Privacy

Effective 13 October 2026. Optional accounts, cloud saves and web Pro purchases are available for adult players. Online child features remain disabled. Device-only play is available without an account.

Who operates Ultimidi

Ultimidi is operated by TIPS4DESIGN SRL, Bld. Decebal, Nr. 70, Craiova, Romania, EU. This company is responsible for the account and game data described here. Contact hello@ultimidi.com for account support and privacy requests.

Device-only play

The game saves player names, selected pets, settings, lesson and minigame progress, earned items, performances and input calibration on your device. The game does not need an email, real name or payment account for a child. A save export contains player progress. A recovery export can also contain queued cloud operations and signed access proofs; keep it private.

Optional accounts

For cloud saves we store the adult’s email, sign-in and security records, selected country, connected profiles, progress and sync receipts. Child sync uses a separate parent-permission flow where enabled. Each account can hold five profiles. Private cloud saves do not require public sharing or marketing consent.

Optional social features use a generated alias, selected cosmetics and shared note performances. A current Pro badge appears beside Pro players in friends and ranking views. Global rankings include only accounts with current Pro, a verified email and the relevant sharing permission. There is no player chat or photo upload. The adult chooses sharing permissions and can block accounts, export data or withdraw child permissions. Social permission is separate from payment and cloud-save permission.

We use account and progress data to provide the account, cloud saves and sharing features you request. We use sign-in and security records for our legitimate interest in protecting accounts and preventing abuse. Creating an account does not subscribe you to marketing emails. Email sign-in links, verification and password-reset emails are service messages. You can separately choose to receive music tips, game news and occasional Pro offers, and turn that choice off in account settings. We record the choice and its time; it is off by default.

Play limits

We save the adult’s rules, reset time zone and play time by game area. Devices keep a local copy for offline use and upload usage receipts to avoid counting the same time twice. Several offline devices can exceed a shared cap before they reconnect. Usage is for parent controls, not advertising.

Problem reports and feedback

When the game stops because of an error, it sends a technical report to our own server: the game version, the kind of screen (for example “lesson”), a standard error type and a fixed summary code (never the error message text), the file names and line and column numbers of our own program files, and coarse device facts such as screen size group, browser and system family, browser version and whether the device was online. It does not contain saves, music played, names, emails, account or profile identifiers, cookies or full web addresses, and it is not linked to an account. We do not store the sender’s IP address with a report. If a report cannot be sent, the device keeps up to five for up to seven days and sends them later.

You can also choose to send a problem or an idea, and add an optional note after an error. A note is sent only when you choose Send; please leave out personal details. A Kid Account sends a fixed choice instead of a written note unless a grown-up confirms first. We use reports and notes only to find and fix problems and improve the game, based on our legitimate interest. They are not used for advertising or profiles, are visible only to the Ultimidi team and are deleted after 90 days.

Purchases

Paddle, Apple or Google processes payments. Paddle.com is the merchant of record for web orders and handles the buyer’s payment details under its own privacy notice. We store an opaque billing account ID, provider purchase IDs, selected plan, verified payment/access status, renewal dates and terms version. These records let us restore access, prevent duplicate purchases, apply refunds and answer billing issues. We do not store full card numbers. We send receipts or service messages through the responsible provider, and renewal reminders to the adult. Children receive no purchase marketing.

App stores and Paddle process data under their own notices when payments are enabled. Our current hosting provider is Hetzner. Amazon Web Services sends service emails through Amazon SES in Europe (Stockholm). Cloudflare provides network services and routes messages sent to our support address. Email reaches your chosen mailbox provider, which can be outside the European Economic Area. These providers also publish their own privacy information: Hetzner, Amazon Web Services and Cloudflare.

Game usage measurement

We use our UXWizz installation at dashboard.uxwizz.com to measure visits and main game actions, such as starting and finishing a lesson, placing a sticker, opening a screen and using account entry. Events contain action names, lesson or item references and progress counts. We do not include player names, email addresses, passwords, played notes, account identifiers or saved performances in these events. The game disables session recordings and click and movement heatmaps. The tracker also processes technical visit data, including browser, device, referrer and network address. You can disable UXWizz on this browser by opening the tracking opt-out link; game play remains available.

Offer measurement

When an account owner opens the Pro plans, we record which price and currency the account saw. We compare these account counts with checkout starts and verified purchases to improve our offers. Sandbox tests and live payments stay separate. This measurement is not used for advertising or Kid Account profiles. Account export includes these records and account deletion removes the account link and its offer-view records. Public launch counts contain no customer details. Used launch places remain as anonymous inventory after billing records are deleted.

Retention and control

Use account controls to export or delete account data. Local files you downloaded are not removed by a cloud deletion. Cloud backups expire within 35 days; progress recovery checkpoints within 30 days. Ordinary daily play summaries are kept for 35 days. Problem reports, feedback and their notes are deleted after 90 days. Sync and usage receipts remain while a profile exists so an old device cannot credit the same operation again. Profile deletion removes those profile records.

While your Account exists, we keep its billing records to provide access, restore purchases and handle refunds. When you delete the Account, we remove its link to you. A subscription that can still renew, or a checkout still awaiting payment, keeps the records until it ends, so cancel with the payment provider first. After that, we delete unpaid checkout attempts. We keep payment, refund and chargeback records and purchase receipts, including app store purchases, with that account’s completed checkout records, for 5 years from 1 July of the year after the record was made: a 2026 record is deleted on 1 July 2032. A later renewal, refund, chargeback or fee change starts its own period. Provider payment notifications follow the same rule. The remaining billing records go with the last of these records, or at once if the provider confirmed that nothing was paid. Payment providers separately keep records under their own policies and duties.

Your choices

You can play without an account, choose private profiles, control sharing, download your data and delete your account. Where applicable, you can request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and complain to your data protection authority. Contact hello@ultimidi.com for these requests. No third-party child advertising or behavioural tracking is included.