Privacy notice for the product
Last updated: 2026-10-26
This notice covers the Playnitive toy and the parent app that goes with it: what happens to your child's data when they talk to the toy, and to yours when you manage the account. The short version: we do not keep raw audio, we store the text of a conversation encrypted for 60 days, we do not train any model on your child's words, and everything is processed inside the European Union.
If you gave us something on the website instead, for example by joining the waitlist or pre-ordering, that has its own notice: the website privacy notice
Who holds the data
The controller is Playnitive Kft. (company registration number 01-09-456341, registry court Fővárosi Törvényszék Cégbírósága, tax number 33048116-2-43), Hungary. For anything about privacy, write to info@playnitive.com. We have not appointed a data protection officer; if we ever have to, their contact details will be published here.
Data about your child, and who consents to it
The toy is made for children aged 4 to 12, so everything we do with a child's data rests on your consent as the parent, under Article 8 GDPR. You create the account, you set up the child profile, and you switch play off when you want to. We never ask the child for consent and we never ask the child for any details: what the toy knows about them is what you told it, or what came out of the conversation. You can withdraw your consent at any time, which stops the processing from that point on. If you switch play mode on, other children playing near the toy may also be heard during a play session, and what they say is turned into text as well; the play mode section below describes what happens to it.
What we hold
About your account: your name, your email address, a hashed form of your password, and the identifier we receive if you signed in with Google or Facebook. When you accept this notice or the terms of service, we record which document it was, its version, when you accepted it, your IP address and your browser or app identifier, because we have to be able to evidence the consent. About your child: their first name, their age, the few sentences you write about what they are into, and the play settings. Those are stored encrypted. From the conversation: the text of what the child said and what the toy answered. From a play session, which only happens if you switched play mode on: the text of what is said in the game, which can include the words of other children playing nearby, held only in memory while the session runs, and an entry about the session in the event log. On top of that, operational data: how much the toy was talked to and for how long, event logs for fixing faults, and the record of your subscription and payments.
Why we use it
So the toy can answer your child in a way that suits their age and their interests. So that, in a play session you allowed, the toy can follow the children's game and decide when to join in. So we can let you know in the app when something sensitive came up, so you can set when and how much they may play, and so you can see when a play session ran and for how long. So we can run your subscription and account for the usage. So we can find and fix faults. Nothing else. We do not build advertising profiles, we do not sell data, and we do not use your child's words to train artificial intelligence.
On what legal basis
For your account and for providing the service, the basis is performance of the contract between us, under Article 6(1)(b) GDPR. For the child profile and the conversations, it is your consent, under Article 6(1)(a) and Article 8 GDPR; you give that consent in the app and you can withdraw it at any time. For the accounting records that follow from a payment, we are under a legal obligation, Article 6(1)(c) GDPR.
How long we keep it
The text of a conversation is kept for 60 days, encrypted, and then deleted automatically. What is said in a play session is not stored: its text exists only in our server's memory while the session runs, and is gone when it ends. The entry about a play session in the event log is kept for 90 days. The daily notices described in the next section are kept for 60 days as well. The child profile and the settings stay for as long as your account exists, or until you delete them. Your account data stays until the account is deleted. The records that evidence your consent are kept after the account is gone, for as long as we might have to show that the consent existed. Accounting records that follow from a payment must be kept for eight years from the end of the business year under Hungarian law, and that is the one thing we cannot delete earlier on request.
The daily notice, and what is in it
Every night an automatic check goes through your child's conversations of the day before and decides whether something came up that may be worth talking about with them. If it did, the app tells you. That notice is one yes or no and nothing else. We do not record what the subject was, how often it came up, what was said, or what else your child talked about that day. If the notice appears, the person to ask is your child. The system that runs the check may only answer yes or no, anything else it writes is discarded, and it is forbidden to draw conclusions about the child's emotional state. The app never shows you the conversation text or its topics, even while that text still exists. Notices are kept for 60 days.
