1. Who we are
Whimsical is operated by Handrianto, based in Singapore. This policy covers the Whimsical iPhone and iPad app and whimsicalapp.tech. It explains our handling of information and the separate services used by the app.
Whimsical does not require a parent or child account on our servers. A local child profile is a household record, not an online account with us.
2. Your household data
The app stores child nicknames, age bands and avatar choices; collection approvals and custom collections; favourites and reactions; viewing history and progress; routines, limits, exclusions and related reports. These records make the family features work and are stored locally on your device. Use a nickname rather than a child’s full legal name. The app does not need a date of birth, address, school, or child contact details.
If you have Whimsical Plus and enable private iCloud sync, eligible household records also synchronize through Apple’s CloudKit private database associated with your Apple Account. They are not sent to Whimsical’s catalogue backend or made available in our administration portal. Apple operates iCloud under its Privacy Policy and your account settings.
Your parent PIN verifier and authentication settings stay in the device’s Keychain. Biometric data is handled by iOS; Whimsical does not receive your face or fingerprint templates. Daily usage enforcement and current viewing sessions are device-local. Private sync is separate from device backup; Apple device backups may also contain app data, depending on your settings.
3. Catalogue requests, this website, and diagnostics
The app retrieves public catalogue information such as video descriptions, collections and artwork. Those requests do not include child nicknames, profile or household identifiers, viewing history, routines, favourites, purchase entitlements, or private CloudKit identifiers.
Network delivery necessarily exposes connection information, including an IP address, to the serving infrastructure. The catalogue uses short-lived network information for rate limiting and service protection. Our application diagnostics use operational categories rather than household payloads. The public website and catalogue edge do not retain HTTP access logs in the current deployment.
This website does not use analytics, advertising pixels, cookies, forms, or third-party fonts. Opening a link to another service is subject to that service’s own practices. Whimsical does not sell personal information or use household information for advertising, fingerprinting, session replay, or child-tracking analytics.
Local troubleshooting logs remain on your device and exclude child names, profile identifiers, viewing associations and private CloudKit record identifiers. The operating system manages their retention; Whimsical does not forward these logs to Firebase.
Automatic crash reporting
Versions with crash reporting enabled use Google Firebase Crashlytics to help us identify and fix app failures. New crash collection starts automatically after the parent accepts the current disclosures and completes setup or authorizes Parent Mode. Firebase receives crash traces, app and device information such as app version, device model and operating-system version, installation and session identifiers, and technical session events, including when no crash occurs. The app’s Diagnostics & Privacy screen shows whether reporting is active in this session. Technical reports saved by an earlier enabled version may still be sent automatically on launch, before setup or acceptance of a newer policy, during reset recovery, or in a version where new reporting is inactive.
Reporting is automatic in enabled versions; there is no separate in-app reporting switch. Installation and session identifiers allow Firebase to distinguish installations and sessions when measuring app stability. These reports are not anonymous simply because we do not attach a name or account.
We do not add child names, profile identifiers, viewing history, video-viewing associations, private CloudKit record identifiers, or other family information to reports. We do not use Google Analytics, advertising identifiers, session replay or custom user identifiers with this integration. Technical reports go to Google Firebase, not to Whimsical’s catalogue backend.
Firebase retains crash traces and associated installation identifiers for 90 days before beginning deletion. Deleting household data does not delete reports already sent or stop reporting in the running app. Google processes this information to provide the service, potentially outside your country. See Firebase’s privacy and data-processing information. Contact us about privacy requests using the details below.
4. Apple and RevenueCat subscriptions
Apple processes App Store payments. We do not receive your payment card details. Whimsical uses RevenueCat to check purchases, restore purchases, and determine access to Plus features.
RevenueCat processes purchase and transaction information, subscription status, an app-generated anonymous purchase identifier, and technical information needed to provide the service, such as app/platform versions and network information. “Anonymous” here does not mean that purchase records cannot be associated with that identifier. This processing can occur when the app checks subscription status, even before a purchase.
