Privacy Policy — Moyako Kids Apps

Last updated: 23 April 2026

1. Who We Are

Hanalytic Limited is a company registered in England and Wales. We operate the Moyako brand as a trading name of Hanalytic Limited. This policy covers the Moyako mobile apps listed above.

For our web services (the moyako.com studio site and moyako.com/privacy-policy/) or our 13+ games at games.moyako.com, see those policies respectively.

2. Data We Collect — Mobile Apps

Our mobile apps are designed to minimise data collection. The table summarises what is collected, why, and with whom it is shared.

Data type	Purpose	Shared with	Linked to you?
Advertising ID (AAID / IDFA) — Android only	Serve ads via Google AdMob	Google AdMob	No — pseudonymous identifier. (iOS apps use SKAdNetwork instead.)
Approximate location (coarse, IP-derived)	Serve region-appropriate ads and comply with regional consent law	Google AdMob	No
Device and app info (model, OS, app version, crash logs)	Diagnostics, crash reporting	Google Firebase Crashlytics (if enabled in that app)	No
Interaction events (screen views, level completion)	Understand feature usage to improve the app	Google Firebase Analytics (if enabled and consent granted)	No
In-app purchase tokens	Validate purchases and restore entitlements	Google Play Billing	No personal data — only purchase tokens

We do not collect your name, email address, phone number, contacts, photos, files, microphone audio, camera images, or precise GPS location in our mobile apps.

2.1 Advertising

Android — native apps (Google Play, Samsung Galaxy Store):

• Supported by Google AdMob and certified mediation partners (Meta Audience Network, AppLovin, ironSource, and others).
• AdMob's handling of data is governed by Google Ads & Privacy.
• You can reset or change your advertising preferences at any time from your device settings (Settings → Privacy → Ads on Android).

Ad-serving treatment is not uniform across apps — it is set per app according to that app's declared Play Store audience:

App	Audience	Max ad content rating	Child-directed (COPPA)	Personalised ads
Animal Kingdom: Play & Learn com.moyako.animalsound	Kids (ages 5-under, 6-8, 9-12)	G (General Audiences)	setTagForChildDirectedTreatment = TRUE	Never — non-personalised only. Mediation partners run in COPPA-compliant mode.
Sliding Puzzle: Brain Teaser com.moyako.slidingpuzzle	Kids (ages 5-under, 6-8, 9-12)	G (General Audiences)	setTagForChildDirectedTreatment = TRUE	Never — non-personalised only. Mediation partners run in COPPA-compliant mode.
Memory Match: Brain Trainer com.moyako.memory	13+ (ages 13-15, 16-17, 18+)	T (Teens)	Age-branched at runtime via the in-app age gate: · under 13 → TRUE (defensive fallback) · 13+ → FALSE	Age-branched: · under 16 → non-personalised only (npa=1, setTagForUnderAgeOfConsent=TRUE) · 16+ in EEA / UK / Switzerland → on first launch you are shown a Google UMP consent form; personalised ads are served only if you explicitly grant consent; otherwise non-personalised only · 16+ in other regions → personalised per Google AdMob's default policy, subject to local law

You can withdraw UMP consent for Memory Match at any time via Settings → Privacy & Ads within the app; doing so reverts your ad treatment to non-personalised on the next ad request.

iOS apps (Apple App Store):

• iOS apps use Apple's SKAdNetwork framework for ad attribution — no third-party ad networks are used.
• No advertising ID is collected or transmitted to ad networks.
• See Apple SKAdNetwork documentation for how attribution works.

2.2 Children & Kids Audiences (COPPA · GDPR-K)

This section applies only to the apps in our portfolio that are declared kids-apps in Google Play — specifically Animal Kingdom: Play & Learn (com.moyako.animalsound) and Sliding Puzzle: Brain Teaser (com.moyako.slidingpuzzle). Both are PEGI 3 / suitable for all audiences, enrolled in Google Play's Families Policy programme (Sliding Puzzle additionally carries the Google Play Expert Approved badge). The safeguards below apply to every user of these apps, regardless of age:

• Ads are served only from certified kid-safe ad networks
• Ads are served as non-personalised only (we set setTagForChildDirectedTreatment=TRUE and setMaxAdContentRating=G — see §2.1)
• No behavioural profiling; no third-party analytics tied to children's accounts
• No in-app purchases without an age-appropriate parental gate
• No social features, no external links, no user-generated content

Not covered by this section:

• Memory Match: Brain Trainer is declared 13+ on Google Play and is not under Families Policy. Its runtime age gate treats self-declared under-13 users with COPPA-equivalent safeguards as a defensive fallback (see §2.1), but the app is not intended for children and is not listed in the Play Store Children tab.

We do not knowingly collect personal data from children under 13 (or under 16 in the EEA / UK / Switzerland where applicable) outside the kid-safe paths described above. If you believe a child has provided us with personal data, please contact info@moyako.com and we will delete it within 30 days.

For parents: you may contact us at any time to request deletion of any data associated with your child, or to ask questions about our data practices.

3. How Long We Keep Data

• Mobile-app analytics / crash logs: retained by Google Firebase per their retention settings (typically 14 months)
• AdMob-related identifiers: governed by Google's retention policies

4. Account Deletion

Moyako mobile apps do not create a user account or store any identifying data on our servers — uninstalling the app removes all app-scoped data from your device. To reset your Advertising ID, use your device settings (Settings → Privacy → Ads → Reset advertising ID on Android).

If you are a parent requesting deletion of a child's data, email info@moyako.com with the subject line "Delete my data" or "Parental Request". We will verify ownership and delete all records within 30 days.

5. Third-Party Services

• Google Play Services — required for Play-distributed apps. Google Privacy Policy.
• Google AdMob — advertising in free apps. AdMob Data Disclosure.
• Google Firebase (Analytics, Crashlytics) — diagnostics and usage analytics in selected apps, gated by consent. Firebase Privacy.
• Samsung Galaxy Store — distribution channel for select apps. Samsung Privacy.

6. Your Rights (UK GDPR / EU GDPR / COPPA)

Under UK GDPR, EU GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (see §4)
• Object to processing
• Withdraw consent for analytics or ads at any time via app settings or device-level controls
• Lodge a complaint with the Information Commissioner's Office (ICO) or your local EU supervisory authority

Under US COPPA, parents/guardians have the right to review, delete, and refuse further collection of a child's personal information. To exercise any right, email info@moyako.com.

7. International Transfers

Some of our service providers (Google) process data outside the UK/EEA. These transfers are covered by the EU-US Data Privacy Framework, UK International Data Transfer Addendum, or equivalent standard contractual clauses.

8. Data Security

We apply reasonable technical and organisational measures: HTTPS for all app-to-server communication, secrets management via environment variables, principle-of-least-privilege service accounts, and regular review of our data practices and SDK updates.

9. Cookies & On-Device Storage

Moyako mobile apps do not use web cookies — they are native Android applications distributed through Google Play and Samsung Galaxy Store. Apps use only on-device storage (SharedPreferences / local files) for your in-app preferences such as sound settings and progress; this data stays on your device and is removed when you uninstall the app.

10. Changes to This Policy

We may update this policy. Material changes will be announced on this page, and for mobile apps via in-app notice on next launch. The "Last updated" date above reflects the most recent revision.

11. Contact Us

Data Protection queries (including parental/COPPA requests): please use the same email and include "Data Protection" or "Parental Request" in the subject line.