Privacy Policy and Children’s Privacy Notice

Who we are and who HoppyTime is for

HoppyTime is operated by HIPPY (C.Y) International Ltd (“HIPPY,” “we,” “us” or “our”), located at 29 Hamachteret St., Ramat Hasharon, Israel. This Policy explains how HoppyTime collects, uses, discloses, retains and protects information, including personal information from children under 13.

HoppyTime is a play-together experience primarily designed for children ages 3–5 and their parents or legal guardians. It may also be used with siblings through age 8. A parent controls the account and starts activities, and the child participates alongside the parent by speaking, answering and choosing.

For purposes of the U.S. Children’s Online Privacy Protection Act (“COPPA”), HIPPY is the operator responsible for the information practices described here. HIPPY is the point of contact for parent questions and requests concerning HoppyTime and the service providers identified below.

Before a child begins: parental notice and consent

Before we activate a child profile or collect personal information from a child, we provide the parent or legal guardian with direct notice and obtain verifiable parental consent using a method reasonably designed to confirm that the person giving consent is the child’s parent or legal guardian.

We may collect limited parent contact and registration information solely to provide the notice, obtain and record consent, and establish the parent-controlled account. If consent is not completed within a reasonable period, we delete the temporary registration information. Participating organizations may provide families with access to HoppyTime, but they do not provide consent on a parent’s behalf.

Until parental consent is obtained, we do not create a child profile or begin voice processing, child-level analytics or other collection of personal information from the child. We will seek renewed parental consent before making a material change to the collection, use or disclosure of the child’s personal information.

A parent may withdraw consent and stop further collection at any time through Settings or by contacting us. Because certain information is necessary to provide HoppyTime, withdrawing consent may require us to deactivate the child profile or account.

Information we collect and where it is kept

Parent and account information

Parent name, parent-controlled email address, authentication information and a participating program or group code.

A unique account identifier used for authentication, app operations, support, deletion requests and the limited analytics described below.

Our authentication provider maintains the parent sign-in record. Depending on the sign-in method, Apple may process the parent’s Apple account information or private-relay email address.

Child profile and activity information

The child’s name or nickname, age in years, and short entries used in an activity, such as a favorite toy or object.

Activities opened and completed, progress counts, Skills Stars and other settings needed to continue the experience.

Child profile, progress and related settings are generally stored locally in the app’s private storage on the device rather than in a central HIPPY child-profile database. They remain until the parent clears the data, deletes the account or removes the app, subject to the device’s storage and backup settings.

Voice, conversation and AI information

Voice audio from the parent and child during an activity, processed at run time. The app does not technically distinguish between speakers.

Temporary transcripts and AI responses used to conduct the current activity.

Instructions provided to the AI service, which may include the parent’s name, the child’s name or nickname and age so the experience can address the family appropriately.

Short scene or object descriptions used to request an illustration.

Technical, usage and diagnostic information

We collect limited technical and usage information needed to operate, secure, support and improve HoppyTime. This may include:

• A pseudonymous app or account identifier, age range, participating program or group, activities and content used, progress and completion information, session duration, and counts or timing information about interactions and generated content.
• Device and application information, such as app version, device type, operating system, language, platform and app-instance identifiers. Our service providers may process an IP address and use it to determine an approximate location, such as a country or region. We do not use this information to determine a child’s precise location.
• Crash reports, error information and limited diagnostic logs. We take reasonable steps to exclude or redact names, conversation content, transcripts and generated content from these logs.

We do not ask for a child’s exact date of birth, home address, school name, photograph, health information or other unnecessary personal details as part of the ordinary HoppyTime experience. Parents and children should not include this information in voice conversations or text fields. If it is provided incidentally, we process it only as necessary to provide the activity and as otherwise described in this Policy.

Communications, support and feedback

We collect information that a parent chooses to provide when contacting us for support, exercising privacy rights, responding to an optional survey or otherwise communicating with HIPPY. This may include the parent’s name and email address, the content of the request or response, and information reasonably necessary to verify the parent’s identity, investigate the issue or respond. Parents should not include unnecessary information about their child in these communications.

