App privacy
This policy covers the Android app “Egolino Kids” (Google Play, package io.egons.buddy).
Controller
SCAFA INVESTMENTS LLC, 9830 Bahama Dr, Cutler Bay, FL 33189-1568, USA, info@scafa-investments.com
In short: Egolino Kids has no account, no sign-in, no ads, no chat with other people, no tracking and no analytics tools. The game and the chat with the Egolino run on the phone. Only online games, purchases, loading the chat’s language model and voice, and reported answers go over the internet, and each of them only after a grown-up has opened the parent gate.
1. What is stored on the device
The Egolino and his name, the house and its rooms, the marbles, the things in the chest, the diary pages and the settings. All of this sits in the app’s private storage on the phone and is not sent to us. Once a grown-up has loaded them, the language model and the voice for the chat are stored there too. Chat messages are not kept: the conversation is cleared when the chat is closed. Some of the Egolino’s thoughts (“Thoughts” page) are written by the language model on the phone.
2. What leaves the device
- Online games, only after a grown-up opens them. Online play is off until it is opened behind the parent gate, and the choice ends after 15 minutes. During an online game the app talks only to our game server at egons.io (hosted by Hetzner Online GmbH in Germany). It sends the technically necessary connection data (IP address), an identifier of the app and the game moves. It sends no name, no device ID and no advertising ID. There is no chat with other players. Game moves are not stored: a game room exists only in the server’s memory and ends with the game. The server’s error logs may contain an IP address and are deleted after 14 days. We use this data only to run the game.
- Purchases by grown-ups, through Google Play. Marble packs can only be bought behind the parent gate. Payment is handled by Google Play (Google Ireland Ltd.) under Google’s terms; we do not receive payment details. The app checks the purchase confirmation from Google so the marbles can be added.
- Loading the language model, only by a grown-up. The model for the chat only comes onto the phone when a grown-up loads it in the area for grown-ups, behind the parent gate. It is downloaded once from Hugging Face (Hugging Face, Inc., USA); to deliver the file, Hugging Face processes the IP address. Nothing from the chat is sent with the download.
- Loading the voice, only by a grown-up. Also only after a tap by a grown-up behind the parent gate, the app downloads a child’s voice once from our server egolino.com (hosted by Hetzner Online GmbH in Germany). The server sees the IP address; we keep no access log there. Hugging Face delivers the language model through its own content delivery network, which also sees the IP address.
- Reporting an answer, only by a grown-up. After the parent gate, a grown-up can report an answer from the Egolino that doesn’t fit. The app then sends only this one sentence from the Egolino to our server konto.egolino.com (hosted by Hetzner Online GmbH in Germany), so that we can check it, with no identifier. The app replaces the Egolinos’ names first; the sentence can still reflect what came up in the conversation. The server technically sees the IP address; it is stored neither with the report nor in the access log and at most appears in error logs, which are deleted after 14 days. We delete reported sentences after 90 days. If sending fails, the app offers to send the sentence by email to info@scafa-investments.com; the grown-up sends it themselves, and we then also receive their email address. We use it only for this report and delete the email once the report has been handled, at the latest after 90 days.
3. Chat and microphone
The chat with the Egolino runs only on the phone. What a child writes or says does not leave the device and is not stored. On sensitive topics the Egolino answers with fixed, pre-written sentences. The microphone is used only for dictating in the chat line; speech recognition also runs on the device, and no recording is stored or sent. The microphone is only available on phones that recognise speech without the internet (Android 13 and later), and only while the chat is on. The chat is on at first; grown-ups can switch it off in the area for grown-ups. The on-screen keyboard and its voice input are not part of the app; their provider governs what they process.
4. What the app does not do
No ads and no ad software, no analytics or crash-reporting tools from third parties, no advertising ID, no location, no contacts, no camera. The microphone only for dictating in the chat (section 3).
5. Permissions
Internet (for online games, purchases, loading the chat’s language model and voice, and reported answers), microphone (only for dictating in the chat; Android asks first), vibration, and Google Play billing. If the Egolino is allowed onto the home screen, Android asks for the permission “display over other apps”; it can be switched off in the phone’s settings at any time.
6. Deleting data
Uninstalling the app deletes everything stored on the phone, including the language model and the voice. We delete reported sentences after 90 days and report emails once handled, at the latest after 90 days, or earlier on request to info@scafa-investments.com.
7. Your rights
You can request access, correction, deletion, restriction of processing and data portability, you can object, and you can complain to a data protection authority. Write to info@scafa-investments.com.
As of November 9, 2026.