Privacy policy

This website

Our website code has no forms, cookies, analytics, or scripts. Cloudflare hosts the site and processes request information, such as IP addresses, browser details, and pages requested, to deliver and protect it. Cloudflare may also receive network-error reports from your browser. Following the beta link takes you to Apple's TestFlight service, which has its own privacy terms.

The rest of this policy is about the Playground Pal app.

Information kept on your iPad

You do not need to create a Playground Pal account to import and view projects. The app stores information locally to let you reopen projects and continue your work:

• Imported project copies or references to the original files, including file-access bookmarks, project names, recent-open dates, and code previews.
• Unsaved code edits, saved chat messages, AI analysis, and the provider and model used for a chat.
• Settings and, where applicable, classroom access information.

Personal AI-provider API keys are stored in Apple's Keychain and are configured to sync through iCloud Keychain when available. They are not restricted to this iPad alone. Device backups and files saved in iCloud or another storage provider are also governed by those services.

AI processing

AI analysis and chat use your question, recent conversation, project name, file names and paths, and relevant source-code context. Depending on the request, that context can include code from multiple files or broader project content. Do not include passwords, private keys, or personal information that you do not want processed by the selected AI service.

• Apple on-device AI: where supported and selected, generation runs on the device.
• Apple Private Cloud Compute: where supported and selected, requests are processed through Apple's Private Cloud Compute service.
• Personal-key providers: the app supports Anthropic, OpenAI, DeepSeek, OpenRouter, and OpenCode Go/Zen. Requests go to the selected provider or gateway, using your API key. Gateways may route them to the model provider. Key validation and model-list refreshes also contact the provider.

Automatic mode chooses an available engine; you can select a specific engine in the app. Availability depends on device capabilities and configured access. Cloud services receive the usual network request information as well as the submitted content. Their own policies and terms govern handling, caching, and retention. We do not promise that those providers retain nothing or that all AI processing stays on your iPad.

Tinkertanker services and classroom access

The app can fetch a public model catalogue from our gateway at api.slopper.tk.sg. That request does not include your project, prompts, or API keys, but the service necessarily receives network request information such as your IP address.

Managed classroom tutoring is disabled in the standard release configuration. If you use a build that enables it, classroom activation sends an access code, a persistent random device identifier, and capability information to our access service. Tutoring requests then send prompts and code context through our gateway to the configured AI provider. Managed credentials are kept in this-device-only Keychain storage. Removing class access does not reset the device identifier.

This notice does not set a retention period for gateway or access-service logs, or for copies held by AI providers.

Camera, sharing, and diagnostics

Camera access is optional and is used to scan QR codes for AI-key or classroom setup. QR decoding happens in the app; the scanner does not upload camera frames. You can manage camera permission in iPad settings.

Exporting or sharing a project creates a copy of its files, including your code edits, and hands it to the destination you choose. Saving to iCloud or sharing with another app is subject to that service's handling of the files.

The app does not include advertising or third-party tracking SDKs. Tutor diagnostics keep a bounded in-memory record of request metadata, such as timing, counts, and request identifiers, rather than prompt and response text. This is separate from the chat history saved locally. Apple may process beta feedback and crash information through TestFlight under Apple's terms.

Your choices and deletion

You can use project viewing without enabling a cloud AI provider, choose an available on-device engine, change AI engines, and remove saved chats or recent projects in the app. Removing a recent project removes its app inbox copy, saved draft, and recent-list entry; it does not delete the original file in your chosen storage location. It is not a guarantee that every associated chat record is erased.

There is no scheduled expiry for locally saved chat history or drafts. Copies in your files, device backups, iCloud Keychain, or AI-provider systems are separate from the app's local records. Contact us if you have questions about access to or deletion of information handled by Tinkertanker services.

Guidance for learners and educators

Parents, guardians, and educators should supervise students' use of AI features as appropriate and check the selected provider's age requirements and terms. Avoid including students' names, contact details, or other identifying information in code or prompts unless you have appropriate permission.

Contact

For privacy questions, or to ask about access to or deletion of your information, email Tinkertanker Pte Ltd at hello@tk.sg. For app help, visit our support page. Please do not include API keys or sensitive project content in an email or a public bug report.

Changes to this policy

We will post changes on this page and update the date at the top.