We do not send child profiles, nicknames, viewing history or household settings to RevenueCat. The app disables RevenueCat’s automatic device-identifier collection and optional diagnostics, and does not set child-identifying subscriber attributes. Purchase information may be available to us in RevenueCat’s subscription administration tools; it is separate from Whimsical’s catalogue backend.
See RevenueCat’s Privacy Policy and Apple’s Privacy Policy. Deleting household data does not delete the providers’ transaction records or cancel a subscription.
5. YouTube playback and third-party content
Whimsical uses YouTube API Services and YouTube’s official embedded player. When the player or YouTube-hosted images load, your device connects to Google/YouTube. They can receive technical and playback information, including IP address, device/browser information, requested video identifiers and player interactions, and may use cookies or similar technologies under their policies.
YouTube may serve advertisements and other player elements. Whimsical does not remove or replace ads, and reviewing a catalogue video does not mean that we can guarantee every third-party playback element. Whimsical does not send your child’s local nickname or profile identifier to YouTube. We do not ask for Google credentials or request access to your private YouTube account, playlists or subscriptions.
Read the Google Privacy Policy and YouTube Terms of Service. You can manage Google account permissions in Google’s security settings; Whimsical does not require an authorized Google-account connection.
6. Children’s privacy and parental control
Whimsical is intended to be set up and managed by a parent or guardian. Kids Mode uses local profiles and parent-assigned collections. Purchases, household settings and the app’s legal links are in parent-facing flows. We do not provide child accounts, chat, uploads or an open search of YouTube.
The absence of household records on our backend does not mean that third-party services process no information. Please review the crash reporting, YouTube and subscription sections before allowing a child to use the app. Parental gates are access controls; they are not a claim that all legal consent requirements have been satisfied.
If you believe a child has sent personal information to us through support, contact us so that we can investigate and remove information that should not be retained. Please do not include a child’s name, image, or viewing history in an initial request.
7. Retention and deletion
Household records remain on your device and, where enabled, in private iCloud storage until you remove them using the app’s controls or applicable device/account controls. In Parent Mode, open Privacy & Data to clear a child’s watch history, delete a child profile, or delete all household data. See our data deletion guide for the differences.
Cloud deletion may remain pending if iCloud is unavailable or the required Apple Account is not accessible. The app shows pending cleanup and retries when possible. Turning off sync alone does not delete previously synchronized records, and removing the app alone should not be treated as deleting all cloud data. Device backups and third-party purchase records are governed by the relevant provider’s settings and retention policies.
If you email us, we receive your email address and whatever you include. We use this information to answer you, address privacy requests and resolve problems. We retain correspondence only while needed for those purposes and applicable legal obligations, then delete it. It is not added to the catalogue database. You may ask us to delete support correspondence. Avoid sending sensitive household information; redact screenshots before sharing them.
8. Your choices, rights, and safeguards
You can choose whether to enable private sync, manage local permissions, delete household data, and stop using the app. We cannot retrieve your private household records from the catalogue backend because they are not held there. We can help explain the controls and handle requests about information you sent directly to us.
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a copy of your information, withdraw consent, or complain to a data-protection authority. For Singapore privacy requests, you may ask for access or correction and withdraw consent with reasonable notice, subject to applicable exceptions. Contact our privacy contact below; we will explain any consequences of withdrawal and address complaints. You can also contact Singapore’s Personal Data Protection Commission. Contact us to exercise applicable rights. We may need proportionate verification of a request; do not send identity documents or child information unless we explain why they are necessary.
We use transport security, device security features and restricted operational access to protect information. No system guarantees absolute security. Apple, Google, RevenueCat and email providers may process information in countries other than your own under their respective privacy arrangements.
9. Contact and policy updates
For privacy questions or requests, contact legal@whimsicalapp.com. The operator is Handrianto, based in Singapore.
We will publish changes on this page with an updated effective date. Where a change requires additional notice or consent, we will provide it through an appropriate parent-facing process before applying that change.