Privacy Policy

Effective October 26, 2026

Who we are and what this covers

Toucan Nexus is made and operated by GuerrillaSuite LLC (“GuerrillaSuite,” “we,” “us”), a Texas company. This policy covers the Toucan Nexus app at toucannexus.app (its Kid Zone, Parent Zone and games), the family account you can use with it, and this information site (together, the “Service”).

Family accounts use GuerrillaSuite's shared family sign-in, which other GuerrillaSuite apps may also use. Signing in is shared, but each app's data is not: another GuerrillaSuite app can't see a child's Toucan Nexus progress, and a household turns on each app separately.

Playing without an account

Without an account, the Parent Zone keeps each child's profile on your device: a display name (a nickname is fine), an animal picture, which games they can see, and settings. The games save each child's progress (levels, scores, stars) and a help history, which records each help line TOUCAN played and what the child did next. The Parent Zone shows that history as “Help stats.” All of this is kept in your browser's storage on that device. It isn't linked to any account, and it doesn't carry over to other devices. If it is deleted, we can't recover it.

To improve TOUCAN's help, the app can also send us anonymous help results: which help line played, in which game and level, and whether the child's next move was right, another mistake, or nothing at all. These are sent without the child's name, without any account, and without any code that identifies the device, so we can't link them to a child or a family.

Family accounts

A family account lets children keep their progress across devices, and lets a family share a tablet or set up a child's own device. Only adults create and sign in to accounts. We store:

• About the parent or guardian: email address and how you sign in (such as an emailed code or a passkey), your name if you give one, your household and its members, and your role in it.
• About each child, entered by a parent: a display name (first name or nickname), an avatar and colour, and optionally a birth month and year so games can suit their age. We never ask for a child's full birth date, last name, photo, email address, voice recording, phone number or location.
• About each child's play: which games are turned on, settings, game progress, and help history, as described above.
• About devices: which devices are linked to the household, whether each is a parent's or a child's device and which children use it, plus when it was set up and last used.
• For security: sign-in records (time, device and IP address) and a history of account changes, such as adding a child or linking a device, so we can protect accounts and show you what changed.

Children never sign in or create anything themselves. A child's device is linked to the household by a parent, and it can only play as the children the parent chose.

How we use information

• To run the Service: sign you in, keep each child's progress and settings in sync across your devices, and let you manage your household.
• To make TOUCAN and the games better. We look at help results and game progress across all players together, such as how often a particular hint leads to a right answer or where children commonly get stuck, so we can rewrite hints, change their order and tune difficulty. For this work we use the data in combined form, with names, emails and account links removed. Any individual child's help history is used only to run that child's games (for example, so TOUCAN doesn't repeat a hint that didn't help) and to show it to their parent.
• To keep the Service secure, prevent abuse and fix problems.
• To email parents about their account: sign-in codes, invitations they request, and important notices such as changes to this policy. We don't send marketing email.

We never use children's information for advertising, never build profiles of children for anyone else, never sell or rent personal information, and never share it for targeted advertising.

Children's privacy

Toucan Nexus is made for young children, and we follow the U.S. Children's Online Privacy Protection Act (COPPA).

• Parents decide. We collect a child's information only after a parent creates a family account, reads this notice and gives consent. We confirm consent by email when the account is set up. Without that, children can still play without an account, as described above.
• Only what's needed. A child doesn't have to give any information to play. We don't ask for more than the Service needs.
• No disclosure. We don't share children's information with third parties, except service providers that store and process it for us under contract (listed below) or when the law requires it.
• Parents' rights. A parent can review the information we hold about their child in the Parent Zone, or by emailing us. A parent can also have it deleted and stop any further collection, either by removing the child from the household or by deleting the family account. A parent can also ask us to do this by email.

If you believe a child has given us personal information without a parent's consent, for example in an email, contact us and we will delete it.

Service providers

These companies process information on our behalf and may use it only to provide their services to us:

• Cloudflare hosts the app and this site and runs our servers. Every web request passes through Cloudflare, which sees technical details such as IP address, browser and device type, and the page requested, and uses them to deliver the Service and protect it from attacks. (Cloudflare's privacy policy)
• Neon hosts our databases, where family accounts and synced progress are stored. (Neon's privacy policy)
• An email delivery service sends sign-in codes and account email, using the parent's email address.
• Google Fonts: some games load their lettering from Google, which receives the same technical request details and states that it doesn't use them to profile users or target ads. (Google Fonts' privacy FAQ)
• Stripe processes support payments (see below). (Stripe's privacy policy)

The Service has no advertising, no third-party analytics or tracking tools, and no social media plugins. The Kid Zone has no chat, no way for a child to share anything, and no links to other websites. The few outside links, such as device setup guides from Apple and Google, are in the Parent Zone.

We may also disclose information if the law requires it, such as in response to a valid legal order; to protect the safety of children, our users or the public; or as part of a merger or sale of the business, in which case this policy continues to apply to the information transferred.

Support payments

Adults can choose to support Toucan Nexus with a payment, processed by Stripe on Stripe's own pages. Stripe collects the payment details you enter, such as name, email, card or bank information and billing address. We never see or store your full card number. From Stripe we receive a record of the payment: name, email, amount and date, card type and last four digits, and billing country or postal code. We use it to confirm the payment, answer questions, handle refunds, prevent fraud and keep the records the law requires. Support payments are separate from family accounts and have no effect on what a child can play.

When you contact us

If you email us, we receive your email address and what you write, and use them only to help you. Please leave children's personal details out of messages.

How long we keep information

• On your device: until you delete it, clear the site's data or uninstall the app.
• Family accounts: while the account is in use. When a parent removes a child or deletes the household, that information is taken out of use right away. It is permanently deleted after 30 days, which gives you time to undo a mistake. Copies in our backups are overwritten within a further 30 days.
• Inactive accounts: if no one in a household has signed in or played for 24 months, we email the parent and then delete the account.
• Sign-in and security records: up to 12 months.
• Help results: anonymous help results, and combined statistics with names and accounts removed, may be kept to keep improving TOUCAN. They can't be used to identify a child.
• Payment records: as long as tax and accounting law requires, generally up to seven years.
• Emails to us: only as long as needed to help you.

Security

The Service uses encrypted connections (HTTPS) everywhere, and our providers encrypt stored data. Only GuerrillaSuite can access account data. A child's device never holds a parent's sign-in, so a child can't change household settings or reach a parent's account. No system is perfectly secure, but we take reasonable steps to protect what we hold, and we keep as little as we can.

Your choices and rights

You can see and change your household's information in the Parent Zone. You can also email us to ask what we hold about you or your child, to correct it, or to delete it. Depending on where you live, you may have further rights under U.S. state privacy laws, the EU/UK GDPR or Canada's PIPEDA. We will honor these requests wherever we can, except for records we must keep by law, and we won't treat you differently for making one. We may need to confirm that you're the account's parent first.

Where information is processed

GuerrillaSuite is based in the United States. Our providers operate worldwide, so information may be stored and processed in the United States and other countries.

Changes to this policy

If we change this policy, we'll post the new version here and update the effective date. If a change would collect a new kind of information from children, or use children's information in a new way, we'll email parents with family accounts before it takes effect. Where the law requires it, we'll ask for their consent again.

Contact us

GuerrillaSuite LLC
Email: guerrillasuite@gmail.com