Privacy Policy

This policy explains how BY ARTISAN LLC handles information when you use Pupik. It covers our website at pupik.app, the Pupik app at play.pupik.app, the Pupik apps for phones and tablets, and the emails we send. Together we call these "the Service." When we say "we," "us" or "our," we mean BY ARTISAN LLC. When we say "you," we mean the grown-up who uses the Service or holds the account.

1. Who we are

Pupik is a calm, low-stimulation playroom for children ages 2 to 8, rooted in Jewish life. It is made by BY ARTISAN LLC, a Wyoming limited liability company. We are responsible for the information described in this policy. You can reach us at hello@pupik.app or at the address at the end of this page.

2. Children's privacy

Pupik is made for young children, and we take that seriously. It is built so that children can play without giving us any personal information. Pupik follows the Children's Online Privacy Protection Act (COPPA) in the United States, and the rules for children's data in other places where we offer it.

Children don't have accounts

Only a grown-up can create a Pupik account, sign in, subscribe or change settings. Children don't sign in and don't give us their email address. The activities don't ask children for personal information, and nothing a child does or makes inside an activity is recorded.

Profiles

Each child in your household can have a profile. A profile is a figure, a small drawn character your child picks. Your household may also give a profile a first name or nickname. In the grown-ups area, you can choose an age range for each profile so we can suggest activities that suit it.

That's all a profile holds. We never ask for a child's photo, last name or birthdate, and we ask you to keep profile names to a first name or nickname. Profiles are saved on the device where you set them up. When a grown-up is signed in, we may also keep them with your household's account so they appear on your other devices. You can change or remove a profile at any time.

Information needed to run the app

When a grown-up signs in on a device, the app keeps a sign-in token on that device and checks with our servers whether the household's subscription is active. We use this technical information only to keep the Service working and secure. We don't use it to build profiles of children, to show ads or to track anyone across other apps and websites.

No ads, no analytics in the app

There are no ads anywhere in Pupik, and the app contains no analytics or tracking tools. We use analytics only on our website, pupik.app, as described below.

Your rights as a parent

As a parent or guardian, you can ask to review any information we hold about your child, ask us to delete it, and tell us not to collect any more. Email us at hello@pupik.app from the email address on your account. If we ever learn that we have collected personal information from a child in a way this policy doesn't describe, we will delete it promptly.

3. What we collect

From grown-ups who create an account

• Your email address. You sign in with a one-time link we email to you. We don't use passwords.
• Sign in with Apple or Google. If we offer it and you choose it, we receive an account identifier from Apple or Google and, if you allow it, your email address. Apple may give us a private relay address instead of your real one.
• Messages you send us. If you email us or use the form on our support page, we keep your message, your name if you give it, and our reply so we can help you.

When you subscribe

• On the website: card payments are handled by Stripe. We never see or store your full card number. Stripe tells us your plan, your subscription status, your trial and renewal dates, and a customer reference so we can match the subscription to your account. Stripe also gives us a coded reference to the card (not the card number) so that each card can be used for one free trial only.
• In the App Store or Google Play: Apple or Google handle the payment. They tell us which plan you bought, whether the subscription is active, its renewal dates and a purchase reference. We don't receive your payment details.

From devices and browsers

• Sign-in and device records. When you sign in, we keep a record that a device of a certain type (for example, iPhone, Android or web) is linked to your household and when it was last used, and we keep a sign-in session so you stay signed in.
• Server logs. Like most online services, our servers automatically log technical details of each request, such as IP address, browser type, the page or file requested and the time. We use these logs to keep the Service running, to fix problems and to protect it from abuse.

On our website, pupik.app

• Analytics. We use Google Analytics to understand how visitors use our website: which pages are visited, how people found us, roughly where they are (country or city, based on IP address) and what kind of device and browser they use. Google Analytics uses cookies to do this. See Cookies and similar tools.
• Search data. We use Google Search Console to see how our website appears in Google search results. It gives us totals, such as how often our pages showed up for a search and how often people clicked. It does not track individual visitors on our website.

Saved on your device

The app saves a few things on the device itself so it can work smoothly: your household's profiles, the language you chose and whether your subscription is active.

4. How we use it

We use information only to run Pupik and to look after the people who use it:

• to create your account and sign you in;
• to provide the Service and check whether your household's subscription is active;
• to process subscriptions and free trials, including making sure each household and card gets one free trial;
• to send sign-in links and messages about your account and subscription;
• to send a short series of welcome emails, which you can stop at any time;
• to answer your questions and requests;
• to understand how our website is used, so we can improve it;
• to keep the Service safe, prevent fraud and abuse, and fix problems;
• to meet our legal, tax and accounting obligations.

We don't use your information for advertising, and we don't sell it.

5. Emails we send

Some emails are part of the Service. These include sign-in links and important messages about your account or subscription. You'll receive them as long as you have an account.

When you sign up, we may also send you a few welcome emails with tips for getting started. Every one of these has an unsubscribe link. Unsubscribing stops these emails, but not the essential ones, such as sign-in links.

6. Who we share it with

We don't sell your personal information, and we don't share it with anyone for advertising. We share it only with companies that help us run Pupik (our service providers), and only what each one needs to do its job for us:

• Stripe processes card payments and manages web subscriptions.
• Apple and Google process App Store and Google Play purchases and, if you use them, Sign in with Apple or Google.
• Postmark sends our emails, such as sign-in links and welcome emails.
• Zoho Mail hosts our mailbox, where your emails to us arrive.
• DigitalOcean hosts our servers and database in the United States.
• Bunny.net is a content delivery network that delivers the app's files quickly to your device.
• Adobe Fonts and Google Fonts provide the typefaces on our website. To show them, your browser connects to their servers, which receive your IP address.
• Google Analytics and Google Search Console help us understand how our website is used and found, as described above.

