Privacy policy
Draft. Written with general legal information and not yet reviewed by a lawyer. It is not legal advice. If this page and the Hebrew page differ, the Hebrew page counts.
Updated: 3 November 2026
In short: the game asks for no name, age, email, phone number or location. It keeps only what is needed so that each child’s creatures are never lost. No ads, no measuring tools, and no selling of data.
Who is responsible
Bumiko is run by Dan, the business owner, as a pilot in one store in Israel. The full business details will be added here before sales begin. For any privacy question, or to use the rights below: support@bumiko.io.
What the game server keeps
- Family: a random ID. The device key and the family code are kept only as a fingerprint that cannot be turned back, plus an encrypted copy of the family code so the parents’ area can show it.
- For each child: a chosen nickname, a picture from a fixed list, the creatures and the progress in the game. Choose a nickname, not a full name.
- Codes: which creature each code gives, when it was used and by which family. The code itself is kept encrypted.
- Guessing protection: to block code guessing, a counter and a fingerprint of the IP address that cannot be turned back are kept for a short time. After one hour at most they are no longer used, and a cleanup that runs from time to time deletes them.
- Email backup (not active yet): if we turn it on, a parent can choose to receive the family code by email. The address itself will not be stored, only a fingerprint of it, and the mail will go through an email provider.
On the iPhone itself, the Keychain keeps the family key so that reinstalling brings the progress back.
Why, and on what basis
The data is used only to make the game work: to keep each child’s creatures, bring them back on a new phone, and make sure every code works once. It is not used to build profiles, show ads or send marketing.
There is no legal duty to give us any data. Without the server save, a capsule code cannot be used and progress cannot be restored on a new phone.
Children and parents
Bumiko is made for children, so the parent decides. The parents’ area in the game opens only after a small question, and holds the family code, recovery and deleting everything. The game has no chat, no way to talk to strangers and no purchases.
Who else receives data
- Cloudflare: the game’s server and database and the website run on Cloudflare, which processes the data for us only.
- Apple: the game is installed through TestFlight or the App Store, and Apple follows its own privacy policy.
- When the law requires it, for example a court order.
We do not sell or rent data to anyone.
Transfer abroad
Cloudflare’s servers are spread around the world, so data may be stored or passed outside Israel.
How long
Data is kept for as long as the family exists, until it is deleted. Deleting removes the family, the children and the saves. So that deleting never reopens a code, used codes stay marked “in use”, with no link to the family.
Security
The connection to the server is encrypted. Codes and the family code are stored encrypted or as a fingerprint that cannot be turned back. We have not turned on request logging on the server. No method is perfectly safe, and if data is ever breached we will act as the law requires.
Your rights
- To see the data kept about your family.
- To ask us to correct wrong data.
- To delete everything: in the parents’ area in the game, or by asking at support@bumiko.io.
So that we never hand a family’s data to a stranger, we may ask you to show the family is yours, for example from the parents’ area. Do not send us the family code or a photo of a note.
You may also contact Israel’s Privacy Protection Authority.
The website
The website uses no cookies, measures no visitors and loads nothing from other sites. It has one small script that plays and pauses the clips and runs the accessibility menu. A choice made in that menu stays only in your browser and is never sent anywhere. Like any server, Cloudflare receives the request itself in order to serve the page.
Changes
If this policy changes, we will update the date at the top. A significant change will also appear in the game.