Privacy Policy for Xylophone

Last updated: June 21, 2026 · Effective: June 21, 2026

This Privacy Policy describes how Xylophone ("We", "Us", "Our") handles information when you or your child use our application. Xylophone is a simple musical toy made for young children, and it is built to be private by design. By using Xylophone, you agree to the practices described in this policy.

1. What is Xylophone?

Xylophone is a colourful tap-to-play instrument: children tap seven rainbow keys to hear real mallet notes, switch between three octaves, and record and play back their own little tunes. Everything happens on the device. There is no account, no login, and no Xylophone server. Your child's tunes and settings never leave the phone or tablet except through the Google services described below.

2. Summary

We collect no personal data. Xylophone has no sign-up and asks for no name, email, or phone number.
Tunes and settings stay on the device. The recorded tune, the active octave, and the volume are saved only in Xylophone's private app storage.
No analytics or tracking SDKs. We do not use analytics or crash-reporting tools.
Ads are child-directed and non-personalised. Free users may see ads served by Google AdMob, configured for children (see Section 5). Xylophone Pro removes all ads.
No servers of our own. We do not operate servers that receive or store information about you or your child.

3. Information Stored On The Device

The following is created and stored only in Xylophone's private app storage on the device. It is never transmitted to us:

Recorded tune — the sequence of notes and octaves you record with the in-app recorder. Saving a tune is a Xylophone Pro feature; when you save, the app renders the tune to a .wav audio file stored on your device (in a "Xylophone" folder in your shared Music storage, and an in-app copy). These files stay on your device — we never upload them. You may share a saved tune to other apps using your device's standard share sheet; if you do, you choose where it goes and that transfer is handled by your device and the app you pick, not by us. You can delete the files anytime from your file/music apps.
App preferences — the active octave and the volume level.
Pro entitlement flag — a simple on-device note of whether Xylophone Pro has been purchased, so ads stay off.

This information is removed when you uninstall the app or clear the app's storage.

4. Audio

Xylophone plays short, pre-recorded instrument samples that ship inside the app. Xylophone does not use the microphone, does not record your child's voice, and does not capture any audio from the environment. The "record" feature records only which on-screen keys were tapped and when — it is a sequence of taps, not sound from the microphone.

5. Advertising (Free Version)

The free version of Xylophone shows ads served by Google AdMob. Because Xylophone is directed to children, ads are configured to comply with Google Play's Families policy and applicable children's privacy laws:

Ad requests are tagged as child-directed (Tag For Child-Directed Treatment) and for users under the age of consent (Tag For Under the Age of Consent).
Only non-personalised ads are requested. Ads are not based on a profile of your child's interests.
Ad content is restricted to a "G" (suitable for everyone) maximum rating.
Ads are served only by Google's Families-certified ad partners.

For child-directed requests, Google does not use the device's advertising identifier to build advertising profiles. Google may still process limited information (such as IP address and general device data) to serve and measure contextual, non-personalised ads and to protect against fraud, in accordance with Google's privacy policy and how Google handles child-directed ad requests.

Purchasing Xylophone Pro removes all ads, and no ad requests are made for Pro users.

6. Purchases

If you buy Xylophone Pro (a one-time, non-subscription in-app purchase that removes ads), the transaction is handled entirely by Google Play Billing. Xylophone verifies your entitlement through Google Play and never receives or stores your payment details. We only keep a local flag indicating that Pro is active.

7. Data We Do NOT Collect

Xylophone is explicitly designed so that:

We do not collect any personal information from you or your child.
We do not require or collect a name, email address, password, phone number, contacts, photos, or location.
We do not use the microphone or camera.
We do not use analytics or crash-reporting SDKs.
We do not build advertising profiles of children, and we do not show personalised ads.
We do not sell or share personal data, because we do not collect any.

8. Children's Privacy

Xylophone is intended for young children and their families and is designed to comply with children's privacy laws, including the U.S. Children's Online Privacy Protection Act (COPPA), the GDPR provisions for children (GDPR-K), and India's Digital Personal Data Protection Act, 2023 (DPDP).

Because Xylophone collects no personal data, there is no personal information about a child for us to use, store, or sell. The only third-party data flow is the non-personalised, child-directed advertising described in Section 5, which is designed for use in children's apps. Parents who prefer a completely ad-free experience can purchase Xylophone Pro to remove ads entirely. We do not knowingly collect personal data from children or anyone else. If you believe Xylophone has somehow obtained personal data from a child, please contact us at the email below and we will address it promptly.

9. Permissions We Request

Permission	Why
`INTERNET`	Required to load ads in the free version and to communicate with Google Play for the Pro purchase.
`com.android.vending.BILLING`	Lets you buy Xylophone Pro through Google Play Billing.

Xylophone requests no other sensitive permissions and does not access contacts, photos, the microphone, the camera, or location.

10. Third-Party Services

Xylophone uses the following Google services, each governed by its own privacy policy:

Google AdMob (free version only; child-directed, non-personalised) — Privacy Policy
Google Play Billing (for the Xylophone Pro purchase) — Privacy Policy

We use no analytics or tracking services.

11. Sharing Your Data

We share data only in the following limited circumstances:

Recipient	What is shared	Why
Google LLC	Non-personalised, child-directed ad request signals (e.g. IP address, general device data); Google Play purchase verification	Serving contextual ads to free users; verifying the Pro purchase
Law enforcement / courts	Only data we actually hold (which is none about your child)	Legal obligation
Acquirer (if the app is sold)	Any applicable data	Business transfer — users will be notified

We never share your child's tunes or settings, because they never leave the device.

12. Data Retention

Data type	Retention
Recorded tune, octave, volume, Pro flag	Stored on the device until you delete them, clear storage, or uninstall the app.
Purchase entitlement	Held by Google Play for as long as you own the product.
Ad-serving data (AdMob)	Per Google's retention policy.

We do not retain any of your or your child's data on our own servers, because we never receive it.

13. Your Rights

Because Xylophone stores everything locally and collects no personal data, you are in control:

Delete on-device data by clearing the app's storage or uninstalling the app.
Remove ads at any time by purchasing Xylophone Pro.
Revoke a permission in Android Settings; the related feature simply stops working.

India — Digital Personal Data Protection Act, 2023 (DPDP)

As we do not collect personal data, there is no personal data for us to access, correct, or erase. On-device data can be cleared directly from your device settings.

European / UK Users (GDPR / GDPR-K)

You have rights of access, rectification, and erasure. As we hold no personal data, these rights are satisfied by the on-device controls described above. Child-directed ads are served on a non-personalised basis.

14. Data Security

On-device data is kept in the device's private app storage, isolated from other apps by the operating system.
Because your child's tunes and settings never leave the device, they are not exposed to server-side breaches.
Communication with Google Play and AdMob uses encrypted (HTTPS/TLS) connections.

15. Changes to This Policy

We may update this Privacy Policy. When we do, the "Last updated" date above will change, and for significant changes we will surface a notice in the app where appropriate. Continued use of the app after an update constitutes acceptance of the new policy.

16. Contact Us

For privacy questions or concerns:

Laxmi Solutions Email: laxmi.solutions.2025@gmail.com

We aim to respond within 72 hours.