Last Updated: November 2, 2026 · Effective Date: November 2, 2026
K and A Studios LLC ("K&A Studios," "we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, disclose and otherwise process personal information in connection with the Hopscotch mobile application for iPhone, iPad and Android devices (the "App"), the Hopscotch account service (the "Account Service"), the software on the Hopscotch Clock wall display (the "Clock"), our website at hopscotchclock.com (the "Site"), and any other service that links to this Privacy Policy (together, the "Services"). It also explains the choices and rights available to you.
This Privacy Policy is part of our Terms of Use. By using the Services, you acknowledge that you have read and understood it. If you do not agree with it, please do not use the Services.
We collect information that you provide to us, information collected automatically when you use the Services, and information we receive from third parties. Some information is stored only on your own devices and is never collected by us (Section 1.4).
The App does not use cookies, advertising identifiers, third-party analytics or other tracking technologies. Information the Clock transmits is described in Section 2.
Subscription information. Subscriptions are purchased through the Apple App Store or Google Play. The store you use provides us with the subscription product, its status and dates, and transaction or order identifiers, together with a random purchase identifier that we assign to your account so that the store's notices reach it. We do not receive your payment card details.
When you use a Hopscotch Clock, the following is stored on the Clock and, where indicated, on your mobile device, and is not collected by us: routines, steps, times and pictures; names and labels you enter; voice reminders; the figure and display settings; your home Wi-Fi network name and password (stored on the Clock only); the pairing code that links your device to the Clock; and images of the Clock's screen displayed in the App. When you reach a linked Clock from outside your home, this information passes through the Account Service without being stored (Section 2.4).
The Clock sends standard time requests to public time servers (pool.ntp.org), which receive your home's IP address.
The Clock checks for software updates at updates.hopscotchclock.com, which is operated for us by Cloudflare. The request includes the Clock's hardware type and current software version, and the update site receives your home's IP address. We use these requests only to deliver updates.
Unless you turn it off, the Clock sends a short health report once a night. It contains the Clock's software version and hardware type; how long it has been running; the number of restarts since the last report and how many followed a crash; the reason for the last restart; any software version that failed and was rolled back; free memory; Wi-Fi signal strength; and, after a crash, technical details of where in the software it occurred. Reports are sent with a random report identifier generated by the Clock. They do not contain names, routines, pictures, Wi-Fi network names, passwords or the Clock's serial number, and they are not linked to any person or account. We do not store your IP address with them, and we delete them automatically after 90 days. We use them only to find and fix problems with the Clock and its software.
A Clock that is linked to a family keeps one encrypted connection to the Account Service and proves its identity with a key held only by the Clock. It sends its serial number, software version and the number of times it has been factory reset. When a family member uses the App away from home (a feature that requires a subscription), the App's request and the Clock's response, such as the routine, an image of the Clock's screen or a voice reminder, pass through the Account Service without being stored. We record when the Clock connects and disconnects so that the App can show whether it is online. A Clock that is not linked to a family checks once, when it is new or after a factory reset, and does not otherwise connect.
We use personal information to:
We do not sell personal information, use it for advertising, or use it to build profiles of you or your children. We use child profile information, routines and voice recordings only to provide the Services to your family.
Members of a family can see each other's display names and roles, the children's profiles, and the family's routines and voice reminders, as their role allows. The owner can also see open invitations. Members' email addresses are not shown to other members.
We use the following service providers, which process personal information only on our behalf and under our instructions:
We may disclose information if we believe in good faith that it is required by law, subpoena or other legal process, or that it is necessary to protect the rights, property or safety of any person.
If we are involved in a merger, acquisition, financing, reorganization or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.
We may disclose information for other purposes with your consent.
We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months.
The Services are designed for parents and caregivers to use with young children. Accounts are available only to adults aged 18 or over. Children do not create accounts, sign in, or provide information to us through the Services.
