Data Security & Privacy Plan

Puppet Pals 2: School Edition is a creative animation app developed by Polished Play LLC for classroom use. This plan covers version 1.6.9 on iOS and Android, including testing releases.

The iOS School Edition uses App Store ID 557616416. The Android School Edition uses package com.polishedplay.puppetpals2.school and is intended for private distribution through managed Google Play. For the standard edition and earlier iOS versions, see the version guidance in the privacy policy.

This plan helps educational agencies review the product against their requirements, including FERPA, COPPA, GDPR, and local policy. It is a description of product practices, not a certification, independent security audit, or substitute for an agency's legal review.

Changes to data practices require updates to this plan, the privacy policy, and applicable store disclosures before the affected release is made available.

School Edition sends automatic first-party telemetry to Polished Play to understand feature use and improve reliability. This includes:

• App launches, built-in content and feature choices, recording and export outcomes, durations, and counts.
• App and operating-system versions, device category, timestamps, and a random session identifier that changes when the app process starts. Our telemetry does not include an account identifier or advertising identifier.
• Technical failures and diagnostic details, including error messages and, on Android, stack traces. Error text can contain information about the circumstances of a failure; it should not be assumed to be free of personal information.
• Approximate country and region derived from network request information and retained with server analytics. The app does not request GPS location for this purpose. Hosting and network services also receive connection information, including IP addresses; this plan does not promise that infrastructure logs never retain it.
• An email address and message when an adult submits the optional feedback form. The form is intended for parents, caregivers, and educators and asks them not to include children's personal information.

Usage telemetry does not upload movie recordings, custom photos, drawings, or other creative project files. Projects and imported media are stored locally, not synchronized or hosted by Polished Play. Device backup settings and a school's management policies may independently affect exported or local files.

Android ML Kit and iOS Schoolwork have separate data paths described below. Their behavior should not be inferred from the identifiers omitted by our own telemetry.

Administrative safeguards support the data practices described in this plan:

• Changes to collection or service providers require privacy and security review before release, together with updates to the applicable policy documents.
• Polished Play personnel are trained on privacy requirements relevant to children and educational technology, including FERPA, COPPA, and GDPR.
• Polished Play does not sell, rent, or use Puppet Pals 2 user data for advertising or profiling.
• Security and privacy questions from educational agencies are reviewed by the product owner.

• Creative content is processed and stored locally. The app does not provide Polished Play accounts or cloud project storage, and does not include advertising.
• Requests to our backend use HTTPS. The app buffers usage events for sending when it backgrounds; unsuccessful batches may be retried from local storage for up to seven days. This retry window is not a server deletion schedule.
• The iOS app uses custom first-party telemetry and does not embed a third-party analytics SDK. Apple Vision processes image cutouts on the device.
• Android uses Google ML Kit for on-device subject cutouts. Google Play services may download the model and ML Kit sends technical metrics to Google. Input images and resulting cutouts are not sent to Google by ML Kit.
• On supported school-managed iOS devices, ClassKit records the start, stop, and duration of a “Make a movie” activity for Apple Schoolwork. Apple and the school manage that activity information; Polished Play does not receive those ClassKit records.
• App updates are distributed through Apple's App Store or Google Play, as applicable.

Creative projects remain local, but School Edition has hosted telemetry and support data paths. The services have different roles and do not all receive the same information.

Polished Play backend

Receives and stores first-party usage and diagnostic records and optional support submissions through Vercel-hosted backend services and a Neon database. Network infrastructure receives connection information such as IP addresses.

Support and diagnostics

Slack receives feedback notifications. Google Gemini receives the sender's email, subject, and part of a feedback message for automated spam filtering. Technical incident notifications can also be sent to Slack where configured. These support paths do not upload the app's creative project files.

Google ML Kit / Android

Provides automatic subject cutouts on the device. Google documents collection of device and app information, device or installation identifiers, performance and configuration details, and technical events and errors. These SDK metrics are separate from Polished Play's own telemetry. Google handles them under its own terms; input images and cutouts remain on the device.

