Clayberry Town — Privacy Policy

Last updated: 27 October 2026

1. About This Policy

This policy applies to the Clayberry Town mobile application for iOS and Android, a learning app for young children, published by Appfide Private Limited ("Appfide," "we," "us," or "our"), a company incorporated under the laws of India with its registered office at XXI/152 Panadans, Cochin University Post, Ernakulam – 682022, Kerala, India. Appfide is the controller (and, under India's Digital Personal Data Protection Act, the data fiduciary) for the personal data described here.

It sits alongside our company-wide Privacy Policy. Where the two differ, this app-specific policy prevails for Clayberry Town. Sections of the company policy about user accounts, sign-in, profile data, analytics and web payments do not apply to Clayberry Town.

2. In Short

No accounts, no sign-in, no names or email addresses.
No ads, ever. No analytics, tracking or advertising IDs.
Everything about your child (nickname, buddy animal, optional age band, progress, stars and stickers) stays on the device.
The app goes online only when a grown-up buys, restores or renews a Berry Club subscription, to check that purchase with our server, or when a grown-up contacts our support team from the grown-ups' area.

3. What Stays on the Device

Children's profiles (a nickname, a buddy animal and, only if a grown-up chooses, an age band), their progress, stars, stickers and the app's settings are stored only on the device. We never receive them. A grown-up can remove a child (and all of their data) in the grown-ups' area; deleting the app removes everything.

4. Berry Club: What Our Server Receives

Berry Club is an optional subscription a grown-up buys from the App Store or Google Play, behind a parental gate. To check a purchase and unlock the paid levels, the app sends our server:

The store's proof of purchase: the signed transaction Apple gives the app, or the purchase token Google gives it. Our server uses it only to ask Apple or Google for the subscription's status.
A device check. On iPhone and iPad this uses Apple's App Attest (a key held in the device's secure hardware; we receive its key identifier and Apple's attestation). On Android it uses Google Play Integrity together with a random identifier the app creates when it is installed. These let our server confirm the request comes from a genuine copy of Clayberry Town on a real device. They are not hardware serial numbers or advertising identifiers, and they change if the app is reinstalled.

Our server keeps:

A subscription record: the store's identifier for the purchase, the plan, its status and dates (including a free trial), the store region (for example, India or United States), and the price and currency the store reports.
Device records: the App Attest key identifier or random install identifier, which subscription it unlocked, and when it was last seen, so one subscription can't be shared with an unlimited number of devices.
Store notifications Apple and Google send us about renewals, cancellations and refunds.

Our server does not keep IP addresses, names, email addresses or anything about your child. It does not log IP addresses.

5. Contacting Support

Grown-ups can read answers to common questions and send our team a message from the grown-ups' area (Grown-ups → Berry Club → Contact support), behind the parental gate. It is provided by Appfide Support, our own support service, in a mode made for children's apps. Opening it creates a random support ID for this installation and sends us:

the messages a grown-up writes;
the app version, the operating system version and the device's language, so we can reproduce a problem.

In this mode the app does not send the device model, time zone, any subscription or account identifier, or anything about your child, and it cannot attach files. We do not ask for a name, email address or any account, and we never email or send notifications to the device. Please don't include your child's name or other personal details in a message.

To keep spam out, the app confirms that it is the genuine Clayberry Town: with Apple's App Attest on iPhone and iPad (we keep its key identifier), and with Google Play Integrity on Android. We never store the IP address itself, only a keyed one-way hash of it. If we have to block an installation for abuse, its IP hash and key identifier stay on a blocklist for 30 days.

A reply may first be drafted by Appfide Robot, our support assistant, which runs on systems we operate; a person on our team reviews every reply before you see it. When you write, our team gets an alert that says only that a new message arrived, never what it says. Support messages are not used to advertise to anyone or to train AI models.

You can export or delete your support conversations and the support record for this installation at any time in support under Your data: Export my data gives you a copy you can save or share, and Delete my data removes it. Deleting the app removes the support ID from the device.

More detail on how support handles data is in the Appfide Support privacy notice. Its section on apps for children applies to Clayberry Town.

6. Who Processes Data

Apple and Google: the purchase itself, under their own privacy policies, and the device checks (App Attest, Play Integrity).
DigitalOcean: hosts our server and database in the United States.
Cloudflare: protects and carries traffic to our server; it sees connection details such as IP addresses in transit only.
Support runs on our own Appfide Support service, run with cloud hosting and network providers acting as our processors.
Telegram: our team gets short internal alerts about subscription events (for example, "trial started, yearly plan, India"). They contain no identifiers.

We do not sell or share data for advertising, and never will.

