For parents
Privacy Policy
Effective and last updated: September 23, 2026
BaniBanani is operated by Barfin Network Limited (BaniBanani, we, us).
BaniBanani has no advertising, third-party behavioral tracking, or sale of personal data. Learning progress stays on the device unless a parent signs in. While the parent is signed in, supported profile and progress data are synchronized.
Who this policy is for
BaniBanani is a learning app for children ages five and up, used with a parent or guardian. Account creation, purchases, cloud synchronization, support, export, and deletion are parent-facing functions protected by a parent gate.
Data handled by the app
- Device-local learning data: a child profile name and age, avatar and settings, completed activities, answers, hints, progress, rewards, and parent notes.
- Optional parent account and synchronization data: the parent's email address, an account or sign-in provider identifier, session records, consent version, and the encrypted synchronization state containing the supported child profile and learning data listed above.
- Purchase data: product identifier, store, transaction reference, entitlement status, expiry, renewal status, and verification time needed to verify, restore, and limit offline subscription access. Full payment-card details are handled by Apple or Google, not BaniBanani.
- Operational security data: limited request, error, and security-event records needed to operate, protect, and troubleshoot the service.
How data is used
We use data only to provide lessons, remember progress and preferences, synchronize data when requested by a parent, authenticate the parent, verify purchases, provide support, prevent abuse, and meet legal obligations. We do not use children's learning activity for targeted advertising or profiling.
Storage and sharing
Progress is local-first. When synchronization is enabled, the sync payload is encrypted before storage and kept separately for the parent account. Data is disclosed only to service providers required to operate the app, such as hosting providers, Apple, and Google, or when legally required. Those providers process data under their own terms and privacy policies.
Retention and security
Local data, including downloaded course packages, remains until it is removed in the app or the app is uninstalled. A cached package does not keep paid lessons accessible after the subscription or its short offline authorization expires. Account and synchronized data remain while the account is active. Account deletion revokes active sessions and permanently deletes the account and synchronized state from the active service. A non-secret deletion receipt may remain for up to 30 days so an interrupted deletion request can be safely retried. Protected backups may remain temporarily for security, recovery, and legal compliance before aging out. Data is protected in transit with HTTPS and sensitive account data is encrypted or irreversibly hashed at rest.
Parent choices
A parent can use the core app without creating an account, export available progress, sign out to stop future synchronization, revoke provider access through Apple or Google, or delete the account. See Delete your account for the available deletion methods.
Children's privacy
We design the service to minimize personal data from children and do not ask a child to create an account, provide contact information, or make a purchase. If you believe a child's personal information was provided without appropriate consent, contact us so it can be reviewed and deleted.
International use and changes
Data may be processed in countries where our service providers operate, subject to applicable safeguards. We will update this page when our practices materially change and revise the effective date above.
Contact
For privacy questions or requests, contact support@banibanani.com. We may need to verify that a requester is the parent account holder before disclosing or deleting account data.