We may also share information if the law requires it, to protect the rights, safety or property of our users, ourselves or others, or as part of a merger, sale or transfer of our business. If that happens, this policy will continue to apply to the information collected under it.

7. Cookies and similar tools

Cookies are small files a website saves in your browser. Apps can save similar information on your device.

• Essential. When you sign in to the web app, we set a cookie that keeps you signed in. The app also saves your profiles and settings on your device, as described above. These are needed for Pupik to work, so they can't be switched off in the Service. You can still clear them in your browser or device settings, which signs you out.
• Analytics, on our website only. Google Analytics sets cookies on pupik.app to count visits and see how pages are used. We don't use Google Analytics for advertising, and we don't turn on its advertising features. Where the law requires your consent for these cookies, we ask for it first.

How to opt out

• Install Google's Google Analytics opt-out browser add-on.
• Block or delete cookies in your browser settings. Blocking analytics cookies won't affect how Pupik works.
• Learn more about how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

8. How long we keep it

• Account and subscription information: for as long as your account exists, and longer only where the law requires it.
• Payment records: records of payment events, such as charges, renewals and refunds, are kept for as long as we need them for accounting, tax and legal reasons, even after an account is deleted. They include the email address used at checkout, which we keep so we can contact you about a purchase. If you ask us to erase your information, we remove it, except where the law requires us to keep it.
• Free trial records: the coded card reference used to allow one free trial per card is kept so that the rule keeps working.
• Server logs: for a limited time, as needed for security and troubleshooting.
• Emails with us: for as long as we need them to help you and keep a record of what we agreed.
• Website analytics: no longer than 14 months in Google Analytics.
• Children's profiles: on your device, and with your household's account when a grown-up is signed in, until you remove the profile or delete your account.

9. Keeping it safe

We use reasonable technical and organizational measures to protect your information. Connections to Pupik are encrypted, sign-in links work only once and expire after a short time, and access to our systems is limited to the people who need it. We also choose service providers that protect information carefully. No online service can promise perfect security, but if a breach ever affects your information, we will tell you as the law requires.

10. Your choices and rights

• See, correct or get a copy: email us and we'll tell you what we hold about you and fix anything that's wrong.
• Delete your account: you can delete your account in the grown-ups area of the app, on our website at pupik.app/delete-account, or by asking us by email. Deleting your account cancels any subscription you bought on our website, removes your sign-in details and signs out your devices. We keep the email address used at checkout with your payment records (see How long we keep it).
• Erase your information: email us and we'll erase your information, including that email address, except what the law requires us to keep.
• App Store and Google Play subscriptions: deleting your account doesn't cancel them. Cancel them in your Apple or Google account settings.
• Stop welcome emails: use the unsubscribe link in any of them.
• Analytics cookies: see How to opt out.

To make a request, email hello@pupik.app, ideally from the email address on your account. To protect your information, we may need to confirm that the request comes from you, usually by replying to that address. We'll answer within the time the law allows, and usually much sooner. We will never treat you differently for using your privacy rights.

11. US state privacy rights

Some US states, including California, give residents specific privacy rights. We offer these rights to all our users, wherever they live in the United States:

• the right to know what personal information we collect, use and disclose;
• the right to delete it;
• the right to correct it;
• the right to opt out of the sale of personal information or its sharing for targeted advertising. We don't do either, so there is nothing to opt out of;
• the right not to be treated differently for using these rights.

In the past 12 months, we have collected these categories of personal information: identifiers (such as your email address, account and customer references, and IP address), commercial information (your subscription and purchase history), and internet activity (how you use our website). We collect them from you, from your devices and from Stripe, Apple and Google, for the purposes in How we use it, and we disclose them only to the service providers in Who we share it with. We don't collect sensitive personal information as defined by California law.

You or someone you authorize can make a request by emailing hello@pupik.app. If we decline your request, we'll explain why, and you can ask us to reconsider by replying to our answer. If you're still not satisfied, you can contact your state's attorney general.

12. If you live in the EU or UK

If you are in the European Union, the European Economic Area or the United Kingdom, the GDPR or UK GDPR applies to your information, and BY ARTISAN LLC is the controller responsible for it.

Why we're allowed to use your information

• To provide what you asked for (contract): your account, sign-in, subscription and the emails needed to run them.
• Our legitimate interests: keeping the Service secure, preventing misuse of free trials, improving our website and sending welcome emails to people who have signed up. We weigh these interests against your rights, and you can object at any time.
• Your consent: analytics cookies on our website, where the law requires consent. You can withdraw it at any time.
• Legal obligations: keeping tax and accounting records.

Your rights

You have the right to access your information, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent at any time. You also have the right to complain to your local data protection authority (in the UK, the Information Commissioner's Office). We'd appreciate the chance to help first, so please email us.

International transfers

We are based in the United States, and our servers are there, so your information is transferred to and stored in the United States. Some of our service providers may also process it in other countries. When information leaves the EU or UK, we rely on recognized safeguards, such as the European Commission's Standard Contractual Clauses (and the UK addendum) or a provider's certification under the EU-US Data Privacy Framework and its UK extension.

13. Changes to this policy

We may update this policy as Pupik grows or the law changes. When we do, we'll post the new version here and change the date at the top. If a change is significant, we'll tell you by email or in the app before it takes effect. If a change would affect how we handle children's information, we'll ask for a parent's consent where the law requires it.

14. Contact us

Questions, requests or worries about privacy? We're happy to help.

BY ARTISAN LLC
312 W. 2nd St #2383
Casper, WY 82601
United States
hello@pupik.app