How live voice activities work

During an activity, HoppyTime processes the parent’s and child’s voice to provide the live conversational experience. Voice information is transmitted to an AI service provider, which processes it to understand the conversation and generate a response. HIPPY does not store the audio or transcript or use conversations to train general-purpose AI models. Our service provider may retain limited information temporarily for security and abuse-prevention purposes.

A recording indicator is displayed while the microphone is active. HoppyTime does not listen outside an active activity or while the app is in the background.

Image generation

HoppyTime may use information from an activity to create an illustration. We take reasonable steps to remove names and certain identifying details before sending the request to our image-generation service provider. Because automated filtering is not perfect, parents and children should not share unnecessary personal information during activities.

We do not intentionally send the provider the parent’s email address, account identifier or child profile. HIPPY does not centrally retain the image prompt or generated image and does not use prompts or images to train general-purpose AI models. Our provider generally deletes API inputs and outputs within a short period under its current documented process, subject to limited security, legal and operational exceptions.

Analytics and the unique app identifier

After receiving parental consent, we create a unique app identifier and associate it with activity in HoppyTime. We use it to operate and support the app, understand and improve how the app is used, measure participation and service performance, fulfill deletion requests, prepare aggregate reports and identify parents who may be invited to optional user research.

The identifier is pseudonymous, not anonymous. It does not itself contain a name or email address, but authorized HIPPY personnel can link it to the parent’s account where necessary for the disclosed purposes. Access to this capability is restricted. For pilot testers, registration of pre published apps requires sharing email address with HIPPY by filling the form, its not being shared with 3ed parties and this requirement applies only for the pilot period.

Analytics events consist of numeric, categorical and timing information about app use. They are designed not to contain names, free text, audio, transcripts or AI responses. We do not use analytics information for advertising, advertising personalization, cross-app tracking or building a developmental profile of a child, and we configure our analytics providers accordingly.

How we use information

We use information to:

• Create, authenticate, secure and support the parent-controlled account.
• Provide and personalize age-appropriate activities, live conversation, narration, requested illustrations and on-device progress features.
• Show short parent-facing “teachable moments” based on the immediately preceding exchange. These are displayed during the session and discarded; HoppyTime does not maintain a child score, recommendation profile, developmental assessment or diagnosis.
• Communicate with parents about registration, consent, account administration, privacy requests, support and important service updates.
• Record, administer and document parental consent, withdrawal and deletion requests.
• Understand and improve HoppyTime, measure participation and service performance, troubleshoot errors, maintain security, manage costs and prevent misuse.
• Prepare aggregate reports for HIPPY and participating organizations.
• Conduct optional surveys and user research as described below.
• Comply with applicable law, enforce our terms and protect the rights, safety and security of children, families, HIPPY and others.

We do not condition a child’s participation on providing more personal information than is reasonably necessary for the relevant activity.

Service providers and other disclosures

We disclose information only as described in this Policy, to providers that help operate HoppyTime, or when otherwise permitted or required by law. Providers that may collect or maintain information through HoppyTime include:

• Google LLC — authentication, cloud and AI processing, analytics, diagnostics, security, hosting and related technical services.
• Apple Inc. — Sign in with Apple, private-relay email where selected, device and app security signals, and App Store distribution.
• Replicate, Inc. — image-prompt processing and image generation.

We may engage other service providers to perform functions such as hosting, authentication, cloud infrastructure, AI processing, analytics, security, diagnostics, communications, surveys and technical support. We provide them only with information reasonably necessary to perform the relevant service and require them to protect it and process it for the agreed purposes.

We may also disclose information where reasonably necessary to comply with law, protect a child or another person, investigate fraud or security incidents, or complete a corporate transaction subject to appropriate protections. We do not sell children’s and parents’ personal information or allow children to make personal information publicly available through HoppyTime.

Participating organizations, aggregate reporting and research

A school, childcare organization or other participating institution may sponsor access to HoppyTime. These organizations may receive aggregate participation and usage statistics. They do not receive individual child profiles, names, learning histories, session transcripts, AI interactions, recommendations or developmental information.

