Privacy Policy

Last updated: May 31, 2026

The short version: Tonguelet collects no personal data. Everything you log lives only on your iPhone. There is no account, no cloud, no analytics, and no advertising. We have no servers that hold your data, so we cannot see it — ever.

Tonguelet — Heritage Language Hour Tracker ("the App") is published by Bulpara Inc ("we", "us", "our"). This policy describes how the App handles information when you use it. The App's App Store privacy label is Data Not Collected.

1. Data You Create Stays on Your Device

Your family's data never leaves your iPhone. Children, languages, logged exposure entries, weekly bands, presets, and history are stored locally on your device using Apple's SwiftData.
The App does not upload, transmit, stream, or store your data on our servers. We do not operate any server that receives your content.
An on-device App Group container shares this week's summary with the optional home-screen widget. This stays on your device and is never transmitted.
Your data is removed when you delete the corresponding entry inside the App, or when you delete the App from your device.

2. What We Store Locally

Children & languages: The names, optional photos, and per-language target bands you enter. Photos you attach are copied into the App's private sandbox.
Exposure log: Minutes, dates, source tags (caregiver, grandparent, reading, media, school, music, play), and any notes for each logged moment.
Preferences: Your bands, presets, reminder settings, theme, and lock preference.
Purchase status: Subscription state is managed by Apple's StoreKit and cached locally for feature gating.

3. No Analytics, No Tracking, No Ads

Tonguelet contains no third-party analytics SDKs, no advertising SDKs, no crash-reporting services, and no tracking of any kind. The App makes no network requests to us. It does not use the Advertising Identifier (IDFA), and it does not ask for App Tracking Transparency permission, because it tracks nothing.

4. Permissions We Request

Notifications (optional): Only if you turn on gentle reminders or the weekly check-in. You can disable them anytime in iOS Settings.
Photo Library (optional, read-only): Only when you choose to add a photo for a child. We access only the photo you pick via the iOS photo picker — we do not enumerate your library.
Face ID / Touch ID (optional): Only if you turn on the App Lock. Authentication is handled by iOS; we never see your biometric data.

5. Third-Party Services

The App relies on a single Apple service:

Apple App Store / StoreKit: Manages the optional Premium subscription and purchases. Purchase verification uses Apple's secure StoreKit framework and is governed by Apple's privacy policy.

There are no other third-party services. No advertising networks, no data brokers, no social SDKs.

6. Data Sharing

We do not sell, rent, or share your personal data, because we never receive it. Any sharing of your data — for example, exporting a CSV backup or a PDF progress report to a partner, grandparent, or speech therapist — is initiated by you, through the iOS share sheet, and goes only where you send it.

7. Your Rights & Control

You are always in control:

Edit or delete any child, language, or logged entry inside the App at any time
Export everything as a CSV backup whenever you want — your data is never held hostage
Delete the App to remove all local data, history, and preferences from your device
Disable Notifications, Photo access, and Face ID from iOS Settings at any time
Contact us with any data-handling question at privacy@bulpara.com

8. Children's Privacy

Tonguelet is a tool for parents to log their child's language exposure; it is not directed at or used by children, and it is rated 4+. Because the App collects no personal data and transmits nothing off-device, there is no collection of data from children by design. The information you enter about your child stays on your own device under your control.

9. Data Security

All data is stored locally within the App's private sandbox on your device, protected by iOS app sandboxing.
You can add an optional Face ID / passcode lock for an additional layer of protection.
Because nothing is transmitted to or stored on a server, there is no remote database to breach.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

11. Contact Us

If you have questions about this privacy policy, contact us at:

privacy@bulpara.com