Privacy Policy

Last updated: April 9, 2026

1. Introduction

Welcome to Boco Toys ("we", "our", or "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect your data when you use our mobile application (the "App"). Boco is intended for use by adults, such as parents or guardians, who create and manage audio stories and related content for children.

By using our App, you agree to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

When you register or log in using Google Sign-In or Sign in with Apple, we collect the account information needed to authenticate and manage your account, which may include your name, email address, and provider account identifier.

We collect this information to create and manage your account.

2.2 Automatically Collected Information

When you use our App, we automatically collect limited technical data through Firebase (Google LLC) (Privacy Policy), including:

• Device type and operating system version
• App version
• IP address (used to determine general country-level location)
• General location (country-level only, derived from IP address)
• Crash reports and stack traces (via Firebase Crashlytics)
• App usage events and session data (via Firebase Analytics)

Our backend servers (AWS) also log IP addresses for security and operational purposes. These logs are retained for a limited period and are not used to personally identify you.

This information is used solely to improve App stability, functionality, and user experience. It is not used for advertising purposes. We do not use any advertising SDKs.

2.3 Children’s Data

Our App offers content suitable for children; however, account registration must be completed by a parent or guardian. We do not knowingly collect personal data directly from children under 13 (or the minimum age required by local law). If we discover that we have unintentionally collected information from a child without parental consent, we will delete that information immediately.

2.4 Cookies and Session Data

Our web platform uses cookies solely to manage your authenticated session. Specifically:

• Session cookies — created when you sign in and deleted when you sign out or close the browser. Used to keep you logged in during your visit.
• Persistent cookies — used to remember your authentication state between visits so you do not need to sign in each time.

We do not use cookies for advertising, tracking across third-party sites, or any purpose beyond authentication. You may disable cookies in your browser settings, but this will prevent you from signing in.

3. Use of Third-Party AI Services

To provide AI-powered features, Boco may send limited user-provided content to third-party AI service providers, including OpenAI, Google Gemini, and Suno. This may include:

• text prompts or story ideas entered by the user
• audio recordings submitted by the user for transcription into story ideas or other requested content

Consent: Before Boco sends prompt text or audio recordings to a third-party AI provider, the app presents an in-app notice identifying the providers, describing the data being shared, and requesting the user's consent before transmission.

For full details on which providers we use, what data is transmitted, your consent rights, and intellectual property terms, please review our AI Additional Terms of Use.

4. How We Use Your Information

• Authenticate and manage your account
• Provide and personalize access to our content and services
• Improve performance, reliability, and user experience
• Respond to customer requests or technical support needs
• Comply with applicable legal requirements

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data.

Your data may be shared only with:

• Third-party AI services (OpenAI, Google Gemini, Suno) — user-provided text prompts, story ideas, and audio recordings submitted for transcription or content generation may be sent solely to provide the AI features requested by the user. See our AI Additional Terms of Use for full details.
• Google — if you use Google Sign-In, your name, email, and Google Account ID are shared with Google solely for authentication. Governed by Google's Privacy Policy.
• Apple — if you use Sign in with Apple, Apple shares only the account information you choose to provide (name and/or email) solely for authentication. Governed by Apple's Privacy Policy.
• Firebase (Google LLC) — crash reports and usage analytics are sent to Firebase solely for diagnostic and performance purposes. No personal identifiers such as your name or email are included. Firebase's data handling is governed by Google's Privacy Policy.
• Hosting and infrastructure providers that operate our backend servers, under strict confidentiality obligations.
• Law enforcement authorities, if required by applicable law or valid legal process.
• Acquirers or successors — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity. You will be notified via email and/or a prominent notice in the App before your data is transferred and becomes subject to a different privacy policy.

6. Data Retention and Account Deletion

We retain your personal data only as long as necessary to provide the App’s services or comply with legal obligations.

To delete your account, open the App and go to Settings → Delete Account. Confirm the action when prompted. Your personal data (name, email, and Google Account ID) will be permanently and irreversibly deleted from our systems. This action cannot be undone — all your stories and content will also be permanently removed.

Alternatively, you may request account deletion by emailing appboco@gmail.com with the subject line "Delete My Account" from your registered email address. We will process the request within 30 days and confirm by reply email.

7. Your Rights

You have the right to:

• Access your personal information
• Request correction or deletion of your data
• Withdraw your consent and stop using the App at any time

To exercise your rights, please contact us at appboco@gmail.com.

8. Data Security

We use industry-standard security practices to protect your data, including encryption in transit and at rest, least-privilege access controls, and regular monitoring for vulnerabilities. However, no digital platform is completely immune to security risks.

9. Data Storage and International Transfers

Your data is stored on Amazon Web Services (AWS) servers located in the United States. Firebase (Google LLC) analytics and crash data are also processed in the United States. Third-party AI providers (OpenAI, Google Gemini, Suno) process story prompts on servers located in the United States.

If you are located outside the United States, your data will be transferred to and processed in the US. We ensure that all international transfers comply with relevant data protection regulations (such as GDPR) and are supported by appropriate safeguards.

10. Compliance with Children's Privacy Laws

We comply with the Children’s Online Privacy Protection Act (COPPA) and other applicable child privacy laws. Parents or guardians are encouraged to supervise their child’s use of the App.

11. Third-Party Links

The App and our website may contain links to third-party websites or services (such as AI provider pages or legal documents). We have no control over and assume no responsibility for the content or privacy practices of those sites. We encourage you to review the privacy policy of any third-party site you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted within the App and on this page, and the “Last updated” date will be revised accordingly. Continued use of the App after changes are published constitutes acceptance of the revised Privacy Policy.

13. Contact Us