HIPPY may use limited activity criteria, such as completion of certain activities, to identify parents who may be invited to an optional interview about their family’s experience with HoppyTime. We use the account connection only to send the invitation to the parent. Participation is voluntary, and declining does not affect access to HoppyTime. The research team receives contact information only for parents who agree to participate. We will obtain separate consent before providing the research team with an identified participant’s detailed usage history.

How long we keep information

We retain personal information only for as long as reasonably necessary for the specific purpose for which it was collected. Our current retention periods are:

• Temporary registration information: until consent is completed, declined or abandoned. Abandoned registrations are deleted within 30 days.
• Parent authentication account: while the account is active, then deleted when the account is deleted, except for limited records needed for legal, security or consent-documentation purposes.
• Child profile and progress information: generally on the device until the parent clears the child’s data, deletes the account or removes the app, subject to the device’s storage and backup settings.
• Voice audio and transcripts: HIPPY does not store them. Our AI service provider may retain limited inputs briefly for security and abuse-prevention purposes.
• Image prompts and generated images: HIPPY does not centrally retain them. Our image-generation provider generally deletes API inputs and outputs within a short period under its current documented process, subject to limited exceptions.
• Pseudonymous analytics and exported user-level event data: up to 14 months from collection. After that, only aggregate or permanently de-identified statistics remain.
• Crash reports: generally up to 90 days. Certain security and operational logs may be retained for up to 180 days and are designed not to contain prompt text, generated images, child-derived content or the account identifier.
• Support correspondence: generally up to 3 years after the issue is closed, unless a different period is reasonably necessary for a specific legal or security matter.
• Consent, withdrawal and deletion records: the minimum information needed to document the parent’s action, for up to 5 years after account closure.
• Aggregate or permanently de-identified statistics: may be retained longer because they cannot reasonably be linked to a parent or child.

If we materially change where or how child profile or progress information is stored, we will update this Policy and provide a new direct notice and obtain renewed parental consent where required.

Parent choices and rights

A verified parent or legal guardian may at any time:

• Correct the child’s name or nickname, age or other profile information.
• Withdraw consent and refuse further collection or use of the child’s personal information.
• Delete the child’s information while retaining the parent account, or delete the entire account.
• Ask us to delete pseudonymous analytics and crash records sooner than their scheduled expiration, where reasonably feasible.

Parents can use the controls in Settings to clear child information while retaining the parent account or to delete the entire account. Account deletion stops further collection and removes or initiates deletion of information associated with the account, subject to limited records that we must retain for legal, security or consent-documentation purposes.

To exercise these rights, use Settings or email privacy@hoppytime.ai. We will take reasonable steps to confirm that the requester is the parent or legal guardian associated with the account. We will not require government identification unless proportionate verification cannot be completed another way.

Security

We use reasonable administrative, technical and physical safeguards appropriate to the nature and sensitivity of the information, including access controls, authentication, encryption in transit, restricted production access, logging safeguards and service-provider security requirements.

No system is completely secure. If we identify a security incident affecting personal information, we will investigate, take appropriate corrective action and provide notice where required by law.

Processing locations

HoppyTime’s principal service providers and primary data-storage infrastructure are located in the United States. HIPPY is based in Israel and may access personal information from Israel for administration, support and other purposes described in this Policy. Personal information may also be processed in other countries where our service providers or their subprocessors operate, including through global cloud infrastructure.

Privacy and data-protection laws may differ between countries. Wherever personal information is processed, we require it to be protected in accordance with applicable law and appropriate contractual and security safeguards.

Changes to this Policy

We may update this Policy to reflect changes in HoppyTime, our service providers or legal requirements. We will post the updated Policy and its effective date. Before making a material change to the collection, use or disclosure of a child’s personal information previously accepted by a parent, we will provide a new direct notice and obtain renewed verifiable parental consent where required.

Contact us

HIPPY is the point of contact for parent questions and requests concerning HoppyTime and the service providers identified in this Policy.