Privacy policy

1. Scope and who we are

This policy covers the DinoTalk kids’ English-speaking app for Android (Google Play package com.jurassic.dinosaur.dinolingo, the “App”) and the website https://dinotalk.app (the “Website”). The operator is DinoTalk (“we”, “us”).

DinoTalk is for children about 4 to 12 and is downloaded and managed by a parent or guardian. Parents and guardians should read this policy before letting a child use it.

2. Key points

• No accounts. No sign-up, email, phone number or name is needed.
• Voice is used only for that turn’s transcription and reply. We do not store recordings and we do not use them to train models.
• No ads. The App and Website contain no advertising SDKs, no behavioral advertising and no ad profiling.
• We do not sell or rent personal information, and we do not share it for marketing.
• Chat history, stickers and progress stay on the child’s device by default.
• We do not collect precise location, contacts, photos or advertising IDs.

3. What information we handle

The table below lists what the App and Website handle, why, and how it is kept.

We do not collect real names, email addresses, phone numbers, home addresses, schools, precise location, contacts, photos, videos or advertising IDs, and we do not ask children for them. Dino is instructed never to ask.

4. How we use information

• Provide the core features: voice chat, repeat-after-me, stories, courses and translation.
• Keep the service reliable, limit abuse and excessive requests, and protect security.
• Filter content that is not for children on the server and steer chats back to learning.
• Process subscriptions and answer emails from parents.
• Comply with applicable law.

We do not use children’s information for advertising, profiling, marketing, or to train AI models.

5. Third-party services and sharing

To provide the features we use the service providers below. They process only the data needed for our requests:

• Cloudflare: hosts the Website and service API, and provides security and rate limiting. It processes technical request information such as IP addresses.
• OpenRouter and the AI model providers it routes to: chat text goes to a chat model to produce a reply, recordings go to a speech-recognition model to be transcribed, and reply text goes to a speech-synthesis model to produce Dino’s voice. Model types currently in use are a chat model (DeepSeek), speech recognition (OpenAI Whisper) and speech synthesis (ElevenLabs). Our requests ask providers not to collect or retain data for training. Each provider’s handling is described in its own privacy policy.
• Translation service: when a child taps “translate” on a message, that message text is sent to the translation service we use (hosted on Microsoft Azure) only to return the translation.
• Google Play Billing and Unity services: used to buy, verify and restore in-app subscriptions. The Unity engine and Unity services may automatically process basic technical information, such as device model, OS version and anonymous usage statistics, under Unity’s privacy policy.
• Android system: local reminder notifications are issued by the device and do not pass through our server. You can turn them off in the App settings or system settings.

Apart from these providers, we do not sell, rent or disclose personal information to third parties, except where required by law or necessary to protect users or respond to abuse.

6. Microphone permission

The App asks for the Android microphone permission (RECORD_AUDIO) the first time voice is used. It records only while the child holds the “talk” button and stops when released.

Without the microphone permission you can still use typed chat, topic stickers and some repeat-only features. You can withdraw the permission in system settings at any time. The Website asks your browser for microphone access only after you press the microphone button.

7. Children’s privacy

Children are part of the App’s audience. We design for the Google Play Families Policy and applicable children’s privacy laws (such as COPPA in the US and the protections for children under GDPR in the EU and UK): no accounts, no ads, no social features, no requests for personal identifiers, and no sale of data.

See the Children’s Privacy Policy for more: https://dinotalk.app/en/children-privacy

8. Retention and deletion

• Recordings and chat content: not stored on our server; discarded once the request is handled.
• On-device chats, stickers, progress and settings: kept on the device. Clear chats and stickers in the App, or uninstall to remove them all.
• Technical logs: contain only request type, status, timing and approximate country or region; kept briefly by Cloudflare for operations and troubleshooting.
• Email correspondence: kept only as long as needed to handle your request.

Because there are no accounts, we hold no profile linked to a person. To ask about or delete data tied to a device ID, see the delete-account page (https://dinotalk.app/en/delete-account) or email support@dinotalk.app. We will handle it within a reasonable time.

Subscriptions are managed by Google Play. You can cancel any time under Subscriptions in Google Play. Cancelling does not automatically delete on-device data.

9. Security

• All communication between the App or Website and our server uses HTTPS encryption.
• Every App request is signed and rate-limited per device to prevent abuse.
• The persona and safety rules live on the server, not in the phone, and content that is not for children is blocked.
• API keys stay on the server and are never exposed to Website visitors.

No system can guarantee absolute security, but we keep improving these protections.

10. Website cookies and local storage

The Website does not use advertising cookies, tracking pixels or third-party analytics scripts. We use only the functional session cookie (dt_s), the language cookie (dt_lang) and the browser local storage (sticker book) described in the table above. Fonts and images are served by the Website itself.

11. Your choices and rights

• Use typed chat and other features without turning on the microphone.
• Turn off the microphone or notification permission in system settings at any time.
• Clear chats and stickers on the device, or uninstall the App, at any time.
• Email us to ask about, correct or delete information we may hold. Applicable rights depend on where you live.
• Change the interface language from the menu in the header at any time. That writes the language cookie.

If you are a parent or guardian and believe a child gave us information they should not have, email us and we will investigate and act promptly.

12. International transfers

Our service and our providers may process data in countries other than yours (for example Cloudflare’s global network and the locations of AI providers). We choose providers with reasonable safeguards and send only the data needed to provide the features.

13. Changes to this policy

When we update this policy we change the date at the top of the page. For material changes we will also add a notice on the Website or in the App.

14. Contact us

For privacy questions, data requests or parent feedback, contact: