Privacy Policy

Updated 20 August 2026

Finger app is a drawing mobile app for young children, made by one person. This page explains, in plain language, exactly what the app records and why. It's short, because the app collects very little.

In one minute

Finger never asks for a name, email, photo, voice or location. There's no sign-up and no account.
There is no advertising in the app. None. No ad networks, no tracking for ads, no advertising ID.
We do count how the app gets used — which drawings kids finish, which ones they give up on — so we can make it better.
Those counts are anonymous. They aren't linked to your child, your family, or any other app.
We don't sell any data to anyone, ever.

Does the app know who my child is?

No. And not in a "we promise not to look" way — the app has no way to find out. There is no login, no profile, no email box, no camera access, no microphone access, and no location access. It never asks your child a single question about themselves.

Then what does it actually record?

The app sends us a short note whenever something happens — a drawing was started, a drawing was finished, a screen was opened. Here's a real example of a complete record, exactly as we receive it:

A shape was completed — shape: parrot, category: animals, strokes: 7, seconds: 41

Sent from: Samsung Galaxy A14, Android 14, app version 1.0.3, English, Wi-Fi

Labelled: 8f2c91a4 (a random number, explained below)

That's it. There's no room in these notes for a name or a message, because the app only allows numbers, yes/no answers, and words from a short list we wrote in advance. Free text physically can't get in.

The complete list of what we count:

The app was opened, and how many times this phone has opened it before
The rainbow at the start was traced, and how long it took
A category or the About screen was opened
A drawing was started, finished, replayed, or left unfinished — including which stroke your child stopped at
The grown-up check appeared, and whether it was solved
The purchase screen was opened, looked at, or closed

We also see basic phone information with each note — the phone model, the Android or iOS version, the app version, screen size, language, and whether it was on Wi-Fi. That tells us things like "this drawing breaks on small screens." It's information about a phone, not about a person.

What's the random number?

Without some kind of label, we couldn't tell whether one child traced ten drawings or ten children traced one each — and that's the difference between an app kids love and one they abandon.

So when the app is first opened, it makes up a random number and stamps it on the notes. It's a number we invented, used by nobody else, connected to no name or email, and useless for recognising anyone in any other app or website.

Delete the app and the number is gone for good. Reinstalling creates a brand-new one, unconnected to the old.

It is not an advertising ID. The app never asks for the permission that would let it read one.

Why do we collect this at all?

One reason: to make the app better for your child.

A concrete example. When we see that 60% of children abandon the octopus on stroke 6, that tells us stroke 6 is drawn badly and we should redraw it. Without that, we'd just be guessing which of 258 drawings are frustrating.

We do not use any of it for advertising, for building a picture of your child, or for anything else.

Who else sees it?

The counts are stored for us by PostHog, an analytics company that holds the data on our behalf, on servers in the European Union. They're contractually allowed to do nothing with it except store it for us.

Nobody else sees it. We don't sell it, we don't share it with advertisers or data brokers, and there are no other companies involved.

How long do you keep it?

12 months, then it's deleted automatically. We don't keep children's data indefinitely, and we don't keep it longer than we need it.

How do I turn it off?

Delete the app. Because we hold nothing that identifies your child, uninstalling stops all collection completely and erases the random number from the phone.

We'll be straight with you about one thing: if you email and ask us to delete your child's specific records, we can't find them — the notes carry no name and no account, only a random number we can't trace to anyone. That's a side effect of collecting almost nothing, not a dodge. Write to us and we'll tell you exactly what's held and do anything we're technically able to do.

Who made this?

Finger is made by Daniil Galkin, an individual developer.

Email: dangalkin@hey.com — questions about privacy, or anything else. Every message gets read.
Postal address: 43882, Spain, Tarragona, Segur de Calafell, Calle Peru, 15
Telephone: +34 663899974

The legal details, briefly

For completeness. The sections above are the substance — this is the same thing in the language regulators use.

Who's responsible. Daniil Galkin is the data controller under the EU and UK GDPR, and the operator under the US Children's Online Privacy Protection Act (COPPA). This policy covers the Finger app (com.watafun.finger) on Google Play and the App Store.

COPPA. The random number is a persistent identifier collected and used solely to support the internal operations of the app, as the COPPA Rule defines that term — maintaining and analysing how the app functions. No other personal information is collected from children. It is never used to contact a child, build a profile, serve behavioural advertising, or encourage more use of the app. Parents may review, refuse further collection of, and delete their child's information; the practical limit on identifying individual records is described above. We don't require a child to disclose more information than is reasonably necessary — the app asks for nothing.

Data retention. Events are deleted 12 months after they are recorded, automatically. Children's data is not retained indefinitely.

GDPR / UK GDPR. Our lawful basis is legitimate interests (Art. 6(1)(f)) in maintaining, securing and improving the app, balanced against children's rights by minimising the data: no identity, no profiling, no advertising, no location, no free text, and a short retention period. You may have rights of access, correction, deletion, restriction, objection and portability, and may complain to your national supervisory authority (in the UK, the ICO). Because the data is anonymous, Art. 11 applies — we won't collect more information about you purely to identify your records.

Location and IP. Before each event is sent, the app overwrites the IP address with 0.0.0.0 and sets the flag instructing PostHog not to perform a geographic lookup. No country, region, city or coordinates are recorded.

Identifiers we never transmit, in line with Google Play's Families policy: Android Advertising ID (AAID), Apple IDFA, IMEI, IMSI, MAC, SSID, BSSID, SIM serial, build serial.

Processor. PostHog Inc. acts as our processor under a written data processing agreement, EU region. Data is transmitted over TLS. We disclose data only where legally compelled, and then only as far as required.

Changes. If what we collect changes, we'll update this page and the date at the top. Where a change materially affects information already collected from children, we'll obtain any consent the law requires first. A summary of this policy is available in the app under About → Show Privacy Policy.

Contact Us