Privacy policy
What we know about you, and what we don't.
Bandit is made by AG, Inc., a Delaware corporation. This is the whole of what we collect, why, and how to make us delete it. It is written to be read, not scrolled past. Effective October 13, 2026.
The short version
There are no accounts and no logins. Photos never leave your device. The microphone hears loudness only and records nothing.
Your name, phone number, country and an age range — kept on our own Cloudflare account, used only to run the program, deleted when it ends or when you ask.
With it, only which notifications you chose — new decks, tips. No name, no number, never linked to the form. Turn them off and we delete it.
Which decks and cards it shows and for how long, how its pages turn, its settings, battery and sleep. Never your photos, your voice, or anything you type. It's off until you choose it, and you can stop and delete it in the app's Help.
The app contains no third-party analytics or advertising code. This website counts visits in aggregate with Cloudflare Web Analytics, which uses no cookies. We don't sell, rent or share what you give us with anyone.
1. Who we are
AG, Inc. ("we", "us"), a corporation organized under the laws of the State of Delaware, makes Bandit — the display, the companion app, the deck library and this website. Questions and requests about your information go to hello@bandit.kids.
2. The website
The founding-family form
If you ask for a Bandit, we receive the name, phone number and country you enter and the age range you choose, together with the time you sent it. We store these on our own Cloudflare account, in the United States, and use them for exactly one purpose: to contact you about the Founding Family Program and, if you join it, to run it. We will text you about the program and about nothing else; reply STOP to any message and we won't text again. We keep this information until the program ends or until you ask us to delete it, whichever comes first, and then we delete it.
To keep automated submissions out, the form includes a hidden field that a person never sees and a limit on how many submissions a single network address can make in an hour. That address is used only for the count, which expires on its own; it is never stored with your name.
The Read Along demo
The "Try it with your voice" demo asks your browser for the microphone. The audio is measured for loudness inside your browser and nothing else — no recording, no speech recognition, no transmission. The microphone is released as soon as the demo finishes or you leave the page. You can use the demo without a microphone by tapping instead.
Counting visits
To learn how many people visit and which pages are useful, this site uses Cloudflare Web Analytics, from the company that hosts it. When a page loads, a small script from Cloudflare (static.cloudflareinsights.com) reports the page, the site that sent you here, your country, your browser, operating system and type of device, and how quickly the page loaded. Cloudflare says it sets no cookies, stores nothing on your device and does not fingerprint visitors by network address or browser. We see totals only, never who you are, and we never connect them to anything you type into the form, with one exception described next. What the app can share, only if you choose to, is in section 3.
Links that carry a campaign tag. Some links to this site, such as an ad or a post, end in labels like utm_source=instagram that say which link it was. When a page loads with such labels, our own Worker adds one to a daily count for that label. Nothing else comes with it: no network address, no cookie, nothing about your browser. If you then send the founding-family form, we keep those labels with your request, so we know which link brought you. Visitors who arrive without labels are not counted this way.
What the website does not do
This site sets no cookies, loads no advertising and runs no third-party scripts other than Cloudflare's counter above. The typefaces, images and our own scripts are served from our own address. So that the founding-family form doesn't ask twice, the page keeps two small notes in your own browser's storage: that you've sent it, and when you last closed it. They never leave your browser, and clearing your browsing data removes them. Our hosting provider, Cloudflare, may keep short-lived technical logs (such as network addresses and request times) to operate and protect the service, as any host does; we do not use them to identify visitors.
3. The display and the app
No accounts. The app has no sign-up and no login, and it works with your display without an internet connection.
The founding-family form in the app. If you don't have a Bandit yet, the app offers the same form as this website. It sends the same four things (name, phone number, country and age range) to the same place, only when you tap to send it, and we treat them exactly as section 2 describes. The only extra detail is that we note it came from the app rather than this website.
Family Faces. Photos you choose are turned into black-and-white cards on your phone, and the photo itself never leaves your phone. The cards go to your own display over Bluetooth. With iCloud sync on (it is, unless you turn it off in the app’s Help), the cards and the names you gave your displays are also kept in your own iCloud — the private iCloud database of your Apple Account, end-to-end encrypted — so your other iPhones and iPads have them. We can’t see them, and they never reach a server of ours.
