Privacy Policy

Last updated: October 30, 2026

This Privacy Policy explains what information the "Studio 4 Kids" apps and this website handle, where it is kept, who receives it, and the choices you have. It is written for parents and guardians. It covers these apps and services, all made by CreatixBox LLC:

Where a sentence names a platform, it applies only to that platform. Where it says "the apps," it applies to all of them. The short version: the apps have no accounts and no ads, what your child does in the app stays on your devices and in your own cloud storage, and the only information that leaves your devices for us or for a company working for us is a notification token, the newsletter details a parent chooses to give us, and what you send through the website.

1. Who we are and how to reach us

The apps and the website are operated by CreatixBox LLC, a limited liability company in the United States. We are the operator for the purposes of the United States Children's Online Privacy Protection Act (COPPA) and the data controller for the purposes of the European Union and United Kingdom data protection laws.

CreatixBox LLC, United States. Email: contact@studio4kids.com. We answer every request about this policy by email, and we aim to answer within 30 days.

2. What the apps keep on your devices

Everything your child does in the apps is stored on the device it is used on. We never receive it, and no company receives it on our behalf. By platform:

  • iPhone, iPad and Mac: the name and character you give each child's profile, the costume the child wears, progress and stars for each letter, mistakes and the number of listen, write and read activities, coins, costumes and rewards earned or bought, the practice streak and the days practiced, the daily reminder time, sound and language settings, which version of our legal notice has been shown, a record of which purchases the app has already delivered, and, if a parent subscribes to the newsletter from the app, the name and email address entered so the form can show them again. All of this lives in the app's own storage on the device.
  • Apple Watch app and complication, and the iPhone and iPad widgets: they read a small summary from the phone app on the same device, namely coins, trophies, the streak, whether the app is unlocked and the app language. The watch app also counts the letters traced and the stars earned on the watch and sends coin and practice day events back to the phone. Nothing from the watch or the widgets leaves your devices.
  • iMessage sticker packs: they contain only the sticker images and store nothing.
  • Android phones and tablets: the name and character you give each child's profile, the costume, progress for each letter, mistakes and activity counts, coins and the record of how they were earned and spent, costumes bought, the streak, the daily reminder time, sound and language settings, which version of our legal notice has been shown, and the Google Play purchase tokens for packs the app has already delivered. All of this lives in the app's own storage on the device.
  • Apple Vision Pro: the character your child chose, progress and stars for each letter, the streak, coins, costumes, and a record of the purchases the app has delivered. The Vision Pro app does not ask for a child's name. All of this lives in one file in the app's own storage on the headset.

A parent can delete a child's profile from the app menu, behind the parental gate. Deleting the app removes everything it kept on that device.

3. Backups and sync that you control

  • iPhone, iPad and Mac: when iCloud is turned on for the app, the app keeps the information in section 2, the newsletter name and email included, in step across your devices through your own private iCloud storage. It stays in your Apple Account, we cannot read it, and Apple holds it under your iCloud terms. You can turn this off for each app in your device's iCloud settings. Our four iPhone and iPad apps also share one small record with each other, in the device keychain and in your private iCloud storage: which of our apps you have unlocked, with the App Store purchase reference and date, and when each was first opened, so the welcome offer runs on the right days. That record never reaches us.
  • Android phones and tablets: if device backup is turned on in your Google account, Android backs up the app's data from section 2 to your Google account like any other app, under Google's terms. Separately, the app can save a copy of your children's profiles, progress, rewards, coins and the record of coin and costume packs bought to a private app folder in your own Google Drive, so the same progress appears on your other devices. This is off by default and only starts if a parent turns it on behind the parental gate, choosing a Google account on the device. The folder is hidden from your files and from other apps, it stays in your Google account, not on our servers, and we never receive it. The app asks only for access to that folder, never the rest of your Drive. Once it is on, the app refreshes the copy each time it opens. You can turn it off at any time in the app; turning it off stops the copying but does not delete what is already there, which you can delete in your Google Drive settings under the apps connected to your Drive. The streak, mistakes and settings are not copied.
  • Apple Vision Pro: the app keeps no cloud copy. Progress stays on the headset, and reinstalling the app starts it fresh. The purchase itself is tied to your Apple Account and can always be restored.

4. Information that leaves the device, and who receives it

This section lists every case in which information travels from the apps or the website to us or to another company, and names that company.

4.1 Notifications

Our iPhone and iPad apps and our Android apps use Firebase Cloud Messaging, a service of Google LLC, to deliver the news and offers we send. When one of these apps starts, it registers a notification token with Google. The token identifies the app installation on that device, not you or your child, and it is created whether or not you allow notifications on the device; if you do not allow them, no message is shown. We use the token only to deliver our notifications, we never link it to a name or a profile, we send no usage data with it, and we do not use it for advertising or for building a profile. Google holds the token while the app is installed. We do not store tokens on our own systems; we send a campaign to the apps as a group. Deleting the app ends the token's use.

