Privacy Policy
Last updated 5 October 2026
We built Boomiki to know as little as possible about you, and nothing about your child. This policy explains what we do collect, why, who helps us, how long we keep it and your rights. A version for children is at Privacy for kids.
1. Who is responsible
The controller of your personal data is Boomiki. Contact for anything about privacy: hello@boomiki.com.
2. What we collect, and why
| What | When | Why (legal basis) | How long |
|---|---|---|---|
| Your email address, language, the plan you were interested in, and your consent record (the wording you agreed to, its version, and the time) | You reserve a place or join the waitlist | To send the founding-family offer you asked for (consent); to prove that consent (legal obligation / legitimate interests) | Until you unsubscribe, or 12 months after we send the offer. The offer email asks you to confirm your address; if you don't within 30 days, it is deleted |
| Purchase details (name, email, country, plan, payment status — never your card number) | You buy a plan | To provide the plan (contract); tax and accounting (legal obligation) | As long as you have a plan, then up to 6 years for tax records |
| Messages you send us | You email us | To reply and help (legitimate interests) | Up to 2 years after the conversation ends |
| Technical logs (IP address, browser, time, page) | Every visit, kept by our hosting provider | Security and keeping the service running (legitimate interests) | Short periods set by the provider (typically up to 30 days) |
We do not use advertising cookies, tracking pixels, fingerprinting or profiling, and we don't sell or share personal data for advertising. We don't run analytics today. If we add usage statistics, they will be cookieless and aggregate, will identify no one, and you'll be able to opt out; we'll update this policy first.
3. Children
Boomiki is for children aged 3–6, played with a parent or carer in charge. We do not collect personal information from children. The game has no sign-up, no chat, no ads and no third-party trackers. A child's progress (which letters they've learned, stickers, settings) is stored only on your device, in the browser's storage, and never sent to us. If you uninstall the game or clear the browser's data, it's gone.
Everything that involves personal data — buying, emails, accounts — is for adults and sits behind a grown-up check. If the game ever uses the microphone (for example to let a child say a sound), the sound is processed on the device and never uploaded.
For US parents (COPPA): we don't knowingly collect personal information from children under 13. If you believe a child has given us personal information, email hello@boomiki.com and we will delete it. Parents may review or delete anything held about their family at any time.
4. Who helps us (processors and recipients)
- Google Cloud / Firebase (hosting and the waitlist database, stored in the EU, region eur3) — processor.
- Paddle.com — our reseller and Merchant of Record: Paddle sells the plan to you, takes payment and handles tax, so it is a controller of the payment data it collects. See Paddle's privacy notice at paddle.com.
- An email service for the offer and confirmation emails: when we email you, the service we use acts as our processor under a data processing agreement.
We share personal data with others only if the law requires it.
5. International transfers
Some of these providers, or their support teams, are outside the UK. Where personal data leaves the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU standard contractual clauses.
6. Your rights
You can ask to see, correct, delete or export your data, to restrict or object to how we use it, and you can withdraw consent at any time (every email has an unsubscribe link). Email hello@boomiki.com from the address concerned. We answer within one month.
7. Complaints
If you're unhappy with how we've handled your data, please tell us first — we acknowledge every complaint within 30 days (Contact). You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113), or to the data protection authority where you live.
8. Storage on your device
The site and the game store a few things in your browser so they work; none of it is a cookie and none of it tracks you. The full list is on our Cookies and storage page.
9. Security
We use HTTPS everywhere, keep personal data in a few well-secured places, give access only to people who need it, and keep a written information-security programme and data-retention schedule.
10. Changes
When we change this policy we update the date above; if a change matters to you, we'll email you before it applies.