AmiDino Privacy Policy

Where this policy lives: this English version you are reading is published at
https://amidino.app/privacy. It is the canonical version from which all translations
are derived. Each language has its own address, always with the same text that is
available inside the app itself, so you can read it without leaving the app and without
an internet connection.

Version: v1: the ID stored in policy_version whenever you consent using the optional telemetry toggle (section 2.5). It is the record of the exact text you accepted.

AmiDino is a habits app for children, designed for family use. We wrote this policy in plain language on purpose: Brazil's LGPD (Article 14, paragraph 6) requires information about children's data to be clear and accessible, and we agree.

An honest summary: AmiDino works on your device first, without sending anything over the internet. Only when you (the parent or legal guardian) create an account and accept a dedicated consent screen is the minimum necessary data sent to the cloud, to sync across devices and enable your subscription. Never for advertising, profiling, or sale. There is also a third use, entirely optional and off by default: usage telemetry for the app itself (never third-party telemetry), to help us know whether the product is working. See section 2.5.

1. Who we are

AmiDino is maintained by an individual, not a company:

We are the controller of the data described in this policy under Brazil's General Data Protection Law (Law No. 13,709/2018, known as the LGPD).

2. What we collect

Nothing is collected until you, the parent or legal guardian, create an account and give consent (see section 6 and sections 2.1 through 2.4). From that point on, we store only what is listed below, field by field, with no vague categories. Optional telemetry (section 2.5) is the only exception: it requires a second opt-in through its own toggle, separate from this main consent.

2.1 Your child's profile data

("Ami put together Duda's plan"). It is optional and can be edited or removed at any time.

It is used to adjust the habit plan and the complexity of the content to your child's age.

filter activities in the app's library.

text". These are usage preferences, never screening results or clinical information.

Ami up, the app listens to the microphone's volume LEVEL in real time, only to tell whether you roared loudly enough. We never record, store, or send any audio; the sound is discarded immediately afterward, always on the device. You can turn this option off at any time in the Parent Area; the other 2 ways (shaking and swiping) and a simple tap continue to work normally.

2.2 Your child's routine and progress

set up (e.g., "brush teeth, every morning").

which day and at what time, and whether you later confirmed it.

optionally choose a face (😊 😐 😟) before saving. We know that a child's mood is sensitive information, so this choice is temporary and local: it disappears as soon as the screen closes, is never saved, never becomes a summary for you, and never leaves the device.

predictable achievements, never random rewards.

2.3 Educational allowance (if you enable it)

No real money moves through AmiDino; the allowance is an educational record between you and your child.

deliberately enable it (it is off by default), how much they "lose" for not completing it.

and the agreed amount.

the final amount, and whether it has been paid.

2.4 Your data as the parent or legal guardian (adult)

The account is always yours as the adult; your child never has a login, email address, or password.

sign in with your Apple Account. We do not store your password or credentials.

which plan you have, and when it ends. This is managed using a pseudonymous identifier generated by RevenueCat, never linked to anyone's name, email address, or phone number, especially your child's.

family enables notifications on your child's device, that device's as well, together with a random installation identifier generated on the device itself. They are used only to deliver notices: on your device, tasks awaiting confirmation; on your child's device, your confirmation. They are deleted along with the account and revoked when the device is unlinked. Your child's reminders are local notifications, generated on the device itself and off by default. When devices are synced, their activation and time settings are sent to the cloud.

2.5 App usage data: optional telemetry (analytics)

This is different from everything else in this section: even if you have already given the main consent above, this collection remains off until you turn on a separate toggle in Settings → Privacy → "Privacy and data", in the Parent Area.

opening the paywall, starting a subscription), never free text, never linked to a specific child (only to the family as a whole), and never used to build an individual behavioral profile.

onboarding? does it lead to a subscription?); it is not advertising, it is not the sale of data, and it is not shared with anyone outside AmiDino.

the rest of your data); no third-party analytics platform (Google Analytics, Meta, Mixpanel, Amplitude, or any other) has access to this data.

(an exception to the general rule in section 10).

which version of this text applied): this is proof of your consent, and it remains after you turn telemetry off (it is deleted only if you delete your entire account, section 9).

deleting your entire account, section 9), turning this telemetry off does not affect the rest of your account; your habits, progress, and subscription remain intact. Turning it off immediately deletes previously recorded events (but not the record that you turned it off).

3. What we NEVER collect

This list is a promise built into our architecture, not a minor detail: the app was built so that this data does not exist on our servers.

