Privacy policy
What we know about you, and what we don't.
Bandit is made by AG, Inc., a Delaware corporation. This is the whole of what we collect, why, and how to make us delete it. It is written to be read, not scrolled past. Effective September 20, 2026.
The short version
There are no accounts, no logins and no servers behind them. Photos never leave your device. The microphone hears loudness only and records nothing.
Your name, phone number, country and an age range — kept on our own Cloudflare account, used only to run the program, deleted when it ends or when you ask.
Not on this site, not in the app. We don't sell, rent or share what you give us with anyone.
1. Who we are
AG, Inc. ("we", "us"), a corporation organized under the laws of the State of Delaware, makes Bandit — the display, the companion app, the deck library and this website. Questions and requests about your information go to hello@bandit.kids.
2. The website
The founding-family form
If you ask for a Bandit, we receive the name, phone number and country you enter and the age range you choose, together with the time you sent it. We store these on our own Cloudflare account, in the United States, and use them for exactly one purpose: to contact you about the Founding Family Program and, if you join it, to run it. We will text you about the program and about nothing else; reply STOP to any message and we won't text again. We keep this information until the program ends or until you ask us to delete it, whichever comes first, and then we delete it.
To keep automated submissions out, the form includes a hidden field that a person never sees and a limit on how many submissions a single network address can make in an hour. That address is used only for the count, which expires on its own; it is never stored with your name.
The Read Along demo
The "Try it with your voice" demo asks your browser for the microphone. The audio is measured for loudness inside your browser and nothing else — no recording, no speech recognition, no transmission. The microphone is released as soon as the demo finishes or you leave the page. You can use the demo without a microphone by tapping instead.
What the website does not do
This site sets no cookies, runs no analytics, loads no advertising and includes no third-party scripts or fonts. The typefaces, images and scripts are served from our own address. Our hosting provider, Cloudflare, may keep short-lived technical logs (such as network addresses and request times) to operate and protect the service, as any host does; we do not use them to identify visitors.
3. The display and the app
No accounts. The app has no sign-up, no login and no email field. It works fully offline.
Family Faces. Photos you choose are converted on your phone and sent only to your own display over Bluetooth. They are never uploaded anywhere, because there is nowhere for them to go — we run no server that could receive them.
The microphone. The display's microphone measures how loud the room is, so that a read-along page can turn when you have finished a line. It cannot distinguish words, records nothing and sends nothing, not even to your phone. If you choose your phone as the listener instead, your phone's own on-device speech recognition is used and nothing is sent to us.
Decks and updates. New decks and app updates are downloaded from static files we publish. Those downloads carry no account, no identifier and no information about your child; our host may keep the same short-lived technical logs described above.
Nothing about your child. Bandit is designed so that no information about a child — no photos, no recordings, no usage — is ever collected by us. This is a property of how it is built, not only a policy.
4. Children
Bandit is a nursery display operated by an adult, and this website and the app are for adults. We do not knowingly collect personal information from anyone under 13, and the product collects none about the children it is used around. If you believe a child has sent us information, email us and we will delete it.
5. Sharing
We do not sell, rent, trade or share your information with anyone, and we never will for advertising. The only parties that handle it are the service providers we need to run the site and the program — today, Cloudflare (hosting and storage) and a telephone carrier when we text you — and they may use it only to provide that service to us. We would disclose information if the law required it, and we would tell you if we were allowed to.
6. Your choices and rights
Email us at any time to see what we hold about you, to correct it, or to have it deleted; we'll do it promptly and confirm when it's done. Reply STOP to end texts. Deny the microphone permission and the demo still works by tap. If you live somewhere with specific privacy rights — the EU or UK, California, or elsewhere — those rights apply and the same email is how you use them. We will never treat you differently for exercising them.
7. Security and retention
Form submissions travel over HTTPS and are stored on our own Cloudflare account, readable only with a secret held by us. We keep them for the length of the Founding Family Program and delete them at its end, or sooner on request. We keep nothing else.
8. Changes
If this policy changes, the date at the top changes with it and the current version is always at this address. If a change would affect how we use information you've already given us, we'll tell you first.
9. Contact
AG, Inc. · Delaware, United States · hello@bandit.kids
This policy is part of the terms of use. Bandit is not a medical device and collects no health information. Designed and distributed in the United States.