7. Why We Use This Data (Legal Bases)

To provide what a grown-up bought (performance of our contract): checking a Berry Club purchase with Apple or Google, unlocking the paid levels on the device, restoring a subscription, and answering support requests.
Our legitimate interests, balanced against yours: keeping the service secure (the App Attest and Play Integrity device checks, rate limiting) and stopping one subscription from being shared with an unlimited number of devices.
Legal obligations: keeping records of purchases and refunds as tax and accounting laws require.

We do not rely on consent for anything, because nothing about your child is collected. We make no decisions about anyone based solely on automated processing.

8. Children

Clayberry Town is made for children. We do not knowingly collect personal information from children: the app has no accounts, no chat, no ads and no third-party analytics, and nothing a child types or does in the app leaves the device. Purchases, the grown-ups' area, contacting support and external links sit behind a parental gate. We follow the App Store's Kids Category rules, Google Play's Families Policy, the US Children's Online Privacy Protection Act (COPPA) and India's Digital Personal Data Protection Act, 2023.

9. Data Retention

Device records: deleted 120 days after last seen.
Store notification records: deleted after 7 days.
Support conversations: deleted 30 days after the conversation is resolved, or at once when you choose Delete my data.
The support record for an installation (its random support ID, platform, app and system version, IP hash and App Attest key identifier): deleted once it has no conversations left and has not been used for 30 days, or at once with Delete my data.
Deleted data may remain in our backups for up to 7 days.
Subscription records: kept while the subscription exists and afterwards for as long as accounting and tax law require.

10. Deleting Your Data

On the device: remove a child (and all of their progress) in the grown-ups' area, or delete the app to remove everything.
On our server: device records delete themselves 120 days after a device was last seen, and store notifications after 7 days. To have a subscription record and its device records deleted sooner, email [email protected] with the order or transaction ID from your App Store or Google Play receipt. We keep only what tax and accounting law require.
Support conversations: in support, choose Your data → Delete my data (or Export my data for a copy first).
Deleting data does not cancel a subscription: cancel it in your App Store or Google Play account.

11. Security

Traffic to our server is encrypted (HTTPS). The database is reached only over encrypted connections. On the device, the unlock key and purchase proof are kept in the system's secure storage (the iOS Keychain, or encrypted with an Android Keystore key).

12. Your Rights

Wherever you live, you can delete everything on the device yourself (section 10). For anything else, email [email protected]. Because we hold no names or contact details, please include the order or transaction ID from your App Store or Google Play receipt so we can find the records linked to it. We will not ask for more information than we need to verify your request. We respond within 30 days, or sooner where the law requires it, and we will not treat you differently for exercising your rights.

European Economic Area, United Kingdom and Switzerland

Under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection you have the right to access your personal data, to correct it, to have it erased, to restrict its processing, to data portability and to object to processing based on our legitimate interests. You may also complain to your local data protection authority — in the UK, the Information Commissioner's Office.

California (CCPA/CPRA) and other US states

In the last 12 months we have collected these categories of personal information, for the purposes described above: identifiers (the App Attest key identifier, the random install identifier and the random support ID), commercial information (subscription and refund records) and the content of support messages a grown-up sends us. We disclose them only to the service providers in section 6. We do not sell or share personal information, and we do not collect sensitive personal information. You have the right to know what we collect, to access, correct and delete it, and not to be discriminated against for using these rights. You may use an authorised agent; we may ask the agent for proof of authority.

India (Digital Personal Data Protection Act, 2023)

You have the right to a summary of your personal data and of how it is processed and with whom it is shared, to correct, complete, update and erase it, to nominate someone to exercise your rights in the event of your death or incapacity, and to grievance redressal. Please raise any grievance with us first at [email protected]; if you are not satisfied with our response, you may complain to the Data Protection Board of India.

Brazil (LGPD)

You have the right to confirmation that we process your data, to access it, to correct incomplete, inaccurate or outdated data, to anonymisation, blocking or deletion of unnecessary or excessive data, to portability, and to information about the entities we share it with. You may also complain to the Autoridade Nacional de Proteção de Dados (ANPD).

13. International Transfers

Appfide is based in India, and our server and database run in the United States. Apple, Google and our other service providers may process data in other countries where they operate. Where the law of your country requires it, we protect these transfers with appropriate safeguards — such as the European Commission's standard contractual clauses (with the UK Addendum for UK data), the standard contractual clauses approved by Brazil's ANPD, and our providers' data processing agreements. Contact us for more information about these safeguards.

14. Changes

We may update this policy from time to time. Changes will be posted here with a revised "last updated" date and, where it matters, noted for grown-ups in the app. If we ever wanted to collect anything more, the policy would say so here first.

15. Contact

Privacy questions and requests: [email protected]
Anything else: [email protected]
Appfide Private Limited, XXI/152 Panadans, Cochin University Post, Ernakulam – 682022, Kerala, India.

See also the Clayberry Town Terms of Use and Support.