Privacy Policy
Scoopio is a news app for children aged 8–12. We collect as little as we can, we never show ads or use trackers, and parents stay in control. This policy explains exactly what we keep and why.
For kids: the short version
- We only know your nickname, your reading level and your avatar. Not your real name, your face or where you live.
- We remember which comics you read so we can show your streak, your badges and your world map.
- We never show you ads, and we never sell anything about you.
- Your grown-up can see your information, download it or delete it at any time.
- Got a question? Ask your grown-up to write to us. We're happy to help!
1. Who we are
Scoopio is run by Reva Solutions Limited, a company registered in Hong Kong (address: Unit 506, 5/F, New World Tower 1, 18 Queen's Road Central, Central, Hong Kong). We decide how personal data in Scoopio is used, which makes us the “data user” under Hong Kong's Personal Data (Privacy) Ordinance (PDPO) and, where it applies, the “controller” under UK or EU data protection law. “We” and “us” in this policy mean Reva Solutions Limited.
This policy covers the Scoopio iPad app and this website.
2. What we collect
About the parent (the account holder)
| Information | Where it comes from | Why |
|---|---|---|
| Sign-in ID and email address from Apple or Google. With Apple, this can be a private relay address that hides your real email. | Apple or Google, when you sign in | To create your account and let you sign in on other iPads. We don't send marketing emails. |
| Your first name, if Apple or Google shares it. With Google, your profile picture link may also be shared. | Apple or Google | To greet you in Parent Corner. You can sign in without sharing a name. |
| Subscription status (for example “Scoopio Plus, active until…”) and Apple's transaction reference | Apple | To unlock Plus for your family. We never see your card or payment details. Apple handles all payments. |
| Messages you send us | You | To answer your questions. |
About each child (a profile under the parent's account)
| Information | Why |
|---|---|
| A nickname chosen by the parent (it doesn't have to be a real name) | So each child can find their own profile |
| Reading level (ages 8–9 or 10–12) | To show stories in the right words |
| A 4-digit profile PIN, stored only in a scrambled (hashed) form. We can't read the PIN itself. | So brothers and sisters each open their own profile |
| Avatar choices (a cartoon character built from our parts, never a photo) | For the child's “Scooper” avatar |
| Reading history: which comics were finished and when, including the story's place (for example “Amazon rainforest, Brazil”). This is never the child's own location. | Reading streaks, badges, the world map and “done for today” |
| Saved comics, and the family's daily free comic pick | To keep saved comics and apply the free plan |
Technical information
When the app talks to our servers, our hosting provider records basic technical logs, such as IP address, time and the request made. We use these only to keep the service secure and working, and they are deleted automatically (see section 8). The app keeps a copy of your family's data on the iPad so children can read offline.
3. What we never collect
- Children's real names, birthdays, photos, voices or contact details
- Precise or approximate location from the iPad (GPS) or contacts
- Advertising identifiers, or any data used for advertising
- Data from third-party analytics, tracking or advertising tools. Scoopio has none.
- Anything typed or said by a child to other people. Scoopio has no chat, comments or sharing between users.
4. How we use it
- To run Scoopio: sign-in, child profiles, daily issues, saved comics, streaks, badges and the world map.
- To sync your family's iPads, so a child's progress shows up on any iPad you sign in on.
- To provide subscriptions through Apple.
- To keep Scoopio safe and working: preventing misuse and fixing problems.
- To answer you when you contact us.
We do not use anyone's data for advertising, and we do not sell, rent or trade it. We do not build profiles to predict or influence behaviour, and we do not use children's data to train AI. If we ever want to use information in a new way, we will ask first where the law requires it.
If UK or EU law applies to you, we rely on these legal bases: performing our contract with you (running the service), our legitimate interests (security and fixing problems, balanced against your rights and children's best interests), and legal obligations.
5. Children's privacy
Scoopio is designed for children, so we hold ourselves to the UK Age Appropriate Design Code (the “Children's Code”) as well as Hong Kong law, wherever our families live.
