← Super Siblings

Privacy Policy

Last updated 1 August 2026 · Effective 1 August 2026

The short version. We never collect information about your children. Their names, ages and preferences are stored only on your phone and are never sent to us or anyone else. The only personal information we hold is your own: your email address, and whether you have an active subscription.

This policy explains what Aljundi Lab Corporation ("we", "us") does with personal information in the Super Siblings mobile app. It applies to the iOS and Android apps and to nothing else.

1. Who we are

Aljundi Lab Corporation
Ontario, Canada
Privacy contact: eng.mulhamjundi@gmail.com

We are the operator responsible for the personal information described here. Write to that address for any question, request or complaint about privacy; a person reads it.

2. What we collect

From you, the parent

WhatWhyWhere it comes from
Email address To create and identify your account, send receipts, and let you recover access You, or the Google / Apple account you sign in with
Display name (if your sign-in provider supplies one) To greet you by name and to show your partner who invited them Google or Apple
Subscription status and purchase history To know whether your trial or subscription is active Apple App Store or Google Play, via RevenueCat
Crash reports and basic usage events To find and fix bugs, and to see which features get used Your device, via Firebase Crashlytics and Firebase Analytics
Your partner's email address, if you send them an invite To deliver that one invitation You

About your children — nothing

The app asks you for each child's first name, age and a few preferences so it can choose suitable activities. That information never reaches our servers. It is written to a database stored inside the app's private storage on your phone, and it is not transmitted to us, to Google, to Apple, or to any other company.

This is a design decision, not a promise about intent. The code that syncs data to our servers has no path to child records; the family record that can sync deliberately excludes them.

One honest exception: your own device backup. If you have iCloud Backup or Android Backup switched on — most people do — your phone copies the app's storage into your backup, along with everything else on the device. That copy belongs to you, sits in your Apple or Google account, and is encrypted by them. We cannot see it and it is not sent to us. We leave this enabled deliberately: switching it off would mean that replacing your phone wipes every child profile and you start again. If you would rather it did not happen, turn off backup for Super Siblings in your device settings.

The practical consequences are worth knowing:

What we never collect

3. Children's privacy

Super Siblings is designed for a parent to set up and for children to use under that parent's roof. The account holder is always an adult. Children never sign in, never create accounts, and never enter anything that is transmitted anywhere.

Because we collect no personal information from children at all, we do not need — and do not seek — verifiable parental consent for children's data under the Children's Online Privacy Protection Act (COPPA). If you believe a child has somehow provided us with personal information, email eng.mulhamjundi@gmail.com and we will delete it.

4. Data retention

We keep personal information only as long as it is needed for the purpose it was collected for, and no longer. We do not retain personal information indefinitely.

InformationKept forThen
Children's names, ages and preferences Never held by us. Stored on your device only, for as long as the app is installed Deleted with the app
Your account (email, display name, family record) While your account is open Deleted within 30 days of you deleting your account
Subscription and purchase records 7 years after the transaction Deleted. Retained this long because Canadian tax law requires business records to be kept
Crash reports 90 days Deleted automatically by Firebase Crashlytics
Analytics events 14 months Deleted automatically by Firebase Analytics
Partner invitations 30 days from sending Expired and deleted, whether or not they were accepted

You can delete your account at any time from Settings → Account → Delete my account inside the app. Doing so erases your account and family record from our servers. Some records may persist briefly in encrypted backups, which are themselves deleted on a rolling 30-day cycle.

5. Who else sees your information

We do not sell personal information. We do not share it for advertising. We have no advertising partners because we run no advertising.

We use a small number of service providers, each of which processes data only on our instructions:

ProviderWhat they handleWhere
Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Crashlytics, Analytics) Your account, family record, crash reports, usage events United States
RevenueCat, Inc. Subscription status United States
Apple / Google Payment processing. We never see your card details Per their own policies

This means your personal information is stored on servers in the United States and may be accessible to US authorities under US law. If you would rather it were not, please do not create an account.

We may also disclose information where we are legally required to, or where it is necessary to protect someone's safety. If that ever happens we will tell you, unless we are legally prohibited from doing so.

6. How we protect it

We maintain a written information security programme, summarised on our Information Security Policy page. In brief: data is encrypted in transit and at rest, server-side access rules deny any request that is not from the authenticated owner of the data, parental gate PINs are stored only as salted hashes, and access to production systems is limited to those who need it.

No system is perfectly secure. If we ever suffer a breach affecting your personal information, we will notify you and the relevant regulators as required by law.

7. Your rights

Under Canadian federal privacy law (PIPEDA), and depending on where you live under laws such as Quebec's Law 25, the GDPR or the UK GDPR, you may have the right to:

Email eng.mulhamjundi@gmail.com and we will respond within 30 days. We will never charge you for exercising these rights, and we will never treat you differently for having done so.

If you are unhappy with our response, you can complain to the Office of the Privacy Commissioner of Canada, or to your local data protection authority.

8. Changes to this policy

If we change this policy in a way that materially affects you, we will tell you in the app before the change takes effect, and update the date at the top of this page. Continuing to use Super Siblings after that means you accept the revised policy.

9. Contact

Aljundi Lab Corporation, Ontario, Canada
eng.mulhamjundi@gmail.com