When a parent or caregiver adds a child's profile, the adult provides the child's first name or nickname and chooses a figure. For a Virtual Clock, the adult also provides the child's routine and may record voice reminders. Only adults aged 18 or over may record voice reminders, and a parent should delete any reminder a child has recorded. If a child can be heard in a recording, it is retained like any other recording until it is deleted. We use this information only to show the child's day on the family's devices and to the caregivers the parent invites. We do not disclose it to third parties except our service providers, and we never use it for advertising.
A parent may review, change or delete a child's profile and routine at any time in the App, and may email support@hopscotchclock.com to ask what information we hold about a child or to have it deleted. Deleting the family owner's account deletes the family and every child's profile, routine and recording in it. If we learn that we have collected personal information directly from a child under 13, we will delete it.
We retain personal information for as long as needed to provide the Services and for the periods below, unless a longer period is required by law:
We use administrative, technical and physical safeguards designed to protect personal information, including: storing passwords only as scrypt hashes and session keys and email codes only as hashes; encrypting all connections (HTTPS/TLS); limiting repeated sign-in attempts and signing out other devices when a password changes; restricting our staff administration page to authorized staff behind a separate sign-in and recording every change made there; accepting only Clock software digitally signed by us; requiring a code shown on the Clock's own screen before a device can control it; and passing a remote request to a Clock only for signed-in members of its family, within their role. Some actions, such as a factory reset, pairing a device and changing where the Clock obtains software, can never be performed remotely. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You can review and change your display name and password, sign out, or sign out on all devices, under Account in the App.
You can delete your account at any time under Account > Delete account. This deletes your account, your sessions and email codes, and the families you own, together with their children's profiles, Virtual Clocks, routines, recordings and invitations, for everyone in them. In families owned by someone else, you are removed and the family's record of changes no longer names you. Before deleting, an owner can transfer a family to another caregiver.
Family owners can remove caregivers, cancel invitations and delete children's profiles. Caregivers with permission to edit can change profiles and routines. Any voice reminder can be deleted individually, and a Virtual Clock can be deleted with its routine and recordings in its settings.
The App asks for local network access to find and communicate with your Clock; camera access only to scan the code on a Clock's screen when pairing (the image is not stored or sent); microphone access only while you record a voice reminder; and, if you turn it on, Face ID, Touch ID or your Android device's fingerprint or face unlock to unlock your account, which is checked on your device and never sent to us. You can change these permissions at any time in your device's Settings. Uninstalling the App deletes its data from your device; your account remains until you delete it.
Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information we hold about you, and to opt out of the sale or sharing of personal information or its use for targeted advertising (we do not sell, share or use personal information for those purposes). Most of these rights can be exercised directly in the App. To make any other request, email support@hopscotchclock.com. We will verify your request using information associated with your account, respond within 45 days, and not discriminate against you for exercising your rights. You may use an authorized agent, and if we decline your request you may appeal by replying to our response.
The Site is hosted by Cloudflare. When you visit it, Cloudflare receives your IP address and the information your browser sends, and serves the Site's pages, images and fonts. If you visit hopscotchclock.com without "www", GoDaddy, our domain registrar, also receives that information and sends you on to www.hopscotchclock.com. The Site does not use cookies.
Purchases of Hopscotch products are governed by our Terms of Sale, and payment information is handled by our e-commerce provider under its own privacy policy.
The App is distributed through the Apple App Store and Google Play and can be used with Apple CarPlay and Android Auto. These are governed by Apple's and Google's own terms and privacy policies. Car Ride countdowns on CarPlay and Android Auto run on your device and are not sent to us. We are not responsible for the practices of third parties.
The Services are intended for users in the United States. Information is stored in the United States; the Account Service's database is located in Cloudflare's eastern North America region.
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last Updated" date and, if a change is material or means we will collect information we did not collect before, we will notify you in the App before it takes effect.
If you have questions about this Privacy Policy or our privacy practices, or wish to exercise your rights, contact us at:
K and A Studios LLC