Privacy Policy

Bonbon ("the app") is operated by KOFE — ETO ZHIZN, TOO (ТОО «Кофе — это жизнь», known in English as Coffee is life LLP), BIN 260840003233, Almaty, Kazakhstan ("we"). Bonbon is a video app for children that parents set up and control. This policy explains what information the app handles and how. The short version: we collect the minimum needed to run the app, we sell no ad space and never profile your child for advertising, and we never sell personal data.

Information we collect

• Parent account (optional). If a parent chooses to sign in — with email, Google, Apple, or Facebook — we store the parent's email address, an optional display name, and sign-in identifiers from the chosen provider. An account is not required to use the app.
• Child profile details a parent adds. A name or nickname, age, and preferred language for each kid profile. These stay linked to random identifiers, not to any child's real-world identity, and we never collect information directly from children.
• Usage data. Which videos were played and basic app events (e.g., searches, screen-time settings), tied to a random installation identifier. We use this to run the catalog, improve recommendations, and produce the weekly activity report for parents.
• Device data. Device model, operating-system version, app version, language, and timezone; a push-notification token if the parent enables notifications (iOS only at present); crash reports (via Sentry, on iOS) to fix bugs.
• TV playback (Chromecast, and the Bonbon TV app for Samsung and LG). A TV never holds an account, a name, or an email; it holds only a random pairing token that links it to a parent's phone. While a TV is showing its pairing code, its network address is used to match it with a phone on the same home network and is discarded shortly after the code expires. During playback the phone and TV exchange only what is needed to play: which video, play/pause, position. Nothing on the TV is used for advertising.

What we do NOT do

• We sell no ad space and run no behavioral advertising of any kind: nothing your child does in Bonbon is used to target advertising, by us or by anyone else. Videos play in an embedded YouTube player operated by Google, and Google's own terms and privacy policy govern that playback.
• No sale or rental of personal data.
• No tracking across other companies' apps or websites: the app uses no advertising identifier (IDFA on iOS, Advertising ID on Android) and does not request App Tracking Transparency, because it does not track. Install attribution for our own ads uses Apple's aggregated SKAdNetwork, which shares no personal data with us or anyone else.
• No accounts, purchases, or external links for children. The parent area is gated.

Children's privacy

Bonbon is made for families. Parents set up the app; children only watch videos from a reviewed catalog. We do not knowingly collect personal information from children. Everything stored about a kid profile is entered by the parent and remains under the parent's control, including deletion at any time.

Where data is processed

Our servers are hosted on Railway (data stored in the United States). Sign-in verification is performed with the provider a parent chooses (Google, Apple, or Facebook); we receive only the account identifier, email, and name from the provider — never passwords.

Delete your account & data

Data retention & security

Account and usage data are kept while the account or installation is active and removed on deletion as described above. Session credentials are stored using industry-standard hashing; transport is encrypted (HTTPS).

Changes & contact

If this policy changes materially, we will update this page and the date above. Questions: [email protected].