Privacy policy

Version 1 · October 14, 2026

Who is responsible for your data

The person responsible for your personal data is David Souvannavong, an individual, who builds binomio. For any privacy question, including your rights to access, correct, delete or object (called ARCO rights under Mexican law), write to privacidad@binomio.io. He handles those requests himself.

Right now, binomio is being tested by one family, through TestFlight. Before it opens to other families, this policy will change: it will include the responsible party’s address, or the name of the company that takes over (see “Changes to this policy”).

The short version

binomio has no accounts and doesn’t ask for an email address. Each phone has its own key to your family.
It keeps each child’s name and age, their explorer and what the adults record in each session, each adult’s name and languages, and each phone’s name and model.
It uses this only to make binomio work. No ads, no selling data, no third-party analytics (what Apple shows us through TestFlight is explained below).
Of what your child does on the screen, only the continent they choose for the session reaches the server. Their answers stay on the phone.
You can ask for a copy, a correction or deletion at privacidad@binomio.io.

The data we keep

About each child, what an adult in the family types or chooses:

their name (you can use a nickname);
their age, which binomio stores as an approximate month and year of birth;
the explorer chosen for them, the name it was given, and the colors of its scarf, bag and notebook;
their progress: for each activity, the mark the adult gives (“On their own,” “With help” or “Not yet”), the date, and what binomio works out from it (what they’ve mastered, their reviews, their stickers);
for each session, the date and time, the minutes chosen, the continent your child chose, the language, which adult led it and the mood the adult noted at the end;
whether a profile is archived and whether a continent is paused.

About each adult in the family: the name they use in binomio and whether they speak Spanish, French or both. Adults are profiles within the family, not accounts.

About each phone or tablet in the family: the name it shows in binomio (by default its model, for example “iPhone 15 Pro”; you can change it when you add it), its model, how and when it joined the family, when it last connected and, if it was removed, when. binomio doesn’t read the name you gave your phone in its settings.

Proof that you agreed: which version of this policy you accepted and on what day.

Technical data on the server:

for the family’s key and each phone’s key, we keep only an encrypted fingerprint that can’t be turned back into the key;
to prevent abuse, an encrypted fingerprint of the IP address a family was created from;
a log of each connection, with no data about the children: what was requested, the response, how long it took, the app version, part of your family’s identifier and, in our server provider’s log, the IP address and the type of browser or app.

If you write to us: your email address and whatever you tell us.

We don’t process sensitive data. The mark for an activity and the mood for a session are what an adult notes at home: they aren’t an assessment or a diagnosis, and binomio has no free-text fields about a child’s health or behavior. We also don’t keep photos, audio, location or contacts.

Where it comes from

Everything comes from an adult in the family, in the app. A child’s data is entered by their mom, their dad or whoever looks after them. Children don’t enter any data. They choose the session’s continent, and what they answer on the screen stays on the phone: it’s only used to suggest a mark to the adult, who confirms or changes it.

What we use it for

Only to make binomio work:

creating your family and adding or removing phones;
saving each child’s progress and syncing it to every phone in the family;
choosing each child’s next activity;
showing progress to the adults in the family;
answering you if you write to us;
keeping the service secure and complying with the law.

There are no other purposes: we don’t use your data for advertising, we don’t build marketing profiles and we don’t sell it. If we ever wanted to use it for something else, we’d ask for your consent first.

Your consent and your children’s data

The first time you open binomio, before you enter any data, we show you a summary of this policy and ask you to confirm: “I’m their mom, dad or guardian and I accept the privacy policy.” binomio keeps the version you accepted and the day.

Only someone with parental authority or guardianship over the children, or an adult they’ve authorized, can accept it. We handle children’s data with their best interests first: we ask for the minimum and don’t use it for anything else.

You can withdraw your consent at any time by writing to privacidad@binomio.io. Since binomio can’t work without this data, withdrawing it means deleting your family’s data (see “Your rights”).

Who it’s shared with

The adults in your family see the progress of the family’s children on their own phones. You decide which phones join, and you can remove any of them.

The responsible party can look at the data on the server only to handle what you ask for (a problem, a copy, a deletion) or what the law requires.

