FactFlipz works fully with no account, right here on your device. Accounts are optional and they belong to you, the grown-up. Your child never signs in, never types an email or a password, and never sees a price. There are no ads and no third-party trackers of any kind, whether or not you ever make an account.

If you never make an account, nothing about your child is ever sent to us. Everything they earn and pick (the collection, streaks, Wonder Points, badges, pets, and the name they type on their Explorer Card and diplomas) is saved on your own device, in the browser's or app's private storage, and it stays there. The name on a diploma never leaves the device it was typed on.

A grown-up can choose to turn on family sync so a child's progress can follow them to another device. It lives behind the grown-up gate on the account page, and turning it on is the only time FactFlipz keeps anything about your family on our servers. Here is exactly what we would store, and nothing more:

We use this only to sync your family's progress and to keep your account working. We never show it to anyone else, we never sell it, and we never use it for advertising or tracking. A child's real name, their own words, photos, and audio are never sent to us, and that exclusion is built into the code, not just our good intentions.

For the App Store we declare exactly this, and nothing else: Contact Info (Email Address), Identifiers (User ID), Other Data (Other Data Types). Each one is used only to make the app work, is linked to your account, and is never used to track you.

• Your email address (or the private relay address if you use Sign in with Apple), so we can reach you and you can sign back in.
• A friendly profile name for each child, picked from a fixed list. Your child never types a name, and their real name is never sent to us.
• A minimized copy of each child's progress: counters and earned badges only. No names, no notes, no questions, no photos, and no audio ever leave the device.
• The dates your account and profiles were created and last used, so we can keep things tidy and safe.

A grown-up signs in with an email and a password, with Sign in with Apple, or with Sign in with Google. If you use Sign in with Apple and choose Hide My Email, we only ever see Apple's private relay address, never your real one. Signing in always happens behind the grown-up gate, and your child never sees it.

Before we store any of your child's progress, we ask for your permission the way the children's privacy rules require: you read a short note, you consent, and then you confirm through a second step that we email you. Nothing about your child is stored until you tap that confirmation. Your child's device is then attached with a short pairing code you read off your own screen, so the child never signs in.

We keep your family's synced progress for 730 days after your account is last used. If that day approaches we email you first at 700 days, and if the account stays unused we delete it for you. You can delete everything yourself at any time, long before then.

From the grown-ups account page you can see everything we store for your family in plain words, download a copy for yourself, and delete your account. Deleting is one action and it is complete: it erases your account and every copy of your family's progress from our servers. If you used Sign in with Apple, we also tell Apple to revoke that sign-in. Questions are welcome any time at support@factflipz.com.

Our servers hold the fact pages themselves, not people. To build a page for a topic the first time it is ever requested, and to keep it fast for everyone afterward, we store the finished page in a cache. That cache holds facts about animals, space, and history, never anything about your child.

Like every website, our servers also write short-lived operational logs while they run: which pages were served, the time, and the requesting device's network (IP) address. We use these only to keep the service working and safe, and never to build a profile of your child.

A few of the photos, and the short video clips, come straight from trusted outside media libraries such as Wikimedia, Pexels, Unsplash, the Internet Archive, and NASA rather than from our own servers. Your device asks that library for the image or clip, so the library sees the device's network (IP) address for that one request. Those libraries receive nothing about your child: no name, no account, nothing that identifies them.

You can also save your own backup of your child's progress from the grown-ups page, and bring it back later on the same device or a new one. The backup file belongs entirely to your family: you choose where it goes, we never receive a copy, and self-rescue never involves us. It works even if you never make an account.

Everything in FactFlipz is free to play. If cosmetic Explorer Packs are ever offered in the app, buying one is entirely optional and always sits behind the grown-up gate plus Apple's own confirmation. Apple handles the purchase from end to end: we never see a card number, and the record of what you bought stays with Apple. A kid never sees a price and can finish everything without anyone buying anything.

A grown-up can always reach a real person with a question or a request about your family's data at support@factflipz.com. We answer.