Privacy Policy
Effective date: August 15, 2025
This Privacy Policy describes how Funloop LLC ("Funloop", "we", "our", or "us") collects, uses, and shares information in connection with the Bamber mobile application, related websites, and services (collectively, the “Service”).
Is this Privacy Policy for you?
This Policy is for parents and guardians using Bamber with their children, for teens and adults who use the app, and for visitors to our website. Bamber is designed for children under parent supervision.
Definitions
- Child: a user under the age of 13.
- Minor: a user under the age of majority in their location.
- Personal Information: information that identifies or can reasonably identify a person (e.g., name, email, device identifiers).
- Processing: operations on Personal Information (collect, store, use, disclose).
- Service: the Bamber app, website, and related features.
Who We Are
- Company: Funloop LLC
- App: Bamber (kid‑friendly AI conversation and learning app)
- Contact: privacy@funloop.com
- Site: funloop.com
What We Collect
- Account & Parent Verification: Parent email address and verification status (magic link sign‑in). Subscription status via Apple’s StoreKit (we do not receive payment card details from Apple).
- Child Profiles: Nickname, age (or birth year mapped to age), and an avatar emoji/icon. The currently active child profile.
- App Content & Usage: Questions asked, AI responses, timestamps, and whether images were generated; minimal service analytics (e.g., app launch, mic permission, animation stall); a pseudonymous device identifier for quality diagnostics.
- Audio, Speech, and Media: Microphone access (with your consent) for speech recognition; transcripts and prompts may be sent to AI providers to fulfill requests; voice responses are played back in the app.
Under‑13 Defaults & Protections
- Child usage is parent‑supervised and requires a verified parent session.
- No personalized advertising for child contexts.
- Stricter defaults on sharing and access; parent‑gated edits/deletes for child profiles.
How We Use Information
- Provide the Service (speech recognition, AI responses, text‑to‑speech playback, image generation).
- Set up and maintain parent sessions, verify parental consent, and manage child profiles.
- Synchronize content to your account with database row‑level security (RLS).
- Diagnose issues, measure performance, and maintain reliability.
- Comply with legal obligations and enforce our Terms of Service.
How We Share Information
We do not sell personal information. We share data only with service providers who help us operate the Service, and only as necessary:
- Apple (StoreKit) – in‑app purchases, subscriptions, and entitlements.
- Supabase – authentication (magic link), database, and secure functions; stores parent, child profile, consent, and interaction records behind RLS.
- OpenAI – prompts and necessary context for language model responses.
- ElevenLabs – text used for text‑to‑speech generation and returned audio.
- Runware – image prompts and generated image URLs for illustrations.
These processors are contractually bound to protect your information and may process data in the United States or other jurisdictions. We may also disclose information if required by law or to protect our rights and users.
Children’s Privacy & Parental Consent
Bamber is designed for use by children under the supervision of a parent or guardian. We require a verified parent session before a child can use the app. Parents control creation of child profiles and consent to processing. Row‑level security ensures a parent can access only their own data. If we learn that we collected personal information from a child without appropriate consent, we will delete it.
International Transfers
We and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards for cross‑border transfers.
Data Retention
We retain information for as long as needed to provide the Service and for legitimate business or legal purposes. You can request deletion of your account data (subject to applicable law and safety requirements).
| Category | Examples | Typical Retention |
|---|---|---|
| Parent Account | Email, consent record | While account active + reasonable legal period |
| Child Profiles | Nickname, age, avatar | While profile active or until deletion request |
| Interactions | Questions, answers, timestamps | Service needs + safety; then deletion or de‑identification |
Security
We employ technical and organizational safeguards including HTTPS in transit, access controls, and database RLS. No method of transmission or storage is 100% secure; we work to improve protections continually. If we learn of a data incident that poses a risk to your privacy, we will notify you consistent with applicable law.
Your Rights & Choices
- Depending on your location, you may have rights to access, correct, delete, or port your data, object to or restrict processing, and withdraw consent.
- Manage microphone permissions in device Settings.
- Manage subscription and billing via Apple’s App Store settings.
- Delete or edit child profiles inside the app (Parent‑gated settings).
Advertising & Attribution
We may use privacy‑preserving and/or consent‑based advertising and attribution technologies to promote Bamber and to understand campaign performance. These include Apple’s SKAdNetwork (aggregated, no user‑level identifiers) and, where permitted by applicable law and your settings (e.g., App Tracking Transparency), third‑party partners that may access the device advertising identifier (IDFA) to measure ad performance and deliver or optimize ads.
- SKAdNetwork (Apple): provides aggregated install and conversion attribution without user‑level identifiers.
- Ad partners (e.g., Meta): may receive app events and device advertising identifiers when you grant tracking permission via ATT or provide consent, for measurement and optimization.
Where required, we will seek your permission before enabling tracking (e.g., ATT prompt on iOS). If permission is not granted, we will limit attribution to aggregated methods (e.g., SKAdNetwork) and disable partner access to the device advertising identifier. We do not enable personalized advertising for child usage contexts.
Cookies & Tracking
The mobile app may use privacy‑preserving attribution (e.g., SKAdNetwork) and, where permitted by consent and platform settings, advertising identifiers (IDFA) for ad measurement and optimization. The website may use cookies for basic functionality and analytics.
Do Not Track
At this time, our Services do not respond to “Do Not Track” signals. You can use platform controls (e.g., ATT, IDFA reset) and cookie preferences (where applicable).
App Tracking Transparency (ATT) & Choices
- You can allow or deny tracking via the iOS ATT prompt. If denied, we will not access the IDFA and will rely on aggregated attribution (e.g., SKAdNetwork).
- You can change your choice at any time in iOS Settings > Privacy & Security > Tracking.
- You may reset the device advertising identifier (IDFA) in iOS Settings.
Children & Advertising
Bamber is intended for use by children under parent supervision. We do not enable personalized advertising for child usage. Any tracking or advertising measurement that uses the device identifier will occur only where permitted by law and platform policy, with appropriate parental consent or in parent‑only contexts.
Parents’ Rights & Controls
- Review, correct, or delete your child’s profile and request account deletion by contacting privacy@funloop.com.
- In‑app, parents can edit or delete child profiles from Parent‑gated settings.
- Manage tracking permissions via iOS Settings > Privacy & Security > Tracking.
Service Providers (Sub‑processors)
We maintain a list of our core service providers that process data on our behalf. See Sub‑processors for details.
US State Privacy Rights
Depending on your US state, you may have rights to know/access, correct, delete, or obtain a portable copy of your Personal Information, and to opt out of sale/sharing or targeted advertising. We do not sell Personal Information in the conventional sense. To make a request or exercise choices, contact privacy@funloop.com. We may need to verify your request and your authority (for example, if you are a parent making a request for your child).
Changes to This Policy
We may update this Policy from time to time. We will change the “Effective date” above and, when appropriate, notify you in the app or by email. Your continued use of the Service after changes indicates acceptance.
Contact
Funloop LLC
Email: privacy@funloop.com