Last updated 16 August 2026. Learning Safari is operated by RIBEYE GmbH, Switzerland.
We collect only what is needed to run a parent account and to save what your child has learned. We ask for a first name or a nickname to greet her by, and never for a surname, a birth date, a photo or a location. We never show a child an advertisement. We never sell information about your family, and we never share it with anyone for advertising.
If something below is not clear, or you want anything deleted, write to hello@wordsafari.app and a real person will answer.
Two kinds of thing, and this is the complete list.
We do not collect a surname, a date of birth, a photograph, a location, any contacts, or anything she types or says inside a game. We never build an advertising profile of anyone, and there is no advertising in the app at all.
Some games ask a child to say a word or a colour out loud. Those games are off until a grown-up turns them on, and they work like this:
When a grown-up creates an account, we record that a signup happened in our own internal system, together with your email address and, if you arrived from one of our advertisements, the campaign tags that came with the link. It is how a two-person studio knows whether its own marketing works.
It contains nothing about a child, and it is never shared or sold. Ask us at hello@wordsafari.app and we will delete it.
To know which games families actually use, the app sends a small number of content-free events, such as "a round finished" or "a subject was picked". They carry no name, no email and no answer, and they are never tied to a child.
This runs through Rybbit, which sets no cookie and which we host ourselves on our own server in Europe rather than sending anything to an analytics company. It runs in the website and in the app. An earlier version of this page said the app contained no analytics at all; that stopped being true in August 2026 and this sentence replaces it.
On our marketing website, and only if you press "Accept" on the cookie banner, we measure whether one of our own advertisements led to a visit, a signup or a payment. That is the whole of it: never anything about a child, and never an advertisement shown to a child.
None of it runs in the iPhone or iPad app. The app is built with the advertising code removed at build time, so it cannot be switched on by accident. Decline the banner and nothing is set on the website either.
Subscriptions bought on the website are processed by Stripe. Subscriptions bought inside the iPhone or iPad app are processed by Apple. In both cases we receive only that a payment happened and which plan it was. We never see or store your card number.
Buying anything requires passing the grown-up gate first, which is also how we confirm a purchase was authorised by an adult rather than a child.
We do not sell information, and we share it with nobody for advertising.
| Who | What they handle |
|---|---|
| Supabase | Your account email, your children's nicknames, birth years and progress. Hosted in the EU. |
| Stripe | Payment details and subscription status for anything bought on the web. We never see card numbers. |
| Apple | Payment and subscription status for anything bought inside the app, and the device speech recognition described above. |
| Vercel | Hosts the website and the browser game. |
| Rybbit | The content-free usage statistics above. Cookieless, and self-hosted by us in Europe. |
| Resend | Sends account and receipt emails to you. Never to a child. |
Anything that could expose a child starts switched off until a grown-up turns it on: the microphone games, and the weekly leaderboard, where a child ever appears only under a randomly generated animal name such as "Swift Leo 47" and never under her own.
We follow the UK Children's Code principle of privacy by default, we do not use location, and there is no "are you sure?" standing between you and switching something off. We do not knowingly collect personal information from a child: the account belongs to the grown-up, and everything about a child is the nickname and birth year you enter yourself.
We keep your account and your family's progress for as long as your account exists, so a lost device never means lost progress.
To delete everything: open the app, go to the grown-ups' area, and use Delete account. Your account and every child's nickname, birth year and progress are removed permanently, and any active subscription is cancelled first so nothing keeps charging. If you would rather we did it, write to hello@wordsafari.app and we will, normally the same day and always within 30 days. Billing records stay with Stripe or Apple under their own legal retention rules.
One narrow exception, stated rather than buried: if we ever gave your family free access by hand, the email address that grant is attached to survives deletion, so that recreating an account does not silently take the free access away. It holds nothing else. Ask us and we will remove that too.
You can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it, at hello@wordsafari.app. If you are in the EU, the UK or Switzerland you also have the right to complain to your data protection authority. RIBEYE GmbH, in Switzerland, is the controller of this information.
If we change what we collect, we change this page in the same release, and the date at the top moves. Material changes are announced in the app's changelog.
Questions, or want to exercise any privacy right this page does not cover? Write to hello@wordsafari.app.