Privacy Policy
Mechna Academy is a product of Banana Flip LLC. Effective October 8, 2026.
Contents
- Who we are
- What this policy covers
- How to reach us
- The Mechna app
- For parents
- Children's privacy (COPPA)
- Schools and educators
- The website: what we collect
- Who else sees your information
- What we do not do
- Cookies and similar technologies
- Security
- How long we keep information
- Your rights and how to use them
- Visitors outside the United States
- Changes to this policy
1. Who we are #
Mechna Academy is a product of Banana Flip LLC. In this policy, "we", "us" and "our" mean Banana Flip LLC.
Banana Flip LLC publishes the Mechna app through Apple and runs the website at mechna.ai.
- Email: team@mechna.ai
- Mail: Banana Flip LLC, Lafayette, CO 80026
2. What this policy covers #
This policy covers two things:
- the website at mechna.ai, including its forms; and
- the Mechna app for iPad and Mac.
It does not cover Apple's own handling of data in the App Store, TestFlight or your Apple Account. Apple's privacy policy covers that.
Our Terms of Use explain the rules for using the website and the app.
3. How to reach us #
Email team@mechna.ai for any question about this policy, or to ask us to see, correct or delete your information. You can also write to Banana Flip LLC, Lafayette, CO 80026.
We answer privacy requests within 30 days. Section 14 explains how to make a request and what we may ask you before we act on it.
4. The Mechna app #
The Mechna app runs on iPad and on Mac computers with Apple silicon. It is for children aged 8 to 10, set up by a parent.
4.1 What the app keeps, on your device only #
For each child profile, the app keeps:
- the missions your child plays, the answers they choose and the help they use;
- their Discovery Journal and which train rides they have already seen;
- the look and the nickname they pick from our list;
- any "a grown-up helped here" marks you add;
- the age group and the settings you choose in the parent area;
- two dates for each mission: the day it started and the day it finished.
This is stored inside the app's own folder on the device. Nothing in the app expires on its own. It stays until you reset or delete it (section 4.6).
4.2 What the game does not collect #
The app does not ask for, or keep, a child's name, photo, voice, email address, birth date, exact age, school or location. It does not keep anything typed. It does not record the time of day, how long your child plays, or how they use the controls.
The game has:
- no accounts and no passwords;
- no ads;
- no analytics of our own;
- no chat;
- no microphone use. Voices in the app are recorded in advance.
The game makes no internet connections and does not send your child's progress to us.
The app's privacy manifest, a file Apple requires in every app, declares no tracking and no collected data.
The pilot is free. There is nothing to buy in the app.
4.3 New or replaced devices #
We hold no copy of your child's progress, so we cannot restore it for you. If you move to a new iPad or Mac, a backup of your old device (section 4.5) can bring Mechna's progress with it. If you leave Mechna out of backups, its progress stays only on the device where it was made.
4.4 Installing the app, and TestFlight during the pilot #
A parent or guardian installs Mechna on their own device using their own Apple Account: through TestFlight, Apple's app for testing new apps, during the pilot, or through the App Store. Children do not have accounts with us, and children are not TestFlight testers. The parent installs the app, and the child plays it on that device. Apple shows the developer as Banana Flip LLC.
Apple handles the App Store, TestFlight and your Apple Account under its own terms and privacy policy.
What TestFlight sends us during the pilot. TestFlight, not the Mechna game, sends Apple and us:
- crash reports;
- information about how the app is used, such as how often it is opened;
- device details, such as the model and system version;
- the name and email address of the Apple Account that installed the app;
- any feedback or screenshot you choose to send through TestFlight.
This is information about the adult who holds the Apple Account and about the device. Apple says it cannot be turned off while you test an app.
Please don't include your child's name, face or voice in feedback. A screenshot may show the nickname and look your child picked from our lists. These do not identify your child.
We use what we receive to fix and improve Mechna, and for no other purpose. Apple keeps this information in its developer tools under its own rules. If we copy any of it elsewhere to fix a problem, we delete that copy no later than 365 days after we make it.
From the App Store. If the app is installed from the App Store, Apple may give us crash reports and summary usage figures from people who have chosen, in their device settings, to share analytics with app developers. We use them only to fix and improve Mechna.
4.5 Backups and your device's own records #
Backups. If you back up your iPad to iCloud or a computer, or your Mac with Time Machine, that backup includes Mechna's progress, as it does for other apps. The backup is under your own Apple Account or on your own computer, not with us.
You can leave Mechna out of device backups in the parent area. Backups made before you change that setting keep what they held. On a Mac, other backup software may not follow that setting.
Your device's records. Your iPad or Mac may note that Mechna was used, for example in Screen Time, as it does for every app. Mechna does not read or write these records.
4.6 Deleting app data #
In the parent area, behind the parent check, you can:
- reset a child's profile, which clears their progress, look and nickname and keeps your settings for that slot;
- delete a child's profile;
- delete everything Mechna keeps on that device.
Each takes effect at once and cannot be undone. Backups made earlier are not changed, and restoring an older backup can bring data back.
On iPad: deleting the Mechna app also deletes what it kept. Offloading the app in the iPad's settings keeps it.
On Mac: deleting the Mechna app does not delete what it kept. Choose "Delete everything" in the parent area first. If the app is already gone or no longer opens, remove Mechna's folder from the Containers folder in your user Library and empty it from the Trash. If Mechna was used in more than one user account on the Mac, do this in each account. Email team@mechna.ai if you would like help.
When a TestFlight build expires, the app stops opening, so its delete controls are out of reach until you install an update. On iPad, deleting the app still removes the data. On Mac, use the folder steps above.
5. For parents #
You control your child's progress in the app. It lives on your device, and you can reset or delete it at any time in the parent area (section 4.6). We hold no copy of your child's progress. During the pilot we receive TestFlight reports about the device and your Apple Account, and any feedback you send (section 4.4).
The parent check is a gate, not consent. Before the parent area opens, the app asks a short grown-up question. It keeps children out of settings. It does not store your answer, and it is not a way of giving us permission to collect anything.
Your own information on our website is the email and answers you give on the waitlist. Section 8.1 lists exactly what we keep. Ask us to delete your email at any time (section 14).
Please don't let your child fill in our website forms. They are for adults. If your child does, tell us and we will delete the entry (section 6.7).
6. Children's privacy (COPPA) #
This section is our notice under the Children's Online Privacy Protection Act (COPPA). It applies to children under 13.
6.1 Who to contact #
Banana Flip LLC operates the Mechna app and mechna.ai.
- Email: team@mechna.ai
- Mail: Banana Flip LLC, Lafayette, CO 80026
6.2 What we collect from children #
In the app: the Mechna game does not send personal information about your child to us. What a child does in the game stays on the device (section 4.1).
On the website: our forms are for adults. They do not ask for a child's name, birth date or any other information about a child, except that the waitlist asks how many children aged 8 to 10 are in the family, as an optional count.
Through Apple: a parent installs the app with their own Apple Account, and children are not TestFlight testers. What Apple sends us during the pilot (section 4.4) is information about the adult's Apple Account and the device. It does not include a child's name, contact details, photo or voice.
6.3 How we use and share it #
We do not sell or share children's information, and we do not use it for advertising. We disclose information only to the service providers in section 9, or if the law requires it.
6.4 How long we keep it #
We hold no copy of your child's progress in the game. On the device, it stays until a parent resets or deletes it (section 4.6). Information Apple sends us is kept as section 4.4 explains.
6.5 Persistent identifiers, voice and our website #
The game. The Mechna game does not collect or send persistent identifiers, such as device or advertising IDs. It does not record your child's voice. During the pilot, TestFlight, Apple's app, collects device details and the name and email address of the adult's Apple Account that installed it, as section 4.4 explains.
Our website. Like every website, ours receives the IP address of the device that visits it. We and Cloudflare use it only to deliver pages, to check that form submissions come from a person, and to limit repeated attempts. We do not use it to contact anyone, build a profile or show ads. We keep only a one-way code made from it, which an automatic job deletes, normally within 30 minutes (section 8.5). Cloudflare also uses the Turnstile signals for its own bot detection, under its own privacy policy (section 8.5).
6.6 Parents' rights #
A parent can review, delete and stop further use of their child's information. For the app, you do this yourself, on the device, in the parent area (section 4.6).
If you believe we hold information about your child anywhere else, email team@mechna.ai. We will tell you what we find, delete our copies, and tell you about any copy only Apple can delete.
6.7 If we learn we have a child's information #
If we learn that a child under 13 has given us personal information, for example by filling in a website form, we will delete it from our database and our team inbox within 30 days of learning of it.
7. Schools and educators #
Mechna does not collect student data. The app has no student accounts, and what a child does in the game stays on the device.
Our educator and district forms are for adults. Please don't include any student information in them.
This policy does not describe use in a classroom. If a school or district wants to use Mechna with students, email team@mechna.ai so we can agree privacy terms for that school in writing first.
We do not claim certification or compliance under any student-privacy law or pledge.
