Bumle Bjørn is built by Haug & Datter (Jonas Haug, Drammen, Norway). This policy explains how the app handles data. We take privacy seriously, especially because the app is built for children.

Last updated · 25 April 2026.

Bumle Bjørn does not collect personal information. There is no registration, no login, and no user account. Any data the app uses is stored locally on your device or in your own iCloud account:

Child profiles. Name, age, avatar, and learning progress are stored in UserDefaults and synced via iCloud Key-Value Store to your own devices.

Audio recordings. Voice recordings made by parents or professionals are stored locally only and encrypted with a device-specific key. Bumle Bjørn never sends recordings to our servers or any third party.

Custom categories and images. Parents can create custom categories with their own pictures. Family, toys, places the child knows. Images and category data stay local on the device.

Settings. Preferences like language, difficulty, and screen time are stored locally.

Parents or professionals (typically a speech therapist or a grandmother recording for her grandchild) can export all recordings from one voice as a .bumlepack file and share it through the system's usual channels (AirDrop, iMessage, Files).

Export only happens when you explicitly choose it. When you share a pack, the file leaves the app's control and is subject to the sharing channel's own terms. The pack contains audio recordings in plaintext so the recipient can import them; the recipient's device re-encrypts the files with its own local key.

You are responsible for ensuring sharing happens with the consent of everyone involved, especially the person who recorded the voice.

Bumle Bjørn uses no third-party SDKs, analytics services, ad networks, or tracking tools. We share no data with third parties.

The app contains no advertising. We do not use IDFA, fingerprinting, or any other identification methods.

Bumle+ is an optional upgrade handled by Apple via the App Store. We have no access to payment information. Purchase status is verified via StoreKit and stored locally.

Bumle Bjørn is designed for children aged 1–8. The app complies with both COPPA and GDPR-K, and:

· Does not collect personally identifiable information from children.

· Contains no links to social media or external websites.

· Has parental controls with PIN and Face ID.

· Does not allow children to share information out of the app.

· Contains no advertising.

Deletion. All data can be permanently deleted via Settings → About Bumle Bjørn → Delete all data.

Audio recordings. Individual recordings can be deleted via audio settings.

Profiles. Profiles can be deleted individually from the side menu.

Imported voices. Voices imported from a .bumlepack file can be deleted like any other voice.

· PIN codes are stored as SHA256 hashes in iOS Keychain.

· Audio recordings are encrypted with AES-256-GCM via CryptoKit.

· The encryption key is device-specific and never leaves the Keychain.

· Files are protected with iOS File Protection.

· Parental lock requires PIN and/or Face ID.

Send email to jonas@haugogdatter.no. You'll get a reply from Jonas himself, usually within a day.

We may update this policy as needed. Changes are published on this page with an updated date.