Play mode, if you switch it on
Play mode lets the plush join in when children play together. It is off by default. You switch it on in the app, for each toy separately, and choose how long a play session may last: 5, 10, 15, 20 or 30 minutes (15 unless you change it). The Play enabled switch and the daily play window still apply. A session only ever starts from the child: with a quick double press of the toy's button, or by asking the plush for it in a conversation that was started with the button (for example "Lotti, play with us!"). There is no wake word, and the toy does not listen while it is idle or asleep. During a session the light is turquoise and the microphone stays open. The toy's voice detector sends only the stretches in which someone is speaking, with a fraction of a second before each, to the same Microsoft speech recognition inside the European Union, and the microphone is muted while the plush itself speaks. From the most recent lines of the game, the same language model decides whether the plush joins in: when it is named or given a role, when the game stalls, or when someone seems really hurt. It then answers out loud. The session ends when a child presses the button, when the children say the game is over, when the time you chose is up, after 3 minutes without speech, when the daily play window closes, or when you switch play mode off. Other children playing nearby, not only yours, may be heard too, and their words turned into text. No audio is kept. The text of the game exists only in our server's memory while the session runs, a few minutes of recent lines at a time, and it is never written into the conversation history, the stored conversations or the nightly check for sensitive topics. What we keep is an entry in the event log of your parental zone: that a play session started, from the button or by asking, when, how long it lasted and why it ended, together with usage counters for the session, which the app does not show and which we use to account for the usage and to understand how play mode works. These entries are kept for 90 days. No new provider is involved: Microsoft and DigitalOcean, listed below, carry out this processing as well.
Who else sees any of it
Microsoft, which runs the speech recognition, the language model, the speech synthesis and the nightly check for sensitive topics for us, inside the European Union. Microsoft monitors its service for abuse: a message its filter flags is by default reviewed automatically and not stored, and in rarer cases a human review may follow, where the message is held in a separate store for 30 days and can be read by its staff inside the European Economic Area. DigitalOcean, which runs the servers and the database in Frankfurt. Stripe, which takes the subscription payment; your card details never reach us. PostHog, which counts anonymous usage with no content in it. Zoho, which delivers our email. Each of them acts as a processor on our instructions, under a contract. Nobody else, and we hand a child's data to an authority only where the law requires it.
What we do not do
We do not keep raw audio: your child's voice is in memory only for as long as it takes to turn it into text, and then it is gone. There is no camera in the toy. The toy never listens while it is idle or asleep and has no wake word: it starts listening only when the child presses its paw. The one time it keeps listening for longer is a play session, described above, which happens only if you switched play mode on, starts only from the child, ends at the latest when the time you chose is up, and keeps the light turquoise throughout. We do not identify the speaker, we do not build a voiceprint, and we collect no biometric data. We do not use your child's words to train general artificial intelligence, and our providers may not either. We build no advertising profiles and we sell no data.
How we protect it
Conversation text and the child profile are stored with AES-256 encryption. The connection between the toy, the app and our servers is encrypted. Access inside our team is limited to the people who need it for their work. If a personal data breach happens that is likely to be a risk to you or your child, we notify the supervisory authority as the law requires, and where the risk is high, you as well.
Your rights
You can ask us what data we hold and for a copy of it. The data export you can download in the app holds your account data and the daily notices, not the text of your child's conversations. You can ask us to correct anything inaccurate, to delete the data, to restrict how we use it, and you can object to the processing. You can withdraw your consent at any time, which does not affect the lawfulness of what was done before. You can delete your account immediately in the app under Profile, or request it on the website. Send any request to info@playnitive.com and we will answer within one month at the latest. If you think we handled something badly, you can complain to the Hungarian National Authority for Data Protection and Freedom of Information (naih.hu), or go to court.
If this notice changes
If we change it materially, for example by adding a processor or changing a retention period, we will ask for your consent again in the app before the new version takes effect. Smaller clarifications are made here, and the date above always shows when it was last updated.