Diggy
I’m ready to dig in!
Legal

Privacy Policy

Effective October 28, 2026 · Diggy Labs, Inc.

At Diggy Labs (“Diggy,” “we,” “us,” or “our”), trust is at the core of everything we do. We understand we are building a service for families during a sensitive and often stressful time. This Privacy Policy is designed to be clear and transparent about how we collect, use, and protect your information. This policy applies to the information we collect through our website, diggy.kids (the “Website”), including our newsletter subscription service, and through the Diggy mobile application (the “App”).

Sections 1–4 describe the Website and newsletter. Section 5 describes the App, and Section 6 describes account deletion and the records we keep afterward. Sections 7–10 apply to both.

1. Information We Collect on the Website

We collect a very limited amount of information through the Website, focused on keeping you informed.

a) Information You Provide to Us. When you subscribe to our newsletter, we collect:

  • Your email address.
  • Your self-identified role (e.g., “Parent or caregiver,” “Healthcare provider”). We use this to help tailor the information we send you.

b) Information We Collect Automatically. Like most websites, we may collect basic technical information to ensure our site is working correctly. This may include:

  • Log and Usage Data: such as your IP address, browser type, and pages you visit on our site. This information is used in an aggregate form to help us understand how our Website is being used and how we can improve it.
  • Cookies: We may use cookies to help the Website function. A cookie is a small data file stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

2. How We Use Website Information

We are committed to using your information responsibly and for specific purposes:

  • To Send You Updates: The primary use of your email address and role is to send you occasional emails with product news, research summaries, developmental care resources, and other information about Diggy’s progress.
  • To Operate and Improve Our Website: We use automatically collected data to monitor our Website’s performance, protect it from security threats, and understand what information is most helpful to our visitors.

3. How We Share Website Information

Your privacy is not for sale. We do not sell, rent, or trade your personal information with any third parties for their marketing purposes.

  • Service Providers: We share your information with trusted third-party service providers who help us operate this Website and our newsletter. These are Resend, our email service provider, which stores your email address and the audience tag you selected so we can send you the right updates; and Cloudflare, which hosts the Website and produces the standard server logs described above. These providers are contractually obligated to keep your information confidential and use it only for the services they provide to us.
  • Legal Compliance: We may disclose your information if required to do so by law or in response to a valid request from a public authority (e.g., a court or government agency).

4. Your Newsletter Choices

You are in control of your information.

  • Unsubscribing: You can opt out of receiving our newsletter at any time by clicking the “unsubscribe” link at the bottom of any email we send you.
  • Access and Deletion: You may contact us at privacy@diggy.kids to request access to, correction of, or deletion of the personal information you have provided to us.

5. The Diggy App

The Diggy App is for parents and guardians. A parent or guardian creates the account and decides what each child plays and what is shared.

a) Information we collect in the App

  • Account information. You sign in to Diggy with Sign in with Apple. Apple shares with us an account identifier, your email address (which may be a private relay address if you chose “Hide My Email”), and your name if you choose to share it. We never receive your Apple password.
  • Consent records. When you create your account, and each time you add a player, we record that you confirmed you are 18 or older and the parent or legal guardian of the child, that you accepted our Terms of Service and this Privacy Policy (and which versions), and when.
  • Player profiles. For each child you add, we keep the name or nickname you enter and an avatar, along with in-app progress such as coins, unlocked characters and decks, personal bests, and the days played.
  • Gameplay information. We keep game results and progress, such as scores, answers and guesses, timings, the decks and game modes chosen, journey progress, and the in-game tips you used. For games played by tilting the phone, this includes device motion data recorded during the game. Gameplay records are linked to a random player ID, not to your child’s name.
  • Gameplay video and audio. Games use your device’s camera and microphone to record each session on your device. A recording is uploaded to Diggy only if you choose to share it after the session; otherwise you can delete it. You may also save a recording to your photo library, which requires your separate permission.
  • Device and approximate location. When you create your account, we record your device model and app version. With your permission, we take your approximate (reduced-accuracy) location one time, to understand which resources are available in your area. We do not track your location after that.
  • Subscription information. If you subscribe to Diggy Premium, Apple processes your payment, and we never receive your payment card details. From Apple we receive and store the subscription’s transaction identifiers, the product (monthly or annual), its status and renewal status, and its expiration date. We use these to unlock Premium features and to keep your access correct through renewals, cancellations, refunds, and billing issues.
  • App usage and notifications. We use Google Firebase Analytics to understand how the App is used, for example which screens are opened and when a notification is opened. Firebase assigns the App an analytics identifier. If you allow notifications, we use Firebase Cloud Messaging to send you reminders and updates.
  • Face ID or passcode. If you use Face ID or your passcode to unlock Diggy, that check happens on your device through Apple. We never receive your face data or your passcode.

b) How we use App information

We use App information to:

