Effective date: November 4, 2026
com.gratoka. Gratoka is designed for young children to use together with a parent or guardian. The website and adult-directed campaign pages have a separate privacy policy; this policy does not describe the separate iPhone and iPad app.Information handled by the app
To load app configuration and game and storybook content, the app makes requests to Magic Forge Inc's API and content delivery network. A network request can expose the receiving service and its infrastructure to the device's IP address, user agent or other request metadata, the requested resource, and the time of the request. Our services and delivery providers use the information needed to return content, protect and operate the service, and investigate technical issues.
Installation analytics
We collect installation observations to understand whether a Gratoka installation is new or an existing installation upgrade. The observation includes the app version, launch number, event identifier and time, and a random app-generated installation identifier. It is not Android's Advertising ID.
Drawings and other app content
Drawings made in the app are stored locally on the device. The app does not upload or sync those drawings to our servers. Removing the app's stored data or uninstalling it may remove locally stored drawings.
Purchases
Google Play handles checkout and the payment method for purchases under Google's own terms and privacy practices. To verify or synchronize a purchase, the app sends our backend the Google Play purchase token, product ID and base plan ID. The request also includes the app version and may include the same app-generated installation identifier so the purchase can be associated with that installation. Purchase verification is separate from installation analytics. Magic Forge Inc does not receive payment card or payment account details through this app flow.
Support messages
A parent or guardian may choose to send a support request from the app. The request includes the reply email address and message they provide, app version and build number, device model, Android version, locale and language preferences, time zone, UTC offset, and the time the request was created. The support service stores the request and may forward its details, including the email address and message, to Telegram to notify support staff. The Android support form does not send file attachments. Please do not include sensitive information about a child unless it is needed to resolve the request.
Advertising
The Android app covered by this policy does not integrate a third-party advertising SDK, use Android's Advertising ID, or display third-party ads.
Service providers and international processing
We use our API and content delivery services to provide app configuration and content, and may rely on infrastructure providers to host, deliver, secure, or maintain those services. Support request details may be sent to Telegram for staff notifications. Google Play separately handles checkout. These services may process technical information such as network request metadata. Magic Forge Inc is based in the United States; service providers may process information in the countries where their systems operate. The exact infrastructure provider and processing location can vary by service.
Retention
Drawings remain in local app storage unless removed from the device. We retain server-side installation analytics, support requests, purchase verification and technical records only as long as needed for the purposes described in this policy and applicable legal obligations. The duration varies by record and service.
Choices and parent requests
A parent or guardian may stop using the app and manage locally stored app data through the device's available controls. Because drawings are not uploaded or synced, we cannot retrieve or delete a server copy of a drawing. A parent or guardian may contact us to ask what server-side information is associated with a support request or purchase, or to request access or deletion of relevant records. We may ask for reasonable information to verify the request and locate relevant records. Google Play purchase records are also subject to Google's controls and policies.
Security
We take steps intended to protect information while it is handled. No internet transmission or electronic storage method can be guaranteed completely secure.
Changes to this policy
We may update this policy as the app or its data practices change. We will post the updated policy with a revised effective date.
Contact
Magic Forge Inc, 30 N Gould St Ste R, Sheridan, WY 82801, United States. Parents and guardians may contact support@magicforgeinc.com with privacy questions or requests.