Your child's drawings, album, and visual preferences always stay exclusively on the device; they are never uploaded to the cloud.

4. Why we collect data

There are three purposes: the first two apply whenever you create an account; the third applies only if you turn on the separate toggle (section 2.5):

  1. Sync your family's routine across devices and keep your child's progress

safely stored.

  1. Enable your subscription and the educational allowance: know that your family has access

to the service you subscribed to and maintain the allowance statement agreed between you and your child.

  1. (Optional, off by default) Understand whether the product is working: usage telemetry

for the app itself, never linked to advertising or third parties (section 2.5).

We never use data for advertising, behavioral profiling, or sale to third parties. AmiDino contains no third-party advertising, tracking, attribution, or analytics SDKs, and does not use Apple's advertising identifier (IDFA); this is why the app never displays the tracking permission prompt (ATT). The optional telemetry in section 2.5 is handled by us, on our own infrastructure; it is not a third-party SDK, so it does not change any of the above.

5. Legal basis

specific and prominently presented consent from one parent or legal guardian (LGPD, Article 14, paragraph 1). This consent is requested on a dedicated screen, written in plain language, never through a checkbox hidden inside terms of use.

notification tokens for the family's devices (section 2.4): processed on the basis of performance of a contract (LGPD, Article 7, item V). They are the minimum necessary to provide the service you subscribed to.

consent**, separate from the main consent, through its own toggle, never bundled into general account acceptance. Turning it off does not affect any other legal basis above.

6. When data leaves the device

AmiDino is local-first: everything your child does in the app stays only on the device until you, the parent or legal guardian:

  1. Create an account with Sign in with Apple;
  2. Read and accept the dedicated consent screen.

Only after you give this consent is the minimum data listed in sections 2.1 through 2.4 sent to the cloud (optional telemetry in section 2.5 is sent only if you separately enable its dedicated toggle). If you do not create an account or do not consent, no data leaves the device; anything done locally stays there.

7. Where data is stored

(sa-east-1). Your family's data stays in Brazil. Each family can access only its own data (isolated through database security rules).

pseudonymous identifier described in section 2.

and notification delivery.

8. Service providers

Apple, Supabase, and RevenueCat are the only service providers that handle AmiDino data, including the optional telemetry in section 2.5, which stays on the same Supabase infrastructure as the rest of your data. There are no others: no advertising networks, no third-party analytics platforms (Google Analytics, Meta, Mixpanel, Amplitude, or any other), and no tracking services.

9. Your rights (LGPD, Article 18)

As the parent or legal guardian, acting on your own behalf and on behalf of your child, you can, at any time, directly in the app's "Privacy and data" screen, in the Parent Area:

section 2.5, which is write-only by design (even we do not read it back through the app): you can see whether the toggle is on or off, but not the individual events recorded.

the local profile, habits, progress and allowance data available on this device. It does not include all the data in sections 2.1 through 2.4: left out are the exact age and the account, authentication, subscription and notification registration data. Optional telemetry (section 2.5) is also not included in the file; it is write-only by design (even we do not read it back through the app), can be deleted at any time (see below), but cannot be viewed field by field.

gate and with two confirmation steps to prevent accidents. Deletion removes everything in a cascade: profile, habits, progress, allowance, medals, optional telemetry and its consent record, and the mirrored subscription record.

In addition:

your account, and you can do so through the same steps. You can also revoke AmiDino's access to your Apple Account in your Apple ID settings.

toggle in "Privacy and data" turns it on and off, without deleting your account or affecting habits, progress, or your subscription. Turning it off immediately deletes previously recorded events.

Subscriptions); the app includes a shortcut there. Canceling your subscription does not delete your data; to do that, use account deletion.

10. How long we keep data (retention)

Data is kept for as long as the account exists, with one exception: the optional telemetry in section 2.5, which is automatically deleted after 6 months even if the account is still active. When you delete your account, everything is deleted in a cascade; we do not keep active copies afterward.

11. Data Protection Officer (DPO)

The LGPD (Article 41) requires a publicly named data protection officer, who is your direct point of contact for any privacy matter:

Write to us in Portuguese, English, or Spanish. We respond within 15 days.

12. Changes to this policy

If this policy changes, we will publish the new version at the official URL (https://amidino.app/privacy, with translations on language-specific subdomains) with a new effective date. Changes that affect your child's data or the purposes described here will require renewed consent from you as the parent or legal guardian within the app; they never take effect silently.

13. Contact

Brasília/DF, CEP 71060-021, Brasil

App Store page.

Protection Authority (ANPD): https://www.gov.br/anpd