Last updated: October 17, 2026 · Effective: October 17, 2026
This Privacy Policy explains what information Human Virtual ("we", "us") collects when you use the Baby Lenny mobile app (the "app"; the character in it is called Lenny) and the website humanvirtual.co (the "website"), what we use it for, and the choices you have.
Baby Lenny and this website are published by Human Virtual, based in Israel. Human Virtual is responsible for the information described in this policy (the "data controller", where that term applies). You can reach us about anything in this policy at info@humanvirtual.co.
The first time you open the app, it creates an anonymous account with a random user ID (using Google Firebase Anonymous Authentication). This ID is not your name, email address or device advertising ID. It only lets our backend tell one installation of the game from another.
Under that user ID we store:
We use this to keep your progress, to restore it if you use a Lenny ID (see below), and to understand in aggregate how the game is used.
When you talk to Lenny, we store the transcript of the conversation under your user ID: the sentences you build and Lenny's replies. You do not type free text in these conversations — sentences are built from the game's fixed list of words that Lenny has learned — so the transcripts do not contain personal messages. We use them to improve the game, for example to find replies from Lenny that don't make sense.
Lenny's replies themselves are produced by an AI model that runs entirely on your device. Your sentences are not sent to any cloud AI service to generate a reply.
You can optionally create a "Lenny ID" to save your progress and move Lenny to another device. On iPhone this uses Sign in with Apple; on Android it uses Google Sign-In. If you do this, Firebase Authentication receives the account identifier from Apple or Google together with the email address and name that the provider shares with us. Apple's "Hide My Email" option is supported, in which case we only receive a private relay address. We use this information only to recognize your account and restore your progress. We do not use it for marketing.
The app also sends a random install ID and the days on which the app was opened to a usage counter that we operate ourselves (hosted on Supabase). It is used only for aggregated retention statistics, such as how many players come back after one day or one week.
The app is free to download and offers optional in-app purchases ("Grow up Lenny", tips packs and a cookie for Lenny). Purchases are processed by Apple through the App Store (or by Google Play on Android). We never see or store your payment card or billing details. We only record which items were granted in your game so that they are not lost.
The app includes the Meta (Facebook) SDK for App Events, on Android and on iPhone. We use it only to find out which of our own ads for Baby Lenny on Facebook and Instagram led people to install the app and make purchases, so that we can spend our advertising budget better.
The Meta SDK sends Meta:
It does not send your game progress, your "Talk to Lenny" conversations, your Lenny ID, or your name or email address. Meta processes this information under its own Privacy Policy, and may combine it with information it has about you if you use Facebook or Instagram, for example to report ad results to us and to improve ad delivery. On an iPhone where you have not allowed tracking, Meta reports our ad results only through Apple's privacy-preserving ad attribution (SKAdNetwork) and its Aggregated Event Measurement.
You can limit this at any time:
If you tap "Notify", the app schedules a reminder for the day the next words unlock. This is a local notification scheduled on your device; it does not go through our servers. The app asks for notification permission only when you tap that button, and you can turn notifications off at any time in your device settings.
As with any internet service, when the app connects to our backend the servers of our service providers necessarily process technical information such as your IP address and basic device and app information in order to deliver the service and keep it secure. We do not use this information to identify you or to build a profile of you.
The website does not use advertising cookies or third-party tracking or analytics cookies.
We do not show ads in the app. Other than the ad measurement described above, we do not use your information for advertising. We do not make automated decisions about you that have legal or similarly significant effects.
Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases: performing our contract with you (running the game and delivering purchases), our legitimate interests (improving the game, aggregated statistics, measuring our own advertising and security), and your consent where we ask for it or where the law requires it (for example when you join the waitlist, create a Lenny ID or allow tracking on iPhone).
We do not sell your personal information, and we do not share it with data brokers. Apart from Meta (below), we do not share it with advertisers. We use a small number of service providers and partners:
We may also disclose information if the law requires it (for example in response to a valid court order), or to protect the rights and safety of our users, the public or Human Virtual. If Human Virtual is involved in a merger, acquisition or sale of assets, your information may be transferred as part of it; we will post a notice here before it becomes subject to a different privacy policy.
We keep the information described above for as long as your account or installation exists. It is deleted when you delete your account in the app or ask us to delete it. Waitlist email addresses are kept until you ask us to remove them or the waitlist is no longer needed. Aggregated statistics that cannot be linked to you may be kept longer. We may keep limited information for longer where the law requires it.
Deleting the app from your device removes the data stored on the device, but not the data stored in our backend — use one of the two options above for that.
Depending on where you live, privacy laws such as the EU and UK GDPR or the California Consumer Privacy Act (CCPA) may give you the right to ask us for access to the information we hold about you, to correct or delete it, to receive a copy of it, to object to or restrict certain uses of it, and to withdraw a consent you have given. To use any of these rights, email info@humanvirtual.co. We will not treat you differently for making a request. We do not sell personal information. Sending app activity to Meta to measure our ads may count as "sharing" for cross-context behavioral advertising under California law; you can opt out by emailing us, by deleting your advertising ID on Android, or by not allowing (or turning off) tracking for the app on iPhone (see Advertising measurement (Meta)).
If you believe we have not handled your information properly, you also have the right to complain to your local data protection authority.
Baby Lenny is suitable for all ages, but it is not directed at children under 13 — the player takes the role of Lenny's parent. No personal information is required to play, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has given us personal information, email info@humanvirtual.co and we will remove it.
Our service providers store and process information in the United States and possibly other countries, which may have different data protection laws from the country you live in. Where the law requires it, these transfers are covered by appropriate safeguards, such as the standard contractual clauses offered by our providers.
Data is encrypted in transit between the app and our backend, and access to it is restricted: the app can only read and write the data of the account that is signed in on that device. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.
The website and this policy contain links to sites we do not operate (for example Apple, Google and our social media pages). We are not responsible for their content or privacy practices.
We may update this policy from time to time, for example when the app gains new features. We will post the new version on this page and update the "Last updated" date at the top. If a change is significant, we will also give notice in the app or on the website before it takes effect.
If you have any questions about this Privacy Policy or about your data, you can contact us: