FactFlipz works fully with no account, right here on your device. Accounts are optional and they belong to you, the grown-up. Your child never signs in, never types an email or a password, and never sees a price. There are no ads and no third-party trackers of any kind, whether or not you ever make an account.

If you never make an account, we store nothing about your child. Everything they earn and pick (the collection, streaks, Wonder Points, badges, pets, and the name they type on their Explorer Card and diplomas) is saved on your own device, in the browser's or app's private storage, and it stays there. The name on a diploma never leaves the device it was typed on. The one exception is the AI helper, described right below: a few features send the words or photo your child just made to get a one-time answer, and we do not keep what was sent.

Some of the magic in FactFlipz comes from an AI helper. When your child uses one of these features, the thing they just typed or snapped travels over an encrypted connection to our server, which passes it once to Anthropic, the AI company whose models write the answer. That trip is one-way and one-time: we do not store what was sent, and it is never linked to your child, a name, or an account.

Photos have their hidden location details (EXIF) removed by our server before they go on to Anthropic. Under the commercial API terms we use, Anthropic does not train its models on what FactFlipz sends. Each feature has a small daily limit, and your child can enjoy all of FactFlipz without ever touching these features. Here is every feature that does this, and exactly what it sends:

• Wonder Inbox: the question your child types is sent once to write the answer.
• Snap and Learn: the photo your child snaps is sent once to identify the subject.
• Fact Forge and Fix the Card: the fact your child types is sent once to check it.
• Field Journal hunts: the photo your child snaps as proof is sent once to confirm the find.
• Story Seeds: if your child taps "Turn this into cards", that story, journal note, or interview answer is sent once to pull out topic ideas.

A grown-up can choose to turn on family sync so a child's progress can follow them to another device. It lives behind the grown-up gate on the account page, and turning it on is the only time FactFlipz keeps anything about your family on our servers. Here is exactly what we would store, and nothing more:

We use this only to sync your family's progress and to keep your account working. We never show it to anyone else, we never sell it, and we never use it for advertising or tracking. A child's real name, their own words, photos, and audio are never stored on our servers and are never part of sync, and that exclusion is built into the code, not just our good intentions. The only time words or photos leave the device at all is the one-time AI answer described above, and those are never kept or connected to your account.

For the App Store we declare exactly this, and nothing else: Contact Info (Email Address), Identifiers (User ID), Other Data (Other Data Types). Each one is used only to make the app work, is linked to your account, and is never used to track you.

• Your email address (or the private relay address if you use Sign in with Apple), so we can reach you and you can sign back in.
• A friendly profile name for each child, picked from a fixed list. Your child never types a name, and their real name is never sent to us.
• A minimized copy of each child's progress: counters and earned badges only. Names, notes, questions, photos, and audio are never stored by us and are never part of sync.
• The dates your account and profiles were created and last used, so we can keep things tidy and safe.

A grown-up signs in with an email and a password, with Sign in with Apple, or with Sign in with Google. If you use Sign in with Apple and choose Hide My Email, we only ever see Apple's private relay address, never your real one. Signing in always happens behind the grown-up gate, and your child never sees it.

Before we store any of your child's progress, we ask for your permission the way the children's privacy rules require: you read a short note, you consent, and then you confirm through a second step that we email you. Nothing about your child is stored until you tap that confirmation. Your child's device is then attached with a short pairing code you read off your own screen, so the child never signs in.

We keep your family's synced progress for 730 days after your account is last used. If that day approaches we email you first at 700 days, and if the account stays unused we delete it for you. You can delete everything yourself at any time, long before then.

From the grown-ups account page you can see everything we store for your family in plain words, download a copy for yourself, and delete your account. Deleting is one action and it is complete: it erases your account and every copy of your family's progress from our servers. If you used Sign in with Apple, we also tell Apple to revoke that sign-in. Questions are welcome any time at support@factflipz.com.

Our servers hold the fact pages themselves, not people. To build a page for a topic the first time it is ever requested, and to keep it fast for everyone afterward, we store the finished page in a cache. That cache holds facts about animals, space, and history, never anything about your child.

Like every website, our servers also write short-lived operational logs while they run: which pages were served, the time, and the requesting device's network (IP) address. We also keep small daily counters per network address that cap how often the AI helper can be asked. We use these only to keep the service working and safe, and never to build a profile of your child.

A few of the photos, and the short video clips, come straight from trusted outside media libraries such as Wikimedia, Pexels, Unsplash, the Internet Archive, and NASA rather than from our own servers. Your device asks that library for the image or clip, so the library sees the device's network (IP) address for that one request. Those libraries receive nothing about your child: no name, no account, nothing that identifies them.

The other company we work with is Anthropic, our AI service provider, described in the AI helper section above: it receives the words or photo only to produce the one answer, gets no name and no account, and does not train its models on it. There are no other third parties, no ad networks, and no data brokers, ever.

You can also save your own backup of your child's progress from the grown-ups page, and bring it back later on the same device or a new one. The backup file belongs entirely to your family: you choose where it goes, we never receive a copy, and self-rescue never involves us. It works even if you never make an account.

Everything in FactFlipz is free to play. If cosmetic Explorer Packs are ever offered in the app, buying one is entirely optional and always sits behind the grown-up gate plus Apple's own confirmation. Apple handles the purchase from end to end: we never see a card number, and the record of what you bought stays with Apple. A kid never sees a price and can finish everything without anyone buying anything.

A grown-up can always reach a real person with a question or a request about your family's data at support@factflipz.com. We answer.