Bumle Bjørn is built by Haug & Datter (Jonas Haug, Drammen, Norway). This policy explains how the app handles data. We take privacy seriously, especially because the app is built for children.

Last updated · 24 September 2026.

Bumle Bjørn does not collect personal information. There is no registration, no login, and no user account. Any data the app uses is stored locally on your device or in your own iCloud account:

Child profiles. Name, age, avatar or profile photo, and learning progress are stored in UserDefaults on the device. If you turn on iCloud sync in Parental control, profiles sync via iCloud Key-Value Store to your own devices. Sync is off by default.

Audio recordings. Voice recordings made by parents or professionals are stored locally only and encrypted with a device-specific key. Bumle Bjørn never sends recordings to our servers or any third party, and does not sync them.

Custom categories and images. Parents can create custom categories with their own pictures. Family, toys, places the child knows. Images and category data are stored only on the device, unencrypted.

Settings. Preferences like language, difficulty, and screen time are stored locally. Each child's choices live in the child profile and follow it if iCloud sync is on.

Parents or professionals (typically a speech therapist or a grandmother recording for her grandchild) can export all recordings from one voice as a .bumlepack file and share it through the system's usual channels (AirDrop, iMessage, Files).

Export only happens when you explicitly choose it. When you share a pack, the file leaves the app's control and is subject to the sharing channel's own terms. The pack contains the audio recordings in plaintext, together with the voice's name and role, so the recipient can import them; the recipient's device re-encrypts the files with its own local key.

You are responsible for ensuring sharing happens with the consent of everyone involved, especially the person who recorded the voice.

Bumle Bjørn uses no third-party SDKs, analytics services, ad networks, or tracking tools. We share no data with third parties.

iOS may give the app technical reports on performance and crashes (MetricKit). The app stores them only on the device, deletes them after seven days and never sends them anywhere.

The app contains no advertising. We do not use IDFA, fingerprinting, or any other identification methods.

Bumle+ is an optional one-time purchase, with no subscription and no automatic renewal, handled by Apple via the App Store. Bumle+ can also be activated with an offer code from the developer, redeemed through the App Store, which gives the same access. We have no access to payment information. Purchase status is verified via StoreKit and stored locally.

Bumle Bjørn is designed for children aged 1–8. The app complies with both COPPA and GDPR-K, and:

· Does not collect personally identifiable information from children.

· Contains no links to social media. Links out of the app, to the App Store, email and the privacy policy and terms online, sit behind a math question only adults can solve.

· Has a parental lock with a math problem, Face ID or Touch ID.

· Does not allow children to share information out of the app.

· Contains no advertising.

Deletion. All data about the family can be permanently deleted via Settings → Parental control → Delete all data. This deletes the profiles with their progress and profile photos, including the copy in iCloud, and the audio recordings, voices, custom categories and your own names and pictures on the cards. iCloud sync is turned off at the same time. The Bumle+ purchase, the language and the parental lock choice stay.

Audio recordings. Individual recordings can be deleted via Settings → Sound and voice, under Family voices and Feedback sounds.

Profiles. Profiles can be deleted one at a time in Settings: switch to the profile, tap the active profile at the top and then the profile card, and choose Delete profile at the bottom of Edit profile. The progress and profile photo go away, while recordings, voices and custom categories belong to the whole family and stay. The last profile is removed with Delete all data.

Voices. A voice can be deleted along with all its recordings, including a voice imported from a .bumlepack file.

Several devices. Deletion does not sync to other devices. If you use iCloud sync on several devices, turn it off on the other devices first and delete there too. Otherwise one of them can put the profiles back in iCloud.

· PIN codes from older versions of the app are stored as SHA256 hashes in iOS Keychain.

· Audio recordings are encrypted with AES-256-GCM via CryptoKit.

· The encryption key is device-specific and never leaves the Keychain.

· Files are protected with iOS File Protection.

· The parental lock requires a math problem, Face ID or Touch ID.

Data controller: Jonas Haug (Haug & Datter), Drammen, Norway.

Send email to [email protected]. You'll get a reply from Jonas himself, usually within a day.

We may update this policy as needed. Changes are published on this page with an updated date.