A children's app should keep children's secrets

The microphone opens only while a game waits for an answer, and closes while the frog speaks. When the app leaves the screen, the microphone is released at once.

The sound goes straight to a speech engine that runs inside the app, on the device. It is turned into a few words, or into a measure for the note and breath games, and then the sound is gone. No audio file is ever written, kept or sent.

What is kept is the result of each answer, for the parent dashboard: the expected word and what the engine understood, as text.

The speech models, the voices, the music and the drawings are all inside the app. Hoplavox has no server to talk to.

On Android, the released app asks for one single permission: the microphone. It does not ask for internet access, so it could not send anything even if it tried.

Children are never named. The app only stores labels like "Child 3 · 4 years", chosen by tapping a number and an age.

No email, no account, no photo, no location, no contact list, no advertising identifier.

There is no advertising in Hoplavox, no analytics service, no crash reporter that phones home and no social network button.

Nothing is ever sold to the child, and no purchase can be made from inside the games.

Settings and the dashboard sit behind a parental gate. A parent can see every result, export them as a file, and clear them in one tap. Uninstalling the app deletes everything.

A game lasts a few minutes. The screen stays on while the child plays, so they never have to touch it to wake it, but it goes to sleep on its own after four minutes without activity.

When the app leaves the screen, every sound stops and the game pauses. It picks up exactly where it was when the child comes back.

The breath and balance games are short on purpose. If a child feels dizzy, they should stop and breathe normally.

No buzzer, no popping balloon, no timer racing against the child. A mistake gets a soft sound and an encouraging word from the frog, and help always comes.