LONIO Privacy Policy
Last updated: June 1, 2026 Effective date: June 1, 2026
This Privacy Policy describes how Panda Production (“we”, “us”, “our”) collects, uses, and shares information when you use the LONIO mobile application (the “App”).
LONIO helps parents have meaningful conversations with their children after watching a cartoon together. The App is designed to be used by parents (adults), not directly by children. We do not knowingly direct the App at children under 13, and we do not knowingly collect personal information from children.
1. Information We Collect
Information you provide
- Account information — when you sign in with Apple, Google, or email, we receive your email address and (depending on the provider) your name. Apple’s “Hide My Email” relay address is supported.
- Child profile information — name (or nickname), age, favorite activities, and an avatar choice. Stored under your account so the App can tailor conversation prompts.
- Group profile information (if you create a group instead of individual children) — group name, count, age range, and activities.
- Cartoon history — the cartoon/episode title you searched for, who watched it together, and which conversation prompts you marked as done.
Information collected automatically
- Anonymous session identifier — when you first open the App, we create an anonymous account in our authentication system so the App works before you sign in. This identifier is tied to your device until you sign in or sign out.
- Server logs — our backend (hosted on Render) and database (hosted on Supabase) record standard request logs including IP address, timestamp, and the search query, for the purpose of debugging and abuse prevention. These logs are retained for up to 30 days.
Information we do NOT collect
- We do NOT collect your child’s voice, photos, or video.
- We do NOT use third-party analytics or advertising trackers.
- We do NOT collect location, contacts, calendar, microphone, or any other system data beyond what is strictly necessary to run the App.
- The Camera permission, when granted, is used solely to read a cartoon title from a TV screen using on-device text recognition. Images are processed locally and are never uploaded.
2. How We Use Information
We use the information we collect to:
- Generate personalized conversation prompts and activities for your child or group, tailored to the cartoon you watched and the child’s age and favorite activities.
- Save your history so you can revisit past conversations and track skill development over time.
- Manage your subscription and entitlements.
- Diagnose bugs and improve the App.
3. Third Parties
We share information with the following service providers strictly as necessary to run the App:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase (Frankfurt, EU) | Authentication and database | Account info, child profile, history |
| Render (Frankfurt, EU) | Hosting our backend API | Search queries, child profile excerpt (age, activities) used for prompt personalisation, server logs |
| Anthropic (USA) | Generates conversation prompts via the Claude API | Cartoon title, child age, favorite activities, group composition. No personal identifiers (no name, email, account ID) are sent to Anthropic. |
| Apple App Store / RevenueCat | Processing subscription payments | Subscription receipt, anonymized customer identifier |
| Wikidata / Wikipedia / TVMaze / Google Suggest | Looking up cartoon metadata | The cartoon title you searched. No personal identifiers are sent. |
| YouTube Data API (Google) | Looking up YouTube cartoon videos | The search query. No personal identifiers are sent. |
We do not sell or rent your data to anyone.
3.1 YouTube API Services
LONIO uses YouTube API Services to power its YouTube cartoon search feature. By using this part of LONIO you agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy.
What we send to YouTube API Services:
- The text you type into the LONIO search field when the YouTube tab is selected.
What we do NOT send:
- Your account email, name, child profile, or any personal identifier.
- Your IP address (the request is made by our backend on Render, so YouTube sees the backend’s IP — not yours).
What LONIO stores from YouTube responses:
- Video title, thumbnail URL, and YouTube video ID — only for the cartoons you explicitly pick from the autocomplete dropdown. We store this inside your account’s history so you can re-open past conversations.
You can revoke LONIO’s access to YouTube-derived data about you at any time by:
- Deleting your LONIO account (see Section 4 below) — this purges all stored YouTube video metadata associated with you.
- Reviewing and revoking third-party app permissions on Google’s Security Page: https://security.google.com/settings/security/permissions.
LONIO complies with the YouTube API Services Developer Policies and the YouTube API Services Terms of Service.
4. Data Retention and Deletion
Your account and associated data persist until you delete them. You can delete your account at any time from within the App (Manage → Sign Out, and then contact us at the email below to request full deletion), or by emailing us directly.
When you delete your account:
- All child profiles, history entries, and subscription records linked to your account are removed from our database.
- Backups may retain a copy for up to 30 days, after which they are purged.
5. Your Rights
You have the right to:
- Access the data we hold about you.
- Correct inaccurate data via the App’s Manage screen.
- Delete your account and all associated data.
- Export your data in a machine-readable format (email us).
- Withdraw consent at any time by deleting your account.
If you are in the European Economic Area, United Kingdom, or California, additional rights under GDPR, UK GDPR, or CCPA apply. Contact us using the address below to exercise them.
6. Children
LONIO is intended for use by parents. We do not knowingly collect personal data from children under 13. The child profiles parents create in the App store first names (or nicknames), age, and activities — this data is provided by the parent, not by the child. If you believe a child has provided information directly, please contact us and we will delete it.
7. Security
We use industry-standard measures to protect your data: TLS for all data in transit, Row Level Security policies on our database so a user can only access their own data, and minimal data collection by design. No system is perfectly secure, however, and we cannot guarantee absolute security.
8. International Transfers
Our database and backend are hosted in the European Union (Frankfurt). Anthropic’s Claude API runs in the United States. By using the App you consent to these transfers. We rely on standard contractual clauses where required.
9. Changes
We may update this Privacy Policy from time to time. We will post the new version at this URL with an updated “Last updated” date. Material changes (such as new categories of data collection or new third parties) will be announced in-app before they take effect.