Privacy Policy

Readino

Readino is a learning-to-read app for children aged 3 to 8, for iOS and Android, with a web sign-up at get.dinominds.com/readino.

Setting up the app: during onboarding you may enter your child's name or nickname, age, gender and avatar and answer a few questions about their reading. Without an account, this stays on your device and is used to personalize the reading experience.

A Readino account: you can create one with your email address to save your child's progress and use Readino on up to two devices, or to use a subscription you bought on our website. Besides what section 2 lists, a Readino account keeps:

• Your child's profile and progress: name or nickname, age, gender, avatar, the lessons and activities completed, level and reading streak.
• Security information about each login: the IP address and app version, used to protect your account.

Children and the grown-up check: the information about a child in Readino is a name or nickname, age, gender, avatar and reading progress. Settings (including the account) and the ways to contact us are behind a grown-up check. The first-time setup, including subscribing, is meant to be completed by the parent, and purchases go through Apple's or Google's own payment screen.

Measuring our ads in the app: we use the Meta (Facebook) SDK to measure our ad campaigns. It sends standard events such as app opened, content viewed, checkout started and purchase, with your device's advertising identifier (on iOS, only if you allow tracking). It also sends basic crash and performance information about the app. On iOS, Apple's "Allow Tracking" prompt lets you decide whether this may be linked to your activity in other apps and websites, and you can change it at any time in your device settings. On Android, the Meta SDK stays off unless the parent confirms during onboarding that they are 18 or older.

We also use the TikTok SDK in Readino's Android app to measure our ad campaigns on TikTok. It sends standard events such as app installed, app opened, content viewed, checkout started and purchase, with your device's advertising identifier, and, like the Meta SDK, stays off unless the parent confirms during onboarding that they are 18 or older. The iOS app does not include the TikTok SDK.

Measuring our ads on the web sign-up: Readino's web sign-up loads the Meta Pixel, and our server sends events to Meta's Conversions API, for every visitor, unless your browser sends a Global Privacy Control signal. The Meta Pixel and Meta's Conversions API may record that a visit led to a sign-up or purchase, using cookies (such as _fbp and _fbc), a random identifier our sign-up keeps in your browser, your IP address, browser details and a scrambled (hashed) copy of your email address. When your browser sends Global Privacy Control, the sign-up does not load the Meta Pixel and our server sends Meta nothing about your visit. To opt out, turn on Global Privacy Control in your browser. You can also block or delete cookies in your browser settings, and choose how Meta uses this information to show you ads in your Facebook or Instagram ad preferences.

Deleting a Readino account: in the app, Settings → Account → Delete account. Without the app, use the form at dinominds.com/delete-account/readino, which also lists what is deleted and what is kept.

DinoPals

DinoPals is a playroom of toys for children aged 2 to 8, for iOS and Android.

Setting up the app: during setup you may enter your child's age, what matters most to your family, your child's name (optional), what your child loves and what you would like them to learn. Without an account, this stays on your device and is used to pick toys for your child.

What your child makes: drawings and other creations from the toys, and where your child left off in each toy, are saved in the app on your device. A grown-up can see, share or delete saved drawings in the grown-ups area. None of this is sent to us.

A DinoPals account (optional): you can create one with your email address, so your child's setup follows you to your other devices and your subscription works on each of them. Besides what section 2 lists, a DinoPals account keeps your child's profile (name, ages, what they love and what you would like them to learn), what matters most to your family, your child's dino avatar, the toys picked for them and the app's sound and music settings.

Purchases: DinoPals is sold only through the App Store and Google Play. It has no web sign-up.

No advertising or tracking tools: DinoPals includes no advertising, attribution or analytics tools and does not ask to track you.

The grown-up check: the grown-ups area (settings, the account, your subscription and the ways to contact us), the links in it and every purchase are behind a grown-up check. The first-time setup, where you can also create an account or log in, is meant to be completed by a parent.