The daily practice reminders on iPhone, iPad, Android and Apple Watch are scheduled by the app on the device itself and do not use the token. The Apple Watch app, the complication, the widgets, the sticker packs and the Apple Vision Pro app register no token and receive no notifications from us.

When a notification carries artwork, the app downloads the image from the web address named in the message, which is our own hosting or a content delivery service, and that server receives the device's IP address as part of the download, as with any image on the internet.

4.2 Analytics and advertising

The apps use no analytics, advertising tools or crash reporting on any platform. Earlier versions of our iPhone and iPad apps included Google Analytics for Firebase, which recorded how the app was used and basic device details under a random identifier for the app installation; updating the app removes it. The website uses analytics only after you accept cookies, as section 7 explains.

4.3 Newsletter

Nothing is sent unless a parent chooses to subscribe. In the iPhone, iPad, Mac, Android and Apple Vision Pro apps, the newsletter form sits behind the parental gate and asks for a first name and an email address. On this website, the footer form asks for an email address only. What you enter goes to Mailchimp, the email service of Intuit Inc. in the United States, which keeps it for us and sends the emails.

Together with the address, the apps label the contact with the name of the app (for example "Arabic4Kids"), the kind of device the form was used on (iPhone, iPad, iPhone Duo, Mac, Android phone, Android tablet or Vision Pro), and, on iPhone, iPad and Android, whether the app has been unlocked by a purchase, so we can send fewer offers to families who already bought. The website labels the contact as coming from the website. No child's name, progress or anything else from section 2 is ever sent.

You are subscribed as soon as you submit the form; we do not send a confirmation email first. Every email we send has an unsubscribe link. We send educational tips and news about our apps, and never pass your address to anyone else.

4.4 Purchases and subscriptions

One-time purchases, subscriptions and coin or costume packs are paid through the App Store or Google Play, which handle the payment entirely under their own privacy policies. We never receive your name, your payment details or your store account. The app receives from the store only a confirmation of what was bought and whether a subscription is active, so it can unlock what you paid for, and keeps that confirmation as described in sections 2 and 3. Apple and Google give us sales statistics that do not identify you.

4.5 The website

The website is hosted by Vercel Inc. in the United States. Like any web server, it receives the IP address and browser details of every visit to deliver the pages; Vercel keeps these request logs for a short time for security and troubleshooting.

Contact form: when you write to us through the contact page, we receive your name, email address, subject and message. They are sent to our mailbox through Resend, an email delivery service in the United States, and we use them only to answer you.

Bot protection: the newsletter and contact forms are checked by Cloudflare Turnstile, a service of Cloudflare Inc. When you submit a form, Cloudflare receives the check result and your IP address to confirm the submission came from a person. Cloudflare's script loads only when you start using one of the forms.

Videos: the videos on the home and app pages play from YouTube, a service of Google. The YouTube player loads only when you press play, and from that moment YouTube may set its own cookies under Google's privacy policy.

Animation: the home page on larger screens loads a small animation script from the jsDelivr content delivery network, which receives your IP address to serve the file, as any file download does. It is not used to track you.

Analytics: Google Analytics and Microsoft Clarity run only if you accept cookies, as section 7 explains. Links to the App Store, Google Play and our social media accounts take you to those services under their own policies.

5. Children's privacy

Our apps are made for children under 13, and we built them so that we collect as little as possible from a child. There are no accounts, no sign in, no chat, no ads, and no way for a child to make any information public. A child's name, progress and everything else in section 2 stay on your devices and in your own iCloud or Google storage, which we cannot access. The newsletter, purchases and every link out of the app sit behind a parental gate that asks the grown-up to type a number written in words.

Our iPhone, iPad and Android apps send one item about a child's use of the app: the notification token described in section 4.1, a persistent identifier that we collect solely to support the internal operations of the app, namely delivering our notifications to that installation. To make sure it is used for nothing else, we never store tokens on our systems, never link a token to a name or a profile, send no usage data with it, and use no advertising tools in the apps. The only third party that receives it is Google LLC, which operates Firebase Cloud Messaging for us. Our Apple Watch, widget, sticker and Apple Vision Pro apps send nothing at all.

As a parent or guardian you can review everything the app keeps about your child by opening the app on your device, delete it by deleting the child's profile in the app menu or by deleting the app, and refuse any further collection by turning off notifications for the app in your device settings or by deleting the app. If you believe we hold anything about your child, or you want us to delete it, email contact@studio4kids.com; we may ask you to confirm that you are the parent or guardian before we act, and we answer within 30 days.

