your child's creations stay on your device, and we collect only the minimal data needed to make the app work.

Information We Collect

Information We DO NOT Collect

• ❌ Names, email addresses, or contact information from children
• ❌ Photos, videos, or audio recordings from your device
• ❌ Location data
• ❌ Personal messages or communications
• ❌ Social media account information
• ❌ Persistent identifiers for behavioral advertising

Information We DO Collect

1. App Usage Analytics (Anonymous)

We collect anonymous usage data to understand how the app is used and to improve it:

• Which features are used (e.g., how often images are generated)
• App performance metrics (load times, crashes)
• Device type and operating system version
• Session duration (how long the app is used)

This data is:

• Collected via Firebase Analytics (Google)
• Anonymized and aggregated
• Not used for advertising or sold to third parties
• Not linked to any personal identifier

2. AI-Generated Content Requests

When your child creates a "mix," we send a request to OpenAI's servers:

• What is sent: A pre-written prompt based on the phenomena selected (e.g., "A friendly creature made of sunshine and rain")
• What is NOT sent: Any personal information, photos, or user-generated text
• What we receive: An AI-generated image

OpenAI processes this request according to their Privacy Policy and Usage Policies.

3. Subscription Data

If a parent purchases a subscription (MishMash+ or MishMash VIP), the following is processed:

• Purchase receipts are validated by Apple/Google and managed through RevenueCat
• An anonymous user ID is used by RevenueCat to track subscription status
• No personal information (name, email, payment details) is collected or stored by us
• Payment details are handled entirely by Apple App Store or Google Play Store

4. Locally Stored Data

The following data is stored only on your device and is never transmitted to us:

• Generated images saved to the Archive
• App settings (theme preferences)
• Daily usage counter (resets each day)

How We Use Information

We use the anonymous analytics data we collect to:

• Improve app performance and fix bugs
• Understand which features children enjoy most
• Develop new features
• Ensure the app works correctly across different devices

We DO NOT use data to:

• Serve advertisements
• Build profiles of individual children
• Contact children or families
• Sell or share with data brokers

Third-Party Services

MishMash uses the following third-party services:

All third-party services are configured to comply with children's privacy requirements.

Parental Rights Under COPPA

As a parent or guardian, you have the right to:

1. Review information we have collected from your child (we collect no personal information)
2. Request deletion of any data associated with your child's use of the app
3. Refuse further collection of information from your child (you may uninstall the app)
4. Opt out of analytics collection (see "Your Choices" below)

To exercise these rights, contact us at: privacy@appcific.com

Your Choices

Opt-Out of Analytics

You can disable analytics collection:

1. Open MishMash
2. Go to Settings
3. Toggle "Share Anonymous Usage Data" to OFF

Delete Local Data

All locally stored data (saved images, settings) can be deleted by:

• Uninstalling the app, OR
• Using your device's app data clearing function

Data Security

We protect information using:

• Encrypted connections (HTTPS/TLS) for all network requests
• Secure API key management (keys are not stored on device)
• No persistent storage of personal information on our servers

Data Retention

• Analytics data: Retained for up to 14 months, then automatically deleted
• Local data: Retained on device until you delete it or uninstall the app
• AI requests: Not retained by MishMash; see OpenAI's data retention policy

Children's Privacy

MishMash is designed specifically for children and complies with:

• COPPA (Children's Online Privacy Protection Act) - United States
• Apple App Store Kids Category Requirements
• Google Play Designed for Families Program Requirements

We do not:

• Require account creation for basic app usage
• Collect personal information from children under 13 without parental consent
• Display behavioral advertising
• Include external links accessible to children
• Allow children to make purchases or change settings without parental authentication (all purchases and settings are protected by a parental gate)

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will:

• Update the "Last Updated" date at the top
• Notify users via an in-app notice for significant changes

Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Appcific Technologies Pty Ltd
Email: privacy@appcific.com
[INSERT BUSINESS ADDRESS]

For COPPA-related inquiries, you may also contact the Federal Trade Commission at ftc.gov/coppa.

Summary for Parents

MishMash is designed to be a safe, private, creative space for your child.