Deleting a DinoPals account: in the app, open the grown-ups area, then Account → Delete account. Without the app, write to privacy@dinominds.com from the account's email address. dinominds.com/delete-account/dinopals lists what is deleted and what is kept.

HypeCraft

HypeCraft is a building guide for Minecraft, for iOS and Android, made for players aged 13 and over: builds to follow step by step, seeds and an ore finder, and on iPhone and iPad, AI tools for photos of your builds.

No account: HypeCraft has no accounts and asks for no personal details. During setup it asks a few questions about how you play Minecraft (such as your edition, platform and level, and what you want to do in the game). The answers are not saved or sent anywhere.

On your device: HypeCraft keeps your favorite builds, your language, how many times the app has started, whether you have subscribed, the ore finder's last search, the builds and pictures it has downloaded, and a list of the purchases already reported to the ad measurement tools below, so none is reported twice. Your phone's own backup (iCloud or a computer on iPhone and iPad, your Google account on Android) can include some of this, if backup is on. On Android, that copy stays in your Google account after you delete the app and comes back if you reinstall it, and in versions with Google Analytics it can include Firebase's identifier for the installation; a phone-to-phone transfer can also move the ad measurement tools' identifiers to the new phone.

Builds and pictures: when you open HypeCraft or come back to it, it checks ssspiral.com, where Cloudflare stores its builds for us, for new builds. It downloads the pictures of the builds and seeds shown in its lists as they appear, and a build's steps and pictures when you open it. These requests carry no account or advertising identifier, but, like any web request, they include your IP address, they name the app's version and your system's version, and they show which builds and seeds you look at. We use them to deliver the builds and to see which versions of the app are in use.

Ore finder: for subscribers. When you tap Find, the app sends the seed of your Minecraft world, its edition and version, the position you typed (X, Y and Z in the game, not your real location) and the ore you are looking for to our ore finder service, which Vercel runs for us. The service looks the ores up on orefinder.gg, a website for Minecraft players, which gets the seed, version, position and ore from our service but nothing about you or your device. Our service sees your IP address and, as with any web request, basic details such as the app's or the system's version (on Android, also your phone's model), and Vercel keeps logs of these requests.

AI tools (iPhone and iPad): for subscribers, AI Material Finder, Rate My Build AI and AI Step By Step look at a photo of a build. When you pick a photo from your library, the app sends a compressed copy of it, whatever it shows, with an instruction for the tool and the app's language, to AIProxy, which passes it to OpenAI's GPT-4o mini model. Please pick photos of your builds, not of people. The answer (the blocks needed, a rating with tips, or building steps) is shown in the app and not saved. The request also carries your IP address, an identifier Apple gives to apps from the same developer (the IDFV) and a check from Apple that it comes from a real device. The app gets only the photo you pick, not your library, and does not use the camera. AIProxy keeps a record of each request for us, such as its IP address and whether it worked, for 30 days, and OpenAI may keep the photo and the answer for up to 30 days to check for misuse (longer if a photo is flagged for review or the law requires it). The Android app has no AI tools.

Purchases: HypeCraft is sold only through the App Store and Google Play, which handle the payment. We never see your card details and keep no payment records of our own. It has no web sign-up. Apple or Google tell the app what you bought, and the app reports purchases to the ad measurement tools below. On Android, Google Play's billing library in the app also sends Google its own diagnostic logs.

Ratings: HypeCraft sometimes asks Apple or Google Play to show their rating prompt, for example at the end of a list or a tutorial, and on Android during setup. Apple or Google decide whether it appears. A rating or review you leave goes to them, under your Apple or Google account, and the app is not told what you wrote.