  • run the App and your account
  • save and restore your children’s progress across your devices
  • generate progress reports, personalized insights and recommendations, and the Diggy Score
  • provide Diggy Premium
  • send the notifications you allow
  • support you when you contact us
  • keep the service secure
  • improve Diggy

Reports, insights, and recommendations are produced by Diggy’s own systems. We do not send your child’s information to outside artificial-intelligence services. Diggy does not diagnose or treat any condition.

c) Sharing with a clinician you choose

If you link your account to a clinician or care provider using an invite code, that clinician can see your children’s progress reports and the gameplay videos you have shared, in the Diggy clinician dashboard. We keep a record of which shared videos a clinician views, and when. Deleting your account removes the link.

d) Service providers for the App

We do not sell your data and we do not show ads. The App relies on the following providers, which process data only to provide their services to us:

  • Amazon Web Services: sign-in, databases, and storage for account, gameplay, and shared-video data, and the servers that run Diggy.
  • Google Firebase: app analytics, notifications, and app configuration.
  • Apple: Sign in with Apple, App Store purchases, and subscription billing.
  • Cloudflare: hosting for the Website and the clinician dashboard.

We require any provider that receives user data to protect it with the same or equal protection as described in this Privacy Policy. We may also disclose information if required to do so by law, as described in Section 3.

6. Account Deletion and Data Retention

You can permanently delete your Diggy account from inside the App at any time:

Menu → Account Settings → Delete Account

The deletion screen explains what is deleted and what is retained, and asks you to type “DELETE” to confirm. The action is immediate and cannot be undone.

What account deletion removes

When you confirm deletion, we permanently remove the following from our servers:

  • Your sign-in record and authentication credentials
  • All player profiles you created (names, avatars, progress)
  • All gameplay videos you shared with Diggy
  • Device records linked to your account, including the approximate location recorded at sign-up
  • In-app coin balances, character unlocks, and deck unlocks
  • Progress reports and recommendations generated for your players
  • Links to any clinician, and any open invite codes
  • Your Diggy Premium subscription record

We also sign you out of every device on which you were signed in.

Your Apple subscription: Deleting your Diggy account does not cancel an active Diggy Premium subscription. To stop future charges, cancel it in your Apple Account settings. Apple keeps its own purchase records under Apple’s privacy policy.

What we retain, and why

Before deletion finishes, we replace every identifier that links the records below to you and your children with new random identifiers. These are created once for that deletion and are never stored alongside your information. The records that remain contain no name, email address, device identifier, or video, and cannot be linked back to you.

  • Consent receipts for your account and for each player: the confirmations you gave (18 or older, parent or guardian, Terms of Service and Privacy Policy accepted, and their versions) and when you gave them. Under the EU General Data Protection Regulation (Article 7(1)) and the U.S. Children’s Online Privacy Protection Act (16 CFR §312.5), Diggy must be able to demonstrate that consent was obtained for the data we previously processed. We rely on GDPR Article 17(3)(e) (retention for the establishment, exercise or defence of legal claims) and COPPA §312.10 (retention reasonably necessary to fulfil the purpose of collection) as the lawful basis.
  • De-identified gameplay records: scores, timings, session details, and journey progress. We keep these for research and product improvement.
  • Clinician view log: if a linked clinician viewed your shared videos, we keep only the date and the game of each view, with no time of day and no link to you or to the video. The video itself is deleted.

Apple ID linkage

If you signed in with Apple, Apple will still show “Diggy” in Settings → Apple ID → Apps Using Your Apple ID until you remove it there. This is an Apple-side setting that we cannot modify on your behalf. To revoke the Apple ID linkage entirely, tap “Stop Using” inside that Apple settings panel.

If the in-app flow fails: If you encounter an error during in-app deletion, email us at privacy@diggy.kids and we will complete the deletion manually within 30 days.

7. Data Security

We use commercially reasonable administrative and technical safeguards to protect your personal information from unauthorized access, use, or disclosure. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee its absolute security.

8. Children’s Privacy

Our Website is intended for adults: parents, caregivers, and healthcare professionals. We do not knowingly collect personal information from children under 13 through the Website.

The Diggy App is a parent-managed service. A parent or guardian creates and controls the account and, in line with the U.S. Children’s Online Privacy Protection Act (COPPA), provides verifiable consent before we process any information about their child, such as player profiles, gameplay, and progress. Children do not sign up for or use Diggy independently of a parent-controlled account. A parent or guardian can review, manage, or delete their child’s information at any time, including by deleting the account as described in Section 6.

If you are a parent or guardian and believe a child has provided us with information without your consent, please contact us immediately at privacy@diggy.kids, and we will take steps to remove that information from our systems.

9. Changes to This Privacy Policy

As our services grow and evolve, we may need to update this policy. When we do, we will update the “Effective” date at the top of the policy. We promise to maintain our commitment to your privacy and will not materially change how we handle your information without providing you with notice and an opportunity to opt out.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our practices, please contact us at privacy@diggy.kids.