Privacy policy

This policy explains how Pesto ("we", "us") handles personal information when you use the Pesto app for iOS and Android, visit pestokids.com, apply to the Founding Families program, receive our emails or message us on WhatsApp (together, the "Services"). Pesto is run by Devansh Agarwal, trading as Pesto, who is responsible for your information (the "controller" in UK law). Sections 2 to 10 cover the app, section 11 covers the website, and the rest cover both.

What the app doesn't collect: your email, your name, your kids' last names, photos, recordings of anyone's voice, contacts, precise location, the device's advertising ID, or payment details.

We use the information in section 2 to:

• sign you in, by sending a one-time code to your WhatsApp number, and keep you signed in;
• protect grown-up screens with your parent PIN, and help you reset it with a WhatsApp code;
• set up each kid's profile, so the stories and games fit their age, language and interests;
• make the story say your kid's name;
• keep the app working on your device, fix problems, and stop misuse such as fake sign-ups;
• reply when you contact us.

We use your number only for sign-in codes and to reply when you message us. We don't send marketing messages from the app.

When you add a kid, our server makes the story lines that say their first name, so they're ready when your kid plays. ElevenLabs turns each line, with the name in it, into speech.

ElevenLabs receives the first name and the words of the line, not the age, interests or anything else about your kid, and not your number. It processes them only to provide this service to us. The finished lines are stored on our server and deleted with your kid's profile.

If you'd rather the story didn't say a real name, you can use a nickname.

During "say it" moments, the app asks your kid to say a word out loud. To notice that they spoke, it listens to the sound level on the device, while the moment lasts. The sound is measured and then gone: nothing is recorded, saved to a file, kept or sent, to us or anyone else. The app doesn't recognise words or voices. You can turn off microphone access in your device's settings at any time, and the game still works.

Your kids' game progress (treasures and choices), your sign-in session and the install ID are stored on the device. Deleting the app removes them. Your account and your kids' profiles are on our server, so deleting the app doesn't delete your account (see section 10).

We don't sell personal information. We share it only with service providers who process it on our behalf, under contracts that limit them to providing their service to us.

For the app

For the website and Founding Families, see section 11.

We may also share information if the law requires it, to protect someone's safety, or if Pesto is merged or acquired. Any new owner must keep the promises in this policy.

The app has no ads, no analytics and no tracking tools. It doesn't use the device's advertising ID, doesn't build profiles of kids, and doesn't share or sell anything for advertising. Links that leave the app (our privacy policy, terms, email and WhatsApp) sit behind the parent PIN or a press-and-hold, so a kid can't leave by accident.

• Your account and kids' profiles: while your account is open. Deleting a kid's profile deletes their details and their name audio from our server.
• When you delete your account: everything is deleted within 14 days (section 10).
• Server logs (such as IP addresses and requests, used to keep the service running and secure): up to 30 days.
• Sign-in codes: they expire within minutes, and we keep only what we need to stop misuse.

What we collect. When you apply: your email address, your kids' first names (a nickname is fine) and age brackets for up to 2 kids, and your answers (what you hope Pesto helps with, what your kids do after school). When you visit: the link or ad you came from, the pages and steps you viewed, errors, and your device and browser type. If you message us on WhatsApp: your number and your messages. We give each application a short code (for example PF-7K2Q) to match your WhatsApp message to it.

How we use it. To review applications and choose Founding Families; to send your confirmation and updates (every email has an unsubscribe link); to reply on WhatsApp; to personalise the application and emails with your kids' first names; to see which ads and pages bring families to us; and to keep the site safe from spam and fake sign-ups.

Who helps us.

We never send your kids' names or ages to Linkrunner or Meta.

Cookies and similar tech. Your browser saves your application progress so you can pick up where you left off. PostHog and Linkrunner use browser storage to recognise repeat visits and measure our ads. We don't show ads on our website.

How long we keep it. Until 12 months after the Founding Families program ends, then we delete it, unless your family uses the app, which sections 2 to 10 cover. To delete it sooner, email privacy@pestokids.com from the address you applied with, and we'll do it within 30 days.

The Pesto app is for kids aged 3 to 8 to play under a parent or guardian's account. The website and the Founding Families program are for parents and guardians aged 18 or older. A parent or guardian signs up with their own WhatsApp number and enters each kid's details; kids don't. We collect only the kid details in section 2, use them only to run Pesto for your family, never ask a kid for personal information, and never use it for advertising or profiling.

As a parent or guardian, you can:

• review and change your kids' details at any time, in Parents Area;
• delete a kid's profile, or your whole account, in Parents Area or by emailing privacy@pestokids.com;
• ask us to stop collecting or using your kids' information, by deleting their profile or your account.

These are the rights the US Children's Online Privacy Protection Act (COPPA) gives parents, and we give them to every family. If you believe a child has given us personal information without a parent, email privacy@pestokids.com and we'll delete it.

Everyone can ask us to show, correct or delete the information we hold about them and their kids, to stop using it, or to send them a copy. Email privacy@pestokids.com (from the address you applied with, or with the WhatsApp number on your account, so we know it's you). We'll answer within 30 days and won't treat you differently for asking. You can also complain to the authority where you live:

In the UK, we rely on these legal bases: providing the app you asked for (contract) for your account, sign-in, kids' profiles and name audio; our legitimate interests for keeping the Services secure and fixing problems; and your consent where the law asks for it, which you can withdraw anytime. You also have the rights to restrict and to object to our use, and to data portability. We design the app for kids under the UK Children's Code: high privacy by default, no profiling, and nothing that nudges kids to share more.

In India, a parent or guardian gives consent for their kids when they set up the app and enter their details, and can withdraw it by deleting the profile or account. You can also nominate someone to exercise your rights if you can't.

Our servers and our providers' systems are in the United States, except game progress, which stays on your device. If you live outside the US, your information is transferred there. We use providers with strong security practices and, where the law requires it (for example for the UK), contracts that keep your information protected to the same standard.

We protect your information with encrypted connections (HTTPS), sign-in by one-time WhatsApp codes instead of passwords, your parent PIN stored only in hashed form, access limited to the people who need it, and providers with strong security practices. If a breach affects your information, we'll tell you and the authorities as the law requires.

If we make a material change, we'll tell you before it takes effect, by email or on WhatsApp, and update the date at the top. We won't use information about your kids in a new way without asking you first.

• Privacy questions and requests, including our grievance contact for India: privacy@pestokids.com
• Help with the app: hello@pestokids.com
• Devansh Agarwal, trading as Pesto, San Francisco, California