Privacy Policy

Effective 31 July 2026

1.Scope

Mighty Little Monkey: New Journey to the West is published by Lumvex Labs, Inc (“we”, “us”). This policy explains what we do with information collected through:

this website, and
the Mighty Little Monkey app for iOS and Android.

The two are different, and the sections below say which is which wherever it matters.

2.Privacy protections in the app

Mighty Little Monkey is read by language learners of every age, from adults working through a second language to children reading their first books. We designed it so that whoever is reading is not identified, tracked, or advertised to — not as a setting to be found, but as the only way it works.

Reading every unlocked book, taking the quizzes, earning trophies and finishing a season all work without an account, a name, an email address, or a sign-in of any kind.

In practice

No accounts. The app works fully anonymously. There is no sign-up, no sign-in, and no profile to create.
No advertising. The app contains no advertising of any kind, targeted or otherwise, and no advertising SDKs.
No advertising identifier. We do not use the device advertising identifier (IDFA / Android Advertising ID), and we do not build advertising profiles of readers.
No social features. There is no chat, no messaging, no user profiles, no photo upload and no way for a reader to publish anything or to be contacted by another user.
Adult gates. Purchases, external links and the contact form sit behind a gate that a young child is not expected to pass.
We never sell or share personal information for advertising or any other purpose, as those terms are used in US state privacy laws.

The app collects nothing that identifies a reader personally — no name, no email address, no account. The one persistent identifier it does hold, described in §3, exists so that a purchase can be restored to the installation that paid for it, and it is used for nothing else. The US Children’s Online Privacy Protection Act (COPPA) counts a persistent identifier as personal information, but allows it without verifiable parental consent where it supports only the internal operations of the service — which is the only use we make of it. Rights for parents and guardians are set out in §9 regardless.

3.Information the app collects

The app holds most of what it knows on the device itself — which book is open, which page, the chosen language, the trophies earned. That data stays on the device and is never uploaded to us.

What does leave the device is limited to the following.

A random installation identifier. Created by the purchase system so the app knows which passes this installation has bought, and so a purchase can be restored. Not linked to a name or email.
Store receipt. Issued by the app store when a pass is bought, and checked by us so the content unlocks. It contains no card details.
Technical data. IP address, operating system, app version, device model and language — so we can deliver the books, serve content the device can play, keep the service secure, and diagnose faults. We do not derive a precise location from it.

Information the app does not collect

No name, no email address, no phone number, no postal address, no photographs, no contacts, no precise location, and no recordings. The app does not request microphone or camera access. Narration is played to the child; nothing is recorded from them.

4.Information the website collects

The website is aimed at parents, teachers and librarians rather than children. Our host keeps standard server logs — including IP addresses — for security and troubleshooting.

Analytics

We use Google Analytics on this website to understand which pages people visit and how they arrive — how many readers reach the app page, which language the site is being read in, whether a link we shared is working. It sets cookies in your browser and sends Google your IP address, the pages you view and basic device and browser information.

We use it to improve the site and nothing else. Advertising features, remarketing and Google Signals are switched off, so the data is not used to build an advertising profile of you or to target ads to you anywhere. You can opt out for every site you visit with Google’s browser add-on, or by blocking cookies for this site. The app itself carries no analytics SDK — this applies to the website only.

The contact form

A message sent through the contact form gives us a name, an email address, the topic chosen, a school or organisation if one is given, and the message itself. It is emailed to our support inbox and used to reply — nothing more. It is not added to a mailing list, and we do not market off the back of it.

Email updates

Subscribing to updates gives us an email address, the language the site was being read in, and which page the subscription came from. We use it to send occasional news about the app and the books — a new season, a new language — and nothing else. Every message carries an unsubscribe link, and unsubscribing deletes the address. We never sell or share it, and we never use it for advertising by anyone else.

Both forms are for adults. Please don’t enter a child’s email address, or send us someone else’s contact details; we don’t need them, and we will delete them if they arrive.