- A parent sets up every account. Children never sign up, sign in with an email, or give contact details. Each profile is created by the signed-in parent.
- High privacy by default. There's nothing to switch on or off: no ads, no tracking, no location and no social features, for everyone.
- No nudges to share more. Streaks and badges reward reading only. They never ask for more information, and weekends never break a streak.
- A grown-up check guards purchases, account settings and links out of the app.
- Parents can see, download and delete their children's information at any time (see section 9).
If you believe a child has given us personal information without a parent's involvement, please contact us and we will delete it.
6. Who we share it with
We share information only with service providers who help us run Scoopio. They process it on our instructions and may not use it for their own purposes.
| Provider | What they do | What they receive |
|---|---|---|
| Supabase | Hosts our database, sign-in service and files | The account and profile data described above |
| Apple | Sign in with Apple, the App Store, subscriptions and payments | Covered by Apple's own privacy policy |
| Sign in with Google (only if you choose it) | Covered by Google's privacy policy. We receive your sign-in ID, email, name and profile picture link. | |
| Cloudflare, Inc. (USA) | Hosts this website | Basic visit logs (see section 12) |
We may also disclose information if the law requires it, to protect the safety of a child or anyone else, or as part of a sale or merger of the business. In a sale, this policy's promises would continue to apply to your data.
7. Where it's stored
Our database is hosted by Supabase in Singapore. Apple and Google may process sign-in and purchase data in other countries under their own policies. Wherever data is stored, we require our providers to protect it to the standard described in this policy.
8. How long we keep it
- Account and children's data: for as long as your account exists.
- When you delete your account in the app: your account, every child profile, reading history, saved comics and picks are deleted from our live database straight away. Any copies in backups are removed within 30 days. We also cancel your Sign in with Apple link to Scoopio.
- Technical logs: deleted automatically within 30 days.
- Emails with us: up to 2 years, then deleted.
- On the iPad: signing out removes your family's data from that iPad.
Subscription records are kept by Apple under Apple's policies.
9. Your choices and rights
You can do most things yourself in the app, in Parent Corner (behind the grown-up check):
- See and correct: edit nicknames, reading levels and PINs, or remove a child's profile.
- Download: “Download my family's data” gives you a copy of everything we hold about your family.
- Delete: “Delete account and all data” permanently removes your account and all your children's data.
Under Hong Kong's PDPO you can ask for a copy of your personal data and ask us to correct it. Where UK or EU law applies, you may also ask us to erase or restrict it, to transfer it, or object to how we use it. Email us (see section 14). We reply within 40 days, normally much sooner, and we don't charge for reasonable requests. We may need to confirm you're the account holder first.
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong, or in the UK to the Information Commissioner's Office.
10. How we protect it
- All data travels encrypted (HTTPS/TLS).
- Database rules mean each parent's sign-in can reach only their own family's data.
- Sign-in details are stored in the iPad's secure Keychain. Profile PINs are stored only in hashed form.
- Only a small number of authorised staff can access our systems, and only when needed.
No system is perfectly secure. If a breach affecting your data happens, we will tell you and the relevant regulator where the law requires it.
11. AI and our content
We use AI tools to help draft our news stories and draw comic panels, and human editors check every story before it's published. These tools work only with public news and our own characters. No family's or child's personal data is ever sent to them.
12. This website
This website uses no cookies, no analytics and no trackers, and loads no fonts or scripts from other companies. Our website host may keep basic server logs (IP address, browser type, pages visited) for security, which are deleted automatically.
13. Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects how we use your or your children's data in a meaningful way, we'll tell you in the app before it takes effect, and ask for your agreement where the law requires it.
14. Contact us
Questions, requests or worries about privacy:
Reva Solutions Limited (Scoopio)
Email: info@scoopio.app
Post: Unit 506, 5/F, New World Tower 1, 18 Queen's Road Central, Central, Hong Kong