COPPA notice to parents

The operator of Earbunny is Omnibus, Ltd., postal address and telephone number available on request at the email below. Email privacy [at] earbunny.app or use the contact form. We are the only operator collecting personal information from children through Earbunny.

We never collect your child's email, phone number, photos, contacts, messages, voice or microphone audio, or what they listen to, and we use no advertising identifiers. The camera only reads the pairing QR code and stores no image. We never ask a child for more information than an activity needs.

• Only a parent can add a child. You do this from your own parent account, which is protected by a password and a one-time code sent to your email (or by Sign in with Apple).
• When you add a child under 13, we show this notice and ask you to confirm that you are the parent or legal guardian, type your full name and agree.
• We record who consented, for which child, when, and from which device and IP address.
• Only after that can you create the 6-digit code or QR code that pairs your child's phone. Without your consent, nothing is collected from your child.
• If you later add a new feature or we want to use data in a new way, we ask for your consent again first.

We use your child's information only to provide Earbunny to your child and to you: measurements, alerts, reports, goals and lost-earbud help, and to keep the service secure and working.

• No advertising of any kind, and no behavioral or targeted advertising.
• No profiling, no data sale, no third-party analytics or tracking in the app.
• No hidden monitoring: your child always sees that monitoring is on and who can see their data.

• You, and a second parent only if you invite one.
• Your child's friends see only a display name and weekly points in the league, and only if you turn friends on (it is off by default).
• Schools you invite see only anonymous class averages, never your child's name, and only with at least 10 students reporting.
• Service providers that run the service for us under contract and may use the data for nothing else: hosting in the EU, push notifications (Apple, Google), App Store billing (Apple), email delivery, and crash and log monitoring. The current list is in the subprocessor list.
• Authorities, only when the law requires it or to protect someone's safety.

We do not disclose your child's information to any other third party. If that ever changed, we would ask for your separate consent first, and you could say no and still use Earbunny.

At any time, and free of charge, you can:

• Review your child's information — in the app, or with Settings → Download my data.
• Delete it — delete your child's profile in the app, which deletes their data, or ask us.
• Refuse further collection — turn off a feature or permission, unpair the phone, or withdraw consent; we then stop collecting. You can agree to collection without agreeing to any disclosure to third parties.

You can also write to privacy [at] earbunny.app. We first check that you are the child's parent, usually by asking you to write from the email on your parent account.

We keep a written information security program: encryption in transit and at rest, servers in the EU, strict access rules (a child's data is visible only to the child and linked parents), two-step verification and access logs for our staff, and a yearly review. Details on our security page.

Our data retention policy for children's information:

We keep children's information only as long as needed for the purpose it was collected for, never indefinitely, and delete it securely.

Read the full privacy policy and the children's notice you can read together with your child. Questions: privacy [at] earbunny.app.