The microphone. The display's microphone measures how loud the room is, so that a read-along page can turn when you have finished a line. It cannot distinguish words, records nothing and sends nothing, not even to your phone. If you choose your phone as the listener instead, your phone's own on-device speech recognition is used and nothing is sent to us.
Notifications. Notifications are off until you turn them on. If you do, the app sends us the address Apple issues for delivering this app's notifications to your phone (a long random string), which of the two kinds you chose — new decks and tips — and the app's build number. We store them on our own Cloudflare account, in a separate place from the founding-family form and never linked to it, and use them only to send the notifications you chose; Apple delivers them. A notification about a new deck shows one of the deck's cards, which your phone downloads from the same static files as the deck itself. Turn notifications off in the app, or for Bandit in your phone's Settings, and the app tells us to delete the address the next time it opens; an address Apple reports is no longer in use is deleted too.
Sharing how Bandit is used — only if you say yes. The app asks before it sends anything, and nothing is sent until you tap Share usage. If you do, it sends us how your Bandit is used: which decks are sent to it and which cards it shows, when, for how long, and what turned each page (its timer, your voice, its buttons or screen, or the app); its settings (the card timer, the sound and the reading prompts); when it is put to sleep, woken, switched on or off, or updated; its battery level; and how you use the app (which screens you open and for how long, page turns in Read Along, decks you download, how many Family Faces cards you have, and whether notifications and iCloud are on). The display keeps its own record of this between visits and the app passes it on when it connects.
It never includes your photos or any card's picture, any sound or speech, the names or lines you type, your contacts, your location or an advertising identifier, and we don't keep the network address it arrives from. Each phone that shares is known only by a random number the app makes when you say yes (a new one every time you turn sharing back on), and each display by its serial number (a number built into its radio chip). Because we ship each founding family's display ourselves, we can tell which family a display belongs to, and we use that only to understand how Bandit is working for you and to make it better — never for advertising, and never shared or sold. It is stored on our own Cloudflare account, in a place of its own, apart from the founding-family form and the notification addresses, and kept for 13 months. Turn it off any time in the app's Help page: sending stops at once. Delete what I've shared, also in Help, deletes everything that phone has sent us.
Decks and updates. New decks and app updates are downloaded from static files we publish. Those downloads carry no account, no identifier and no information about your child; our host may keep the same short-lived technical logs described above.
Nothing about your child. Bandit is designed so that no information about a child — no photos, no recordings, nothing a child says or does — is ever collected by us. The usage you can choose to share describes the display: which card was up, when and for how long. This is a property of how it is built, not only a policy.
4. Children
Bandit is a nursery display operated by an adult, and this website and the app are for adults. We do not knowingly collect personal information from anyone under 13, and the product collects none about the children it is used around. If you believe a child has sent us information, email us and we will delete it.
5. Sharing
We do not sell, rent, trade or share your information with anyone, and we never will for advertising. The only parties that handle it are the service providers we need to run the site and the program — today, Cloudflare (hosting and storage), Apple (delivering the notifications you turn on) and a telephone carrier when we text you — and they may use it only to provide that service to us. We would disclose information if the law required it, and we would tell you if we were allowed to.
6. Your choices and rights
If you asked for a Bandit from the app, its Help & settings page shows what you sent, lets you change it, and Delete my request deletes your name, number and age range from our list and from your phone at once. Email us at any time to see what we hold about you, to correct it, or to have it deleted; we'll do it promptly and confirm when it's done. Reply STOP to end texts. Turn notifications off in the app's Help page, or in your phone's Settings, whenever you like. Turn usage sharing off, or delete what you've shared, in the same Help page. Deny the microphone permission and the demo still works by tap. If you live somewhere with specific privacy rights — the EU or UK, California, or elsewhere — those rights apply and the same email is how you use them. We will never treat you differently for exercising them.
7. Security and retention
Form submissions travel over HTTPS and are stored on our own Cloudflare account, readable only with a secret held by us. We keep them for the length of the Founding Family Program and delete them at its end, or sooner on request. A notification address is kept only while notifications are on. Shared usage is kept for 13 months and then deleted, or sooner when you delete it from the app or ask us. We keep nothing else.
8. Changes
If this policy changes, the date at the top changes with it and the current version is always at this address. If a change would affect how we use information you've already given us, we'll tell you first.
9. Contact
AG, Inc. · Delaware, United States · hello@bandit.kids
This policy is part of the terms of use. Bandit is not a medical device and collects no health information. Designed and distributed in the United States.