A.N.A. (Always Negotiating Appetite) is a mobile app made by Adamantware OU, a company registered in Estonia. This policy explains, in plain language, exactly what the app does and does not do with data.
Questions? Email mr.adamantware@gmail.com.
The front camera is the heart of the app, so we are specific about it:
To run the usage counter, video search, subscriptions and the referral programme, the app talks to our own first-party server (the "A.N.A. silo", hosted in the EU). None of it describes or identifies your child.
Anonymous usage tally. The first time it runs, the app creates a random install ID on the device — a throwaway number that is not your name, email, phone, Google account, or advertising ID, and cannot be traced back to you. Using it, the app sends coarse, anonymous counts — app opened, a meal started, the nag shown, the paywall shown, subscribed — so a small app can tell whether it is useful. No content, and nothing about the child, is included.
Search words, kept briefly for efficiency. When a parent searches for videos (only ever behind the parent PIN), the typed words are sent to our server, which asks the YouTube Data API on your behalf and caches the result for a short time. The cache is what keeps the app efficient — repeated searches are answered without spending another YouTube request — and the search key never has to ship inside the app. Cached queries are anonymous and expire automatically.
Subscriptions. If you subscribe, we store the Google Play purchase token so we can confirm the subscription is valid. Google Play — not us — takes the payment; we never see card data.
Referral codes are temporary, and we never touch your contacts. The "invite friends, get a free month" programme works entirely through short, anonymous codes. When you invite someone, your phone's own share sheet lets you pick who to send the code to (WhatsApp, Messages, Telegram, whoever) — the app never reads, uploads, or stores your contacts or phone numbers. We have no access to your address book. The codes are transient: as a referral is redeemed the link between accounts is deleted, leaving only an anonymous "one referral completed" count for statistics. And when you earn a reward, it is issued to your Google Play account — so it follows you across your devices — never tied to a phone number. Comp vouchers (for reviewers or partners) are likewise just codes, not personal data.
Optional "Sign in with Google". If you get a new phone, you can sign in with Google so a paid subscription, a forever voucher, or referral months come back. When you do, we receive only an anonymous account identifier (the token's sub) — never your email, name, or profile — which we use solely to restore what you're entitled to on that account. Sign-in is entirely optional; without it the app works, it just can't move those non-purchase perks between devices.
These are saved only on your phone and are never sent to us:
This is deleted when you uninstall the app or clear its storage. If you use Android's built-in backup, a copy is kept in your own Google Drive (encrypted, tied to your Google account) so your setup restores on a new phone — it is a backup between your device and your Drive, and is never sent to us. You can turn this off in Android's Settings → Google → Backup.
A.N.A. is a tool a parent sets up and controls; the child never operates it. Because the camera analysis is on-device and produces nothing that leaves the phone, we do not collect any personal information from children. The anonymous data in section 03 relates to the install and the paying parent, not the child, and cannot identify any person. This is consistent with the U.S. Children's Online Privacy Protection Act (COPPA) and the GDPR provisions on children (Art. 8).
We do not knowingly collect personal data from children. If you believe any has reached us, contact mr.adamantware@gmail.com and we will delete it.
The app is distributed through the Google Play Store and uses Google Play Billing for its subscription. Google may provide us with anonymous, aggregated crash reports and basic install statistics — Google Play's standard reporting, which contains no personal information and which we use only to fix bugs. This data is handled by Google under its own Privacy Policy; you can limit it under Settings → Google → Usage & diagnostics.
We use no advertising SDKs and no third-party analytics or tracking — the usage counter in section 03 is our own, first-party, and stores only anonymous numbers.
Uninstalling A.N.A. removes everything stored on your phone (PIN, profiles, playlists, settings). The only records that remain are the anonymous server entries in section 03, which are not tied to your identity.
Under GDPR you can request access, correction, erasure, restriction, portability, or object to processing. To delete or receive your server-side data, email mr.adamantware@gmail.com; from the Parent settings screen you can share your install ID so we can locate and erase the matching records. We respond within 30 days. You may also complain to the Estonian Data Protection Inspectorate (aki.ee).
A.N.A. does not host, upload, curate, recommend, or moderate any video. Every video that plays is one a parent chose and added to their child's allow-list, and it is streamed directly from YouTube, whose own terms and content policies apply to it. Responsibility for what is watched rests entirely with the parent who selected it and with the YouTube platform that serves it. A.N.A.'s only role is to decide when a chosen video plays or pauses — based on the on-device chewing detection — never what plays.
If a future version changes what data is involved, we will update this page and the "Last updated" date above before that version is released.
Adamantware OU
Estonia
mr.adamantware@gmail.com