Measuring our ads in the app: HypeCraft uses the tools section 3 lists for it, for everyone who uses the app, whatever their age, from the first time it is opened. On iPhone and iPad, Apple's "Allow Tracking" prompt, on the first setup screen, asks whether HypeCraft may track you, that is, link what you do in it with what you do in other companies' apps and websites for advertising. You can change your answer at any time in Settings → Privacy & Security → Tracking. If you don't allow tracking, the tools don't get your device's advertising identifier, and Meta, TikTok and Google are told your choice. On an Apple Account for a child or for someone under 18, iOS keeps tracking off and does not show the prompt. Whatever the answer, the tools still send the events below, without the advertising identifier if tracking is off but with the other identifiers described below. On Android there is no prompt and no switch in the app: unlike Readino, HypeCraft does not ask whether you are 18 or older, and the tools send your device's advertising ID unless you delete it in your device settings.

Each of these tools also receives your IP address, from which it can work out your general location (such as your country, region or city); HypeCraft does not use your device's location services. When a subscription starts with a free trial, the tools are told about a purchase, at the plan's price, when the trial starts. In the European Economic Area, the United Kingdom and Switzerland, these tools start as they do everywhere else: only Google, in the versions that use it, is told that you have not consented to advertising uses (below); Meta, TikTok and Appstack get no such signal. On Android, the system can also start HypeCraft in the background without you opening it, for example to finish confirming a purchase with Google Play. It then starts as it does when you open it: it checks for new builds, these tools start, and TikTok's SDK records an app opened.

The Meta (Facebook) SDK, on iOS and Android, measures our ads on Facebook and Instagram. It sends app installed and app opened events when the app opens on its welcome screens, which subscribers skip (on iPhone and iPad, after the tracking prompt, whatever the answer, and with how long the app is used), and paywall viewed, checkout started and purchase, with the product, price, currency and the store's transaction number (on Google Play, the order number; on iPhone and iPad, renewals and restored purchases too). With them go an identifier the SDK creates for the installation, your device's advertising identifier (on iOS, only if you allow tracking) and device details such as model, system version, language, time zone, mobile carrier, screen size and free storage, and Meta sees your IP address. On Android it also reads Google Play's install referrer and, if the Facebook app is on the phone, the Facebook app's attribution ID, which lets Meta link these events to a Facebook account. On iPhone and iPad, Apple can also tell Meta, without saying who you are, that one of its ads led to an install (Apple's SKAdNetwork).

The TikTok SDK, on iOS and Android, measures our ads on TikTok. It sends app installed, app opened (including whether you come back the day after installing), paywall viewed, checkout started and purchase, with the product and its name, price, currency and the store's transaction number. With them go an identifier the SDK creates for the installation, your device's advertising identifier (on iOS, only if you allow tracking), your device's model, system version, language and IP address, its browser's user agent and your tracking choice (on Android, whether you limited ad tracking); on iOS also the IDFV; and on Android also the network type, screen size and Google Play's install referrer.

Meta and TikTok combine these events with what they receive from other apps and websites, may match them to a Facebook, Instagram or TikTok account, and use them to measure ads and to choose which ads to show people, including you, in their apps and elsewhere (section 5 says who is responsible for what). If you have a Facebook or Instagram account, you can choose how Meta uses activity from other businesses for ads in Accounts Center, under Ad preferences; TikTok has its own ad settings and takes privacy requests too.

The app leaves some features of these two SDKs available, and Meta or TikTok decide from their side whether they run: for example Meta logging purchases by itself when its automatic events are on (on iPhone and iPad, the app turns them on after the tracking prompt), or TikTok recording which screens are shown and which buttons are tapped, with their text (the app does not switch this off). On Android phones with Android's Privacy Sandbox, Meta's SDK (and, in versions with Google Analytics, Google's) can also use it to record which ads led to installs or purchases, and Meta's can add the phone to Meta's ad audiences and read the ad topics Android has picked for it, if Meta switches this on; you can turn these off in your phone's Ads settings, under Ad privacy. Both SDKs can also report crashes in their own code.

