Privacy Policy — Bobo

Last updated: 2026-10-18

Bobo is made by Magmanet. This policy explains what the app does with information. The short version: in offline mode nothing leaves the device. In the optional AI mode, which a parent turns on with their own Anthropic API key, the text of the conversation is sent to Anthropic to create Bobo's replies. Bobo never records or uploads audio.

Two modes

Offline mode (the default) uses only content built into the app: scripted conversations, phrases, stories and word games. It does not connect to the internet, except for the daily update check (see Permissions), which sends nothing about the child or the device. Bobo collects no usage statistics or analytics in either mode.

AI mode is optional. A parent opens the parent area (protected by a PIN), creates an API key in their own Anthropic account and pastes it into the app. From then on, AI conversations are sent from the device directly to Anthropic, PBC (the company that makes Claude), over an encrypted HTTPS connection to api.anthropic.com. We (Magmanet) run no server and never receive this data.

What is sent to Anthropic in AI mode

• The text of the current conversation: what the child said (as recognized by the phone) or typed, and Bobo's previous replies.
• The child's nickname, the interests picked from a fixed list, the English level chosen in the app, and recently learned English words.
• At the end of a conversation, the same transcript again, to produce a short summary (new words and corrections).
• The parent's API key, which authenticates the request to the parent's own Anthropic account.

Not sent: audio, contacts, location, photos, device identifiers or any account details. The app asks for a nickname only and tells the child not to enter a full name, address or school. The nickname is cleaned to letters only before it is used.

How Anthropic handles API data is described in Anthropic's own privacy policy and commercial terms (https://www.anthropic.com/legal/privacy). Under those terms, the parent is Anthropic's customer.

Speech recognition and text-to-speech

• Speech recognition uses the speech recognizer built into the phone (Android's or iOS's recognition service). Bobo receives only the recognized text. Depending on the device, the phone's recognizer may process audio on the device or send it to its provider (for example Google or Apple) under that provider's terms. Bobo itself never records, stores or uploads audio.
• Text-to-speech uses the phone's built-in speech engine. Nothing is recorded.

What is stored on the device

Saved only in the app's private storage on the device, and removed when the app is uninstalled:

• progress (talk minutes per day, XP, stars, streak, badges, completed content, word review schedule);
• the child's nickname, interests and level;
• settings and the parent PIN (stored as a hash);
• the Anthropic API key, if a parent added one;
• AI conversation transcripts and reported messages, which are deleted automatically after 30 days; the parent can delete them at any time in the parent area.

The parent area's Copy backup feature copies all of this, including the API key and transcripts, to the clipboard as text. Where the parent pastes it is up to them; the app never uploads it.

Reporting AI content

Every AI message has a report (flag) button. A reported message is hidden, is not sent to Anthropic again, and is saved on the device so the parent can review it in the parent area.

Children

Bobo is designed to help children practise English, with a parent in control:

• offline mode collects nothing;
• AI mode can only be turned on by a parent behind a PIN, with the parent's own API key;
• the AI is instructed never to ask for personal information and to tell the child to keep such information private;
• there are no ads, no in-app purchases, no accounts, no social features and no links out of the app (except the update download link, which is behind the parent gate);
• daily time limits and break reminders are set by the parent.

If you believe a child has entered personal information in an AI conversation, delete the transcripts in the parent area. To ask Anthropic about data sent with your key, contact Anthropic as their customer.

Permissions

• Internet: used in AI mode, to reach api.anthropic.com, and for the update check. Once a day the app checks for a newer version by asking the Magmanet server (EU, Contabo) — the request contains only the app name, its version number and how it was installed (site/Google Play); the server counts checks per app and version in aggregate, stores no identifiers and no IP address; if the server is unavailable the app downloads the public version file from GitHub Pages instead (GitHub may see your IP address). The check carries no identifiers and nothing about the child or the device. The update download button is behind the parent gate, and the check can be turned off in Settings ("Check for updates automatically").
• Microphone: used only while the mic button is active, by the phone's speech recognizer.
• Notifications: only if a parent turns on the daily reminder.

Changes

If this policy changes, we'll update the date above and publish the new version at the same address.

Contact

Questions? Open an issue at https://github.com/Shauls/magmanet-apps/issues