Apple Vision / iOS

Processes image cutouts on the device. This image-processing path does not send the source photos or resulting cutouts to Polished Play.

Apple Schoolwork / iOS

On supported school-managed devices, ClassKit exposes a “Make a movie” activity and records its start, stop, and duration in Apple's school-managed system. Polished Play does not receive the ClassKit activity records or a student identifier from that system.

Store distribution

Apple operates App Store and Apple School Manager distribution. Google operates Google Play and managed Google Play distribution. The stores handle acquisition, licensing, delivery, and related records under their own terms and the school's configuration.

See the privacy policy for the collection notice and links to the platform providers' privacy information. Email sent separately to Polished Play also includes the information the sender chooses to provide. Schools should avoid including student information in support messages.

Keeping user-created work off Polished Play systems substantially reduces the impact of a service-side incident, but it does not eliminate software-security risk. If a confirmed incident affects School Edition, its backend, or information associated with a school deployment, Polished Play will:

• Investigate and begin containment upon discovery.
• Notify affected educational agencies within 72 hours of confirming the incident, when agency information is available and notification is applicable.
• Describe the nature and timing of the incident, the information involved, the remediation taken, and a contact for follow-up.
• Release a corrected version through the applicable app store when an app update is required.
• Cooperate with affected agencies and regulators as required by applicable law.

Our server cleanup is scheduled to remove raw PP2 analytics and diagnostic events older than 90 days, and to remove old session records once no retained events depend on them. This does not set a deletion deadline for support correspondence or copies in service-provider systems. Support messages currently have no fixed automatic deletion period.

The app retries a failed locally stored batch only while it is no more than seven days old; the next retry check discards older batches. This is separate from server retention. See the privacy policy for the related collection and use notice.

Parents, caregivers, and schools can request access or deletion by contacting privacy@polishedplay.com. We review requests according to the information we can identify and applicable requirements. Because telemetry has no account identifier, we may be unable to associate a session with a particular person. This plan does not promise a fixed deletion deadline.

Creative projects remain on the device and are controlled by the user or educational agency managing it. The school is responsible for local retention, backup, export, and deletion through its device-management and records-retention procedures. Apple and Google manage their own distribution and platform-service records under their respective policies.

Polished Play does not host the app's creative projects, so student work must be exported, transferred, or deleted from the school's devices under its own procedures when a deployment ends. Polished Play cannot restore those local projects from its servers.

Ending a deployment does not automatically delete telemetry or support records held by Polished Play. Schools can contact the privacy address above about records they can identify and any access, transition, or deletion requirements.

The apps' local-storage design and lack of user accounts are intended to simplify institutional privacy review. Polished Play will respond to reasonable questions about the current product and its data paths.

If a district requires a vendor questionnaire, data privacy agreement, or written confirmation of a product behavior, contact privacy@polishedplay.com. Requests are evaluated according to their scope and proposed terms.

The following table maps the School Edition practices described above to the five functions used by NIST Cybersecurity Framework 1.1. It is a descriptive mapping and does not represent certification by NIST or an independent security audit.

IDIdentify

School Edition does not create user accounts or upload creative projects to Polished Play. Its data inventory includes first-party usage and diagnostic records, optional support submissions, and the platform services described in this plan.

PRProtect

Creative projects stay on the device. First-party telemetry omits account and advertising identifiers and uses a new session identifier each time the app process starts. Network submissions use HTTPS. Optional support messages and diagnostic text still require appropriate handling.

DEDetect

First-party usage and diagnostic reports help identify feature failures and reliability problems. Support reports can also identify security concerns. Polished Play does not receive the creative projects or Apple Schoolwork activity records described in this plan.

RSRespond

Reported vulnerabilities are investigated and contained, affected educational agencies are notified when applicable, and corrected app versions are distributed through the applicable app store.

RCRecover

Recovery may involve correcting the app or backend services. Users and schools retain control of creative projects stored on their devices; Polished Play does not provide a hosted project backup or recovery service.

For questions about this plan, a procurement review, or Puppet Pals 2 data practices, contact privacy@polishedplay.com.