Google Analytics for Firebase, from version 1.4.4 on iOS and in Android versions released on or after November 5, 2026, is linked to Google Ads and measures our ads on Google, including YouTube. Only the versions we publish in the stores use it. It sends identifiers Firebase gives the installation, your device's advertising identifier (on iOS, only if you allow tracking) and, on iOS, the IDFV; general location, such as your country, region or city, which Google works out from your IP address (the app does not use your device's location services); your device model, system version, language and app version; on Android, Google Play's install referrer; and events such as first open, sessions and time in the app, app updates, in-app purchases and subscription renewals that Firebase logs by itself, on Android also when the app is removed or its data cleared, and paywall viewed, checkout started and purchase, with the product and its name, price, currency, the store's transaction number and, on iOS, whether it starts a free trial. Google uses this to tell us which ads led to installs and purchases, and Google Ads uses those results to decide who is shown our ads. In the European Economic Area, the United Kingdom and Switzerland, the app tells Google that you have not consented to the use of your data for advertising or to personalized ads, so Google does not use it to personalize ads and limits how it is used for advertising. The app has no setting to change this, and the events are still sent to Google Analytics there. Google Analytics keeps this event data for us for 14 months. On iOS, Google's package also includes its on-device conversion measurement, which Google says works from temporary, de-identified signals.

The Appstack SDK, only in iOS versions 1.4.2 and 1.4.3 (we removed it in 1.4.4), is an attribution service that works for us. It tells Appstack about the install and, after the tracking prompt (whatever the answer, or straight away when iOS does not show it), sends it Apple's ad attribution token, which says whether an Apple Ads ad led to the install. It also sends paywall viewed, checkout started and purchase, with the product, price, currency, subscription period and transaction number. With them it can send identifiers it keeps for the installation in your device's keychain, which may remain after you delete the app and one of which may be copied to your other devices through iCloud Keychain; the IDFV; your advertising identifier (only if you allow tracking); an identifier the App Store gives your download of the app; and device and network details such as model, system version, screen, time zone and connection type (for example Wi-Fi, mobile data or VPN). Appstack sees your IP address, may store this in the United States, and may pass the events on to Meta, TikTok or Google to measure our campaigns.

No grown-up check: made for players aged 13 and over, HypeCraft has no age question and no grown-up check. Its settings, its ways to contact us and its subscriptions are open to whoever uses the app, and purchases go through Apple's or Google's own payment screen. Section 4 says more.

Contacting us: HypeCraft's help, build and seed request and feedback buttons, and the "Deleting? Tell us why." shortcut you see when you press and hold its icon, open a message to support@dinominds.com, in the app or in your mail app; in iOS versions before 1.4.4 and Android versions released before November 5, 2026, they write to ssspiralstudio@gmail.com or, in the oldest versions, another Gmail address, HypeCraft's earlier support addresses, which also reach us. The "Deleting? Tell us why." and feedback messages already name your device's system version and the app's version, and the feedback message how many times the app has started. Nothing is sent until you send it. For privacy questions, write to privacy@dinominds.com.

Your choices and your data: HypeCraft has no account to delete, and we keep no account or profile for you. Deleting the app removes what it kept on your device, except a copy in your phone's own backup and, in iOS versions 1.4.2 and 1.4.3, Appstack's identifier in your keychain. To limit what the ad measurement tools receive, turn off Allow Tracking on iPhone and iPad, or delete your advertising ID on Android (Settings → Google → Ads, or Settings → Privacy → Ads on some phones; resetting it only gives you a new one). The events above are still sent without it, with the other identifiers the tools create, and on Android Meta may still receive the Facebook app's attribution ID. Google Analytics and Appstack keep the app's events for us, linked to identifiers for your installation, not to your name or email: write to privacy@dinominds.com and we will help as far as we can tell which installation is yours, including having its data deleted. Meta, TikTok and Google Ads also keep what they received as their own data, under their own terms and privacy policies, and if you have a Facebook, Instagram, TikTok or Google account, you can choose there how they use activity from other apps for ads.