Privacy Policy

The short version

Picture Hunt is built to collect almost nothing. There's no signup, no account, no email collection at app level. Your child's progress lives in the browser on their device (with Premium it also syncs across your devices — see below). Photos are sent to Google's Gemini Vision API to find a match and are never stored by us; on our paid API tier, Google doesn't use them to train its models.

When you purchase Premium, Stripe handles your payment information — we never see your card. We do see the email address you put on the receipt and an unlock code mapped to it.

What we collect

From your child playing

• Local browser storage on the device: progress (which items they've found), sticker book contents, daily streak, settings (sound on/off, language, difficulty).
• Cross-device sync (Premium only): if you unlock Premium, that same progress — found items, sticker book, daily streak — is also stored on Cloudflare KV, keyed to your unlock code (not to any name or account), so it can follow you to another device. Request deletion any time via the email below.
• Photos: each photo is sent in a single API call to Google's Gemini Vision API for matching. The photo is not stored by us. Google's privacy policy applies to the moment it's processed by them; per their API terms, paid Gemini API usage is not used for training.

From you paying

• Email + unlock code: when you pay through Stripe, Stripe sends us your email and a payment confirmation. We generate a random unlock code, store the email + code + plan on Cloudflare KV, and email you the code. We use this so we can verify your purchase if you switch devices.
• Payment information: handled entirely by Stripe. We never see your card number.

Server logs

Cloudflare keeps short-term server logs (~5 days) of API requests for security and abuse prevention. These contain IP addresses and timestamps but no content from photos.

What we don't collect

• No advertising IDs, no third-party trackers, no analytics SDKs in the app.
• No cookies (other than what your browser uses for the page itself).
• No data is sold or shared. Period.
• The app does not collect or transmit your child's name, location, contact information, or any biographical data.

COPPA + parental consent

Picture Hunt is designed for COPPA compliance and to collect as little as possible from children. The app has no child accounts and collects no names, emails, contacts, or location from the child. A photo a child takes can incidentally include a person; those photos are sent to Google only to find a match, are never stored by us, and on our paid API tier are not used to train Google's models. The app is built for use with adult supervision, and the only personal data we retain is the parent's purchase email. If you have COPPA questions or want data removed, email us (below).

Camera permission

The app uses your device's camera to take photos for the scavenger hunt. Photos are captured locally in the browser, sent once to Google for matching, and not retained by us. The app only receives the photo you take or choose to give it — it can't browse your photo library.

Data retention + deletion

If you request deletion of your purchase data or want all data removed, email hello@picturehunt.app. We'll remove your purchase record from Cloudflare KV within 30 days. Your local browser data lives on your device — clear it via your browser's site data settings or by uninstalling the PWA from your home screen.

Changes to this policy

If we materially change what we collect, we'll update this page and email customers who purchased. Older versions are in the project's git history.

Contact

hello@picturehunt.app

← Back to Picture Hunt