6. How long we keep information

We keep information only as long as the purpose it was collected for needs it, and never indefinitely:

  • Notification tokens: not stored by us. Google holds a token while the app is installed on the device and discards tokens that stop being used. Our records of a campaign hold no tokens.
  • Newsletter name and email: kept in Mailchimp until you unsubscribe or ask us to delete them. When you unsubscribe, Mailchimp keeps your address on its unsubscribed list only so that we never email you again; email us if you want it removed entirely.
  • Contact form messages: kept in our mailbox while we handle your request and for as long as a follow-up may be needed, then deleted.
  • Website analytics: Google Analytics keeps the measurements for at most 14 months and then deletes them; Microsoft Clarity keeps its recordings and heatmaps for a limited time set by Microsoft. Server request logs are kept by Vercel for a short time only.
  • Everything on your devices and in your own iCloud or Google storage: for as long as you keep it. It is yours to delete at any time, as sections 2 and 3 explain.

7. Website cookies, analytics and tracking signals

This website sets analytics cookies only if you say yes. The choice you make in our cookie notice is remembered in your browser. If you accept, we load Google Analytics, a service of Google, to measure visits: which pages are viewed, from which countries, how the site performs, and which App Store links are clicked. Google's advertising features are turned off, and we never use the measurements for advertising or remarketing. If you decline, no analytics cookies are set at all, and you can change your choice at any time with the Cookie settings link in the footer. The only other cookie in our systems is a strictly necessary one used by the sign in to our content management tool, which visitors never encounter.

On the same acceptance we also load Microsoft Clarity, a service of Microsoft Corporation, which shows us how visitors move through our pages with heatmaps and recordings of clicks, scrolls and taps. Anything typed into a form is hidden from it, it is told that only analytics consent was given and no advertising consent, and like Google Analytics it is used only to improve the site. If you decline, neither tool loads.

Do Not Track: this website does not respond to "Do Not Track" or Global Privacy Control browser signals; our cookie notice is the control, and analytics stay off unless you accept. Third parties: if you accept cookies, Google Analytics and Microsoft Clarity collect information about your visits to this site over time; if you play a video, YouTube may do the same under Google's policies. Other than that, no third party collects information about your activity across websites through our site.

8. Security

We take reasonable technical and organizational measures to protect the little information we hold: every connection to the website, to Mailchimp and to Google is encrypted, we keep no databases of our own, and the services we rely on (Apple, Google, Microsoft, Intuit Mailchimp, Cloudflare, Vercel and Resend) are bound by their own privacy and security commitments. No system can be completely secure, so we cannot guarantee that information will never be intercepted or misused, but we will act promptly if we learn of a problem.

9. Your choices and rights

You can delete a child's profile in the app menu, remove everything an app keeps on a device by deleting the app, turn iCloud off for an app in your device settings, turn Google Drive backup off in the Android app and delete the stored copy in your Google Drive settings, stop notifications in your device settings, and unsubscribe from the newsletter with the link in any email. You can also ask us what information we hold about you or your child, ask us to correct or delete it, or object to how we use it, by emailing contact@studio4kids.com. We answer within 30 days, we may ask you to confirm your identity or that you are the parent, and we never treat you differently for exercising your rights.

10. If you are in the European Union, the United Kingdom or Switzerland

CreatixBox LLC is the controller of the information described in this policy. Our legal bases are: performing our contract with you, for unlocking purchases, restoring them and running the app; your consent, for the newsletter (which you can withdraw at any time by unsubscribing) and for website analytics cookies; and our legitimate interest in running and improving the apps and the website, for the notification token, the bot protection on our forms and answering your messages. We do not ask children for consent, and we do not collect personal information from children online other than the notification token described in section 4.1.

The companies that process information for us are in the United States: Google LLC, Microsoft Corporation, Intuit Inc. (Mailchimp), Cloudflare Inc., Vercel Inc. and Resend. We rely on the EU-US Data Privacy Framework and its UK and Swiss extensions where the company is certified under it, and otherwise on the European Commission's standard contractual clauses.

You have the right to access the information we hold about you, to have it corrected or deleted, to restrict or object to our use of it, to receive a copy in a portable format, and to withdraw consent at any time without affecting what was done before. Giving us information is never a condition of using the apps: the only information you must provide is what the App Store or Google Play needs to sell you a purchase, and we make no automated decisions about you. To use these rights, email contact@studio4kids.com; we answer within one month. You also have the right to lodge a complaint with your data protection authority: in the United Kingdom, the Information Commissioner's Office; in the European Union, the authority of the country where you live.

11. If you are in California

This policy identifies the categories of personal information we collect (a parent's name and email address for the newsletter and the contact form, a notification token, and website usage measurements after consent) and the categories of third parties that receive them (sections 4 and 7). We do not sell personal information and we do not share it for cross-context behavioral advertising. Section 7 states how this website treats Do Not Track signals and which third parties may collect information about your online activity. Section 12 describes how we notify you of changes to this policy, and the date at the top is its effective date.

12. Changes to this Privacy Policy

We may update this policy when the apps or the website change. When we do, we post the new policy on this page and update the date at the top. If a change is material, for example because an app starts sending something new, we also show a notice inside the apps and publish the change before it takes effect. You can always read the current version on this page.

13. Contact us

If you have any questions about this Privacy Policy, write to CreatixBox LLC at contact@studio4kids.com.