5.Use of information

To provide the product — deliver books and narration, unlock what has been bought, restore purchases.
To take and support payments — through the app store, or through our payment provider on this website.
To reply when someone writes to us.
To keep the service working and secure — diagnosing crashes, preventing fraud and abuse, and protecting against unauthorised copying of the books (§7).
To understand the product in aggregate — for example, how many people finished a season. These measures are counted at event level and are not used to build a profile of a person or a household.
To meet legal obligations, including tax and accounting.

We do not use anything we collect for advertising, for profiling, or for automated decision-making.

Legal bases (UK and EEA)

Where the UK GDPR or EU GDPR applies, we rely on: performance of a contract for delivering purchases; legitimate interests for security, fraud prevention and aggregate product measurement, balanced against the rights and freedoms of the people concerned; legal obligation for tax and records; and consent where we ask for it, which may be withdrawn at any time.

7.Data retention

On-device data — progress, trophies, settings. Until the app is deleted or its data cleared. It is on the device, not ours.
Purchase and tax records. As long as tax and accounting law requires — typically seven years.
Server and security logs. A short, rolling period, then deleted.
Email updates. Until the address is unsubscribed.
Support correspondence. Until the matter is closed and any related dispute period has passed.

8.Children's privacy

A parent or guardian who believes we hold information about their child may ask to see it, to have it deleted, and to stop any further collection. Write to support@mightylittlemonkey.com and we will act on it. Refusing further collection may mean parts of the app stop working — for example, purchases can no longer be restored.

If a child has given us personal information despite the design described in §2, tell us and we will delete it.

9.Privacy rights

Residents of the UK, the EEA, Switzerland, California and other US states with privacy laws have rights to access, correct, delete and port their personal data, to restrict or object to processing, to withdraw consent, and to opt out of sale, sharing, targeted advertising and profiling. We do none of those things (see §2), so there is nothing to opt out of. Because the app has no accounts, there is also little to return: a random installation identifier and a store receipt (§3). Everything else stays on the device and goes when the app is deleted.

Requests go to privacy@mightylittlemonkey.com, and no one is treated differently for making one. A refusal may be appealed by reply, and complaints may go to the relevant regulator — in the UK the Information Commissioner’s Office, elsewhere in the EEA or Switzerland the national data protection authority, in the US the state Attorney General, in Canada the Office of the Privacy Commissioner.

10.Data deletion

The app: delete it. Everything it stored goes with it, because it was all held on the device. Purchases stay recoverable from the app store using the same store account.
Website:clear the browser’s storage and cookies for this site. That removes the language and basket keys the site sets, and the analytics cookies described in §4.
Anything we hold: write to privacy@mightylittlemonkey.com from any address, naming Mighty Little Monkey. No account is needed, because the app has none. Requests are answered within 30 days.

Deleted on request: the purchase record held for the app — the anonymous identifier the app is known by, and the record of which passes and packs are unlocked.

Kept, and for how long: the transaction records that tax and accounting law requires, typically seven years; and server and security logs, for a short rolling period before they are deleted.

Deleting does not refund purchases. It also ends the ability to restore them in the app, because restoring works by looking up exactly the record the request removes.

11.Security

Data is encrypted in transit and at rest, access to production systems is restricted, and we collect as little as we can — which is the strongest protection available, because information never collected cannot be exposed. No system is perfectly secure, and we cannot guarantee that transmission over the internet is free of risk.

12.International transfers

Our systems run in the United States. If Mighty Little Monkeyis used from outside the United States, information necessarily travels there. For transfers out of the UK or EEA we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum.

13.Policy updates

If we change this policy we will update the effective date at the top. Where a change materially affects how we handle information already collected — particularly anything involving children — we will give notice in the app or by email before it takes effect, and obtain consent where the law requires it.

14.Contact us

Lumvex Labs, Inc
Privacy questions and requests: privacy@mightylittlemonkey.com
Everything else: support@mightylittlemonkey.com, or the contact form