Privacy policy

During normal student use, Puppet Pals 1 School Edition does not ask for or collect personally identifiable information from students or children. The app does not automatically collect:

• Names, usernames, or contact information from children
• Photos, recordings, or any content created in the app (all content remains on-device)
• Precise location data
• Hardware device identifiers or advertising IDs
• Any information that could identify individual student users

Voluntary adult feedback and website contact forms are a separate path: they store what the person submitting the form chooses to enter. They are not part of the School Edition student workflow and should not be used to send student personal information or student-created content.

We do not sell user data or share it with third parties for their own marketing or advertising purposes. No third-party analytics or tracking SDK is embedded in Puppet Pals 1 School Edition.

Student-created shows, recordings, and images are not processed by the services below because that content remains on-device. These services support the separate data paths described in this policy: first-party School Edition usage analytics and voluntary email, feedback, or website contact submissions.

Vercel

Hosts our website and API routes. It handles network requests for School Edition usage analytics and voluntary email, feedback, and website contact submissions. Vercel also supplies the country and region request headers used by our analytics endpoint. Our analytics database records do not store the raw request IP address.

PostgreSQL hosting

Stores School Edition analytics session and event records, parent email addresses and source labels, voluntary feedback and contact submissions, and email delivery and suppression records.

Google Gemini

When spam screening is configured, Gemini receives limited portions of a voluntary feedback or website contact submission—including the message and any submitted name, email, and subject—to classify it for spam. An authorized administrator may also choose to send a stored message, submitted name, category, and source to Gemini to prepare an editable reply draft.

Slack

A submission classified as non-spam may be posted to our private feedback channel. That notification can contain the source and the submitted name, email, subject, and message.

Google Gmail

If we reply to a feedback or contact submission, Gmail may process the recipient's submitted name and email address, the reply, and the resulting message thread.

Resend

Delivers optional Puppet Pals update emails. It receives the parent's email address and the update message, and returns message identifiers plus complaint or permanent bounce events used to suppress future sends.

School Edition usage analytics use the Vercel and PostgreSQL paths above. Google Gemini, Slack, Gmail, and Resend are used only when someone voluntarily submits feedback or a website contact message, signs up for updates, receives an update, or receives a support reply.

Usage analytics

Session and event records are retained until Polished Play manually prunes them. No automatic fixed retention window is currently configured. Reports may aggregate these records, but the underlying session and event rows remain stored until they are pruned.

Parent email addresses

Email addresses are retained until a deletion request is received. Unsubscribing, reporting a message as spam, or a permanent delivery failure suppresses future update emails; the address and suppression record remain stored so the suppression can be honored unless deletion is requested.

Feedback and contact

Feedback and website contact submissions are retained for as long as they are useful for support and product improvement. Related support notifications, drafts, and replies may also exist in the service-provider systems named above.

Parents or guardians may request deletion of parent email-list, feedback, or website contact records held by Polished Play by contacting us at privacy@polishedplay.com.

Puppet Pals 1 School Edition is designed for use by children in educational settings. Its normal student workflow does not ask children to provide personal information. The optional email collection and feedback features inside the app are located behind a parent gate and are intended for adult parents or guardians.

The general Polished Play website contact form is separate from School Edition and is not part of the classroom or student workflow. Anyone contacting us about School Edition should avoid including student personal information or student-created content in that form.

We comply with the Children's Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), and the General Data Protection Regulation (GDPR).

On iOS, Puppet Pals 1 School Edition supports deployment through Apple School Manager and Mobile Device Management (MDM) solutions including Jamf, Mosyle, and Kandji.

On Android & Chromebooks, the School Edition is distributed privately through managed Google Play: the school's Google organization ID is added to the app's private distribution list, the app appears in the school's managed Google Play, and administrators assign it to devices via the Google Admin console or their device-management tool.

No additional data is collected during the deployment process on either channel — adding an organization ID to the private distribution list involves no student data. Schools retain full control over app distribution and device management.