The short version
- NeuroDinoWorld is made for children and set up by their parents or carers.
- No ads, no selling your data, and no tracking for advertising. Ever.
- If you create a parent account, your child's progress, including their first name, is backed up to our database in Sydney, Australia, so it can be restored. Without an account it stays on the device.
- We never receive or keep a recording of your child's voice. Voice features use the speech service built into your device or browser. In Talk to Buddy, what your child says is sent to us as text, not sound, so an AI service can write the buddy's reply. A song recorded in the Singing Studio or in Sing How You Feel is made on the device and is never sent to us. You can switch Talking off in Settings.
- Some characters say your child's first name. To make that audio, the line is sent to ElevenLabs, our voice provider.
- You can delete your account in the app, or email us and we will delete your data.
1. Who we are
NeuroDinoWorld is run by a sole trader trading as NeuroDinoWorld (ABN 71 243 092 197), Mount Duneed, Victoria, Australia. We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Privacy contact: hello@neurodinoworld.com.au
2. Who the app is for
NeuroDinoWorld is rated 4+ and is designed for young children, including neurodivergent children (for example ADHD and autism), using the app with a parent or carer. A parent or carer (18 or over) sets the app up and passes an adult check. Accounts are for parents and carers, not children.
3. Sensitive information
Because the app is designed for neurodivergent children, using it may suggest your child has a neurodivergent condition, which the Privacy Act treats as sensitive (health) information. By setting up the app you consent to us holding this implied information only to provide the app. We never use it for anything else and never share it for marketing or profiling.
4. What we collect, and why
Anonymous Guest-First Experience. NeuroDinoWorld requires no account, no email address, and no password. The app creates a random anonymous ID on your device to manage your subscription entitlement and locally store your child's progress.
Your child's profile and progress. Child profiles, stars, badges, journal entries, daily check-ins and the Calm Corner tools used are kept on your device. If you create a parent account, they are also backed up to our database in Sydney so they can be restored on another device, and they are deleted when you delete the account. Without an account, they are not sent to us.
Pre-recorded voice lines. Character voices and stories are pre-recorded human recordings and verified audio assets stored securely in our cloud storage in Sydney. They stream directly to the device without any live generative AI processing.
Microphone. A parent can switch Talking off in Settings, which switches off every microphone feature. In Animal Sounds and the Singing Studio, microphone audio is processed locally on the device. Recordings never leave your device unless you choose to save or share them.
Saying words to the app. The app includes optional hands-free voice interactions where your child can speak with their buddy character on the Home Stage or mimic sounds in Animal Sounds. On the website, these use the speech service built into your browser (such as Google in Chrome or Apple in Safari). In mobile apps, on-device system speech recognition is used. Spoken words are converted directly to text on the device for friendly in-game reactions. We never receive, record, store, or sell your child's voice audio.
Singing Studio and Sing How You Feel. Your child can record themselves singing: a song of their own in the Singing Studio, or a line their buddy says in Sing How You Feel, sung back. The recording is made locally on the device and is never sent to our servers or to third parties. "Save Song to Device" saves the song as a file directly to the device storage.
Motion sensor. Dance Party's Dance Off reads the device's motion sensor during a turn to score movement. This happens on the device only and is never recorded or sent anywhere.
Notifications. On Android, the only notification the app may show is the playback control for an audio story playing with the screen off: the story's title, with play and pause. Android 13 and later ask you once to allow notifications before it can be shown; the story plays whether you allow it or not. We send no other notifications, and no marketing or push notifications.
Payments. Purchases are handled by Apple, Google Play, or on our website by Stripe, all through RevenueCat. We never see card details. We receive your subscription status, product, store, expiry date and the account ID and email linked to the purchase, so we can unlock premium.
Adult check record. Each time an adult check is passed (at setup, to open Parent View, or to open a link outside the app), we store the time, the account or device ID, the IP address and the device and browser details, as a record that a parent gave consent.
Content reports. If you report a story, we store which story and chapter you reported and your account or device ID. If that cannot be saved, the report is emailed to us with your email address.
Keeping the app working.
- Crash and error reports: on the website and in the apps, Sentry receives error details, device and browser type, app version, your account ID if you are signed in, and the recent steps before the error, with web addresses shortened so they carry no email or device ID. The iPhone and Android apps also send crash reports to Firebase Crashlytics (Google): crash details, device type and app version.
- Our own usage counts: simple events such as "app opened" (once a day), sign-up, reaching the end of the free trial, purchase, a subscribe screen being shown, premium access ending, and whether a voice line played in the right voice. These are linked to the account or device ID and used only to improve the app. RevenueCat also records when its purchase screen is used. We do not use third-party analytics or advertising trackers.
- Android only: a Google Play Integrity check result, to confirm the app is a genuine copy.
- Server logs: our hosting provider (Google Cloud) keeps standard request logs, including IP addresses, for about 30 days.
On the device. The app uses the device's storage for settings, progress, the sign-in session, downloaded voice audio and cached content. We do not use advertising cookies or tracking pixels.
We do not collect your location, contacts, photos or camera, advertising identifiers, or browsing history.
5. How we use information
- To run the app, personalise it for your child, and save and restore progress
- To manage your account, subscriptions and free trial
- To send account emails (via Resend): a welcome email, a reminder before a free trial ends, a note if no plan was chosen, and an occasional check-in. Every one has an unsubscribe link, and after you use it we send you nothing.
- To answer support requests
- To find and fix faults, and to keep the service safe and prevent misuse
We do not use information for advertising, profiling or automated decisions about you or your child, and we never sell, rent or trade it.
6. Services we use
We share information only with these providers, only as needed to run the features described above:
- Google Cloud: our servers, database and file storage (Sydney, Australia); server logs (global)
- Firebase (Google): sign-in (global), website hosting (global), account records and two-player game rooms (Sydney), and Crashlytics crash reports in the apps
- Apple and Google: Sign in with Apple and Google sign-in, if you choose them, and Google Play Integrity on Android
- ElevenLabs: character and narration voices (United States)
- RevenueCat, Apple, Google Play and Stripe: purchases and subscriptions (United States and global)
- Resend: account emails (United States)
- Sentry: error reports (United States)
- Google Fonts: text fonts, which means Google sees the device's IP address when fonts load (United States)
- Your device's or browser's speech service (Apple, Google or Microsoft): only when a voice feature is used
- Cloudflare: our domain's DNS, and an older copy of the app (see section 12)
7. Overseas transfers
Our main database and file storage are in Australia. Some of the providers above are overseas (mainly the United States) or global. We take reasonable steps to use providers with privacy protections consistent with the Australian Privacy Principles.
8. Security
- All data is sent over encrypted connections (HTTPS).
- When you are signed in, our servers check your sign-in token before reading or changing your data, so only you can access it.
- Without an account, your child's progress stays on the device, so keep the device secure.
- We never store payment card details, and access to our systems is restricted.
If a data breach is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.
9. How long we keep information
- Account, progress, adult check records and usage counts linked to your account: until you delete your account. Deleting your account in the app removes these from our database straight away.
- Your child's names in an account: removed automatically if the account's progress has not been saved for 180 days.
- Records saved under a device ID (without an account, or before you signed in): until you ask us to delete them.
- Saved voice audio: kept in cloud storage until you ask us to remove it. It is not removed automatically when an account is deleted.
- Two-player game rooms: deleted within 24 hours.
- Error and crash reports: kept by Sentry and Crashlytics for their standard retention periods. Server logs: about 30 days. Database backups: about 7 days.
- Payment records: kept by Apple, Google, Stripe and RevenueCat, and by us, as the law requires.
- On the device: until you clear the app's data or uninstall it.
10. Your rights and choices
You can ask to access, correct or delete the information we hold about you or your child, or withdraw your consent by deleting your account.
- Delete in the app: open Settings, tap Manage Account, then Delete my account.
- Everything else (including records saved under a device ID, and saved voice audio): email hello@neurodinoworld.com.au. We will reply within 30 days.
- Voice features: switch Talking off in Settings at any time.
11. Children's privacy
- A parent or carer sets up the app and passes an adult check.
- We do not knowingly let children create accounts or give us information without a parent.
- There is no advertising and no chat with strangers. Talk to Buddy is a chat with an AI character, never with a person.
- Parents can review or delete their child's information at any time (see section 10).
United States (COPPA): if you believe we hold a child's information without a parent's consent, email us and we will delete it promptly. EU and UK (GDPR): you also have rights to data portability, to restrict processing, and to object. We process data to provide the service you asked for, and for voice features, with your consent.
12. Older versions of the app
If your iPhone or Android app has not been updated recently, it may be an older version. The older version asks at setup what your child loves and saves those interests with their progress, and when offline may hold two-player game rooms in Google's Firebase Realtime Database (Singapore). Updating the app from the App Store or Google Play brings it in line with this policy.
13. Changes to this policy
We will update this policy when the app changes. The date at the top shows the latest version. For significant changes, we will let you know in the app or by email.
14. Contact and complaints
NeuroDinoWorld (ABN 71 243 092 197), Mount Duneed, Victoria, Australia. Email hello@neurodinoworld.com.au.
If you are not happy with how we handle a privacy concern, you can contact the Office of the Australian Information Commissioner: oaic.gov.au, phone 1300 363 992.