The providers that store or move the data for us:

Railway (United States): binomio’s servers and database.
Apple (United States): if iCloud Keychain is turned on, the family’s key is stored there, so you can recover it if you switch iPhones. iCloud Keychain is end-to-end encrypted: Apple can’t read it. If you’re testing binomio with TestFlight, also read that section.
Cloudflare (United States): hosts this website and forwards the emails sent to binomio.io.

These providers process the data only on binomio’s behalf, with protection at least equal to what this policy describes, and don’t use it for anything else.

The emails you send us arrive in a Gmail account belonging to the responsible party. Google keeps them under its own privacy policy and doesn’t use them to show ads.

Transfers: we don’t share your data with anyone else, except with an authority that legally requires it. If binomio is taken over by a company that keeps providing the same service, your data will move to it; by accepting this policy, you accept that transfer. Before the change, the app will show you the new policy and, if you don’t agree, you can ask us to delete your family’s data.

What you share yourself from your phone, a screenshot for example, stays under your control.

Where it’s stored and how it’s protected

On your family’s phones and tablets, and on servers in the United States. The safeguards:

data is encrypted in transit between the app and the server, and the database is encrypted;
each phone has its own key; a removed phone loses access;
for keys, the server keeps only an encrypted fingerprint;
the server log keeps nothing about the children or what the adults record;
the app includes no analytics, no ads and no other third-party code;
only the responsible party has access to the server.

How long we keep it

Your family’s data: as long as you use binomio. If no phone in the family connects for 24 months, we delete the family’s data from the server. Since binomio doesn’t keep your email address, we can’t warn you first: this policy is the notice.
When you ask us to delete it: it’s deleted from the server within 15 business days of our reply. Server backups delete themselves within 27 days at most. If we ever had to restore a backup, we’d delete again whatever you asked us to delete.
The connection log: 30 days at most.
The IP fingerprint used to prevent abuse: 30 days at most.
What’s on your phones: uninstalling binomio deletes the progress stored on the phone. The phone’s key stays in its keychain, and the family’s key in your iCloud Keychain, so you can get your family back if you reinstall binomio. To make a phone lose access, remove it from another phone in the family or ask us to delete your family’s data.
The emails you send us: as long as we need them to help you, and no more than 24 months after your last email.

Your rights and how to use them

You can ask us for access to your family’s data (we’ll send you a copy), to correct it, to delete it (one child’s or the whole family’s), or object to how it’s used. You can also withdraw your consent. For now, everything is requested by email: binomio doesn’t have a delete button in the app yet.

How: write to privacidad@binomio.io with your name, the right you want to use and the data it concerns. To confirm the request comes from your family, we’ll ask for details only your family knows, such as the names of the profiles and their explorers. If you’re acting for a child, it’s enough to be their mom, dad or guardian.

Timing: we’ll reply within 20 business days and, if your request applies, carry it out within the next 15 business days. It’s free.

If we don’t reply or you disagree with our answer, you can go to the Secretaría Anticorrupción y Buen Gobierno, Mexico’s data protection authority.

How to limit the use of your data

Use a nickname instead of your child’s name.
Remove, from the app, any phone that shouldn’t see progress anymore.
Archive a child’s profile, or ask us to delete it.
Ask us to delete all of your family’s data.

If you’re testing binomio with TestFlight

While binomio is in testing, it’s installed with TestFlight, Apple’s app for test versions. In App Store Connect, Apple shows us the name and email we invited you with, your phone’s model and system version, how often you open binomio, and the app’s crash reports. If you send us feedback from TestFlight, we also see the screenshot and what you wrote. Apple keeps that data under its own policy. We use it only to fix binomio and don’t copy it anywhere else.

This website

binomio.io doesn’t use cookies, has no analytics or ads, and doesn’t load anything from other sites: the fonts and images come from the site itself. Cloudflare receives each visitor’s IP address in order to serve the page. This site has no forms: if you write to us, you do it from your own email.

If something goes wrong

If a security problem affects your data, we’ll post it right away on this page: what happened, what data was involved, what we did and what we recommend. If you’ve written to us, we’ll also email you.

Changes to this policy

If this policy changes in a way that matters to you (the data we keep, what we use it for, who it’s shared with or who is responsible), the app will show you the new version and ask you to accept it again before you continue. Each version has its own number and date.

Language and version

This policy is available in Spanish, French and English. If the versions differ, the Spanish version prevails.

Version 1 · October 14, 2026.