Privacy Policy

Shape Safari and the website htima.com
Effective date: 11 November 2026 · Last updated: 11 November 2026

In short: We collect as little information as possible. Shape Safari has no advertising and no third-party tracking. Children’s progress is stored under a parent’s account using a nickname only, and parents can delete everything at any time.

Part 1: General Privacy Policy

1. Who we are

This website and the Shape Safari app (the “Service”) are operated by W A S Perera, based in Ragama, Sri Lanka (“we”, “us”). You can reach us at admin.htima@gmail.com.

2. Information we collect

Account information: if you create an account, your email address and a password. Passwords are stored only in a protected (hashed) form, and we cannot read them.
Game progress: a player nickname, chosen avatar, scores, stars and levels completed.
Purchase status: whether a paid feature has been unlocked. Payments are handled entirely by Apple or Google, and we never receive your card or payment details.
Basic technical data: our web host may keep standard server logs (such as IP address, browser type and the time of a visit) for security and troubleshooting.
Messages you send us: if you email us, we keep the message and your address so we can reply.

We do not collect precise location, contacts, photos, microphone recordings or government identifiers.

3. How we use information

To provide the Service and save progress so it can be continued on another device.
To create and secure accounts, verify email addresses and reset passwords.
To unlock purchased content and respond to support requests.
To keep the Service safe, fix problems and improve the learning content.
To meet legal obligations.

We do not sell personal information and we do not use it for advertising or profiling.

4. Legal bases

Where data protection law requires a legal basis, we rely on: providing the service you asked for (contract), our legitimate interest in keeping the Service secure and working, compliance with legal obligations, and consent where it is required, including parental consent for children (see Part 2).

5. Who we share information with

We share information only with service providers who help us run the Service, under agreements that limit how they use it:

Hosting and database provider: Namecheap, which hosts htima.com and the database that stores accounts and game progress.
App stores: Apple and Google, which process downloads and purchases under their own privacy policies.

We may also disclose information if the law requires it, or to protect the safety of our users or the Service.

6. Where information is stored and transferred

Our providers may store data in countries other than your own. Where this happens, we choose providers that apply appropriate safeguards for personal data.

7. How long we keep information

We keep account and progress data for as long as the account exists. When an account is deleted, we delete its personal data from our active systems promptly, and from backups within a reasonable period. Server logs are kept only for a short time. We may keep limited records where the law requires.

8. Security

We use encrypted connections (HTTPS), hashed passwords and access rules so each account can only reach its own data. No system is completely secure, so please use a strong, unique password.

9. Your rights

Depending on where you live (including under Sri Lanka’s Personal Data Protection Act, the EU/UK GDPR and similar laws), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain uses, to withdraw consent, and to complain to a data protection authority. You can delete your account and its data inside the app, or contact us and we will respond within a reasonable time.

10. Cookies and local storage

The game may use your browser’s or device’s local storage to remember progress and settings so it works offline. We do not use advertising or tracking cookies. If this changes, we will update this policy and, where required, ask for consent first.

11. Third-party links

Our website may link to other sites. We are not responsible for their privacy practices. In the children’s part of the app, links that lead outside the app are protected by a parental gate.

12. Changes to this policy

If we make important changes, we will update the date above and, where appropriate, notify you in the app or by email before the change takes effect.

Part 2: Children’s Privacy

This section applies to children who use Shape Safari. It adds to Part 1 and prevails where the two differ. The Service is designed for children aged about 5 to 8 under the supervision of a parent or guardian.

1. Parents hold the account

Accounts are created and controlled by a parent or guardian. Children play under a nickname and avatar. We ask for a parent’s email address, not a child’s. Sign-up, account settings, purchases and deletion are protected by a parental gate (a task intended for adults).

2. What we collect about children

Only what is needed for the game to work: a nickname, an avatar and game progress (scores, stars, levels). We do not ask for or collect a child’s real name, date of birth, address, school, photo, voice, precise location or contact details. Please do not use a child’s real name as a nickname.

3. What we do not do

No third-party advertising and no behavioural advertising.
No third-party analytics or tracking tools in the children’s experience.
No selling, renting or sharing of children’s information for marketing.
No chat, social features or user-generated content that would let children contact strangers.
No links out of the app, and no purchases, without passing the parental gate. Purchases are made only through Apple’s or Google’s in-app purchase system.
No pressure tactics, such as rewards for sharing information or for making purchases.

4. Parental consent and legal compliance

We follow the rules that protect children’s data, including the US Children’s Online Privacy Protection Act (COPPA), the EU/UK GDPR provisions for children, Sri Lanka’s Personal Data Protection Act, and the Apple App Store and Google Play policies for children’s apps. By creating an account and letting a child play, the parent or guardian confirms that they are an adult responsible for the child and consents to the limited collection described here.

5. Parents’ choices and rights

See the information stored about your child.
Correct it, or ask us to stop using it.
Delete a child’s profile, or the whole account and all of its data, from inside the app or by contacting us.
Refuse further collection by not creating an account. The game works without one, with progress saved only on the device.

6. If you think a child has given us personal information

If you believe a child has provided personal information without a parent’s consent, please contact us at the address below and we will delete it promptly.

Contact

Questions, requests or complaints about privacy:
W A S Perera
Email: admin.htima@gmail.com
Address: 629/14, Ragama, Sri Lanka
Website: https://htima.com

This policy is a general statement of our practices and not legal advice.