8. The website: what we collect #
The website collects information through the waitlist, educator and district forms, the security checks that protect them, and the request details every website receives (section 8.8). Each table lists what we keep, why, where, for how long, and who else sees it.
8.1 The waitlist (the Waitlist page) #
| What | Why | Where it's stored | How long | Who else sees it |
|---|---|---|---|---|
| Your email (required) | To contact you about a place | Our database, hosted by Cloudflare | Section 13.1 | Cloudflare (hosting) |
| How many children aged 8 to 10 (optional: 1, 2, 3 or 4 or more) | Planning | Same | Same | Same |
| Which devices you have (optional: iPad, Mac, both, not sure) | Planning | Same | Same | Same |
| Your US state, or "Outside the US" (optional) | To understand where families are joining from | Same | Same | Same |
| A record of your agreement: which form you used, the date and time you last agreed, and the version of this policy you agreed to | To show that you agreed | Same | Same | Same |
| The date you first joined | To time the deletion rule in section 13.1 | Same | Same | Same |
| A code made from your email | Used by our removal page to delete your entry | Same | Same | Same |
You must tick "I'm 18 or older and the parent or guardian. I agree to the Terms of Use and have read the Privacy Policy" to join.
If you join again with the same email, we replace your optional answers, keep any earlier answer you leave blank, and record the new date, form and policy version of your agreement. The date you first joined stays the same.
8.2 Home page waitlist form (removed) #
We removed the home-page waitlist form on October 8, 2026. To join the waitlist, use the waitlist page described in section 8.1.
8.3 The educator form (the Educators page) #
| What | Why | Where it's stored | How long | Who else sees it |
|---|---|---|---|---|
| Your email (required) | To reply to you | Our database, hosted by Cloudflare; the alert email to our team (section 8.7) | Database: section 13.2; alert email: section 13.4 | Cloudflare; Resend; our business email service provider |
| Organization or school (required) | To reply to you | Same | Same | Same |
| Your role (required) | To reply to you | Same | Same | Same |
| State or territory (optional) | To reply to you | Same | Same | Same |
| Topics you want to discuss (optional, up to 5) | To reply to you | Same | Same | Same |
| Which form you used, the time you sent it, and a record of your agreement (form and policy version) | To keep track of messages and show that you agreed | Our database; the alert email includes the form and the time | Same | Same |
You must tick "I'm 18 or older. I agree to be contacted about educator access and to the Terms of Use, and I have read the Privacy Policy" to send the form.
8.4 The district briefing form (the Districts page) #
| What | Why | Where it's stored | How long | Who else sees it |
|---|---|---|---|---|
| Your name (required, up to 100 characters) | To arrange your briefing | Only in the alert email to our team (section 8.7). It is not saved in our database. | Section 13.4 | Resend; our business email service provider; Cloudflare (it passes through our website) |
| Your email (required) | To arrange your briefing | Our database, hosted by Cloudflare; the alert email | Database: section 13.2; alert email: section 13.4 | Cloudflare; Resend; our business email service provider |
| District or organization (required) | Same | Same | Same | Same |
| Your role (if you don't choose one, we record "Other") | Same | Same | Same | Same |
| State or territory (optional) | Same | Same | Same | Same |
| Topics you want to discuss (optional, up to 5) | Same | Same | Same | Same |
| Which form you used, the time you sent it, and a record of your agreement (form and policy version) | To keep track of messages and show that you agreed | Our database; the alert email includes the form and the time | Same | Same |
You must tick "I'm 18 or older. I agree that Mechna Academy can reply to me about a district briefing, and to the Terms of Use, and I have read the Privacy Policy" to send the form.
8.5 Security checks on our forms #
| What | Why | Where it's stored | How long | Who else sees it |
|---|---|---|---|---|
| Your IP address, when you send a form | Bot check and limiting repeated attempts | Not stored by us. Our server passes it to Cloudflare Turnstile with the check. | Not kept by us | Cloudflare Turnstile |
| A one-way code made from your IP address with a secret key, and a count of attempts in a 10-minute window | To allow at most 5 attempts per form type in 10 minutes | Our database | An automatic job that runs every 10 minutes deletes it, normally within 30 minutes | Cloudflare (hosting) |
| The Turnstile check result from your browser | To confirm a person sent the form | Not stored by us | Not kept by us | Cloudflare Turnstile |
Turnstile runs in your browser and collects its own signals to tell people from bots. Cloudflare also uses these signals to improve its bot detection for all its customers, under its own Turnstile privacy policy.
When Turnstile loads. On every form, Turnstile loads only when you start using that form (for example, when you click into a field). It does not load when you only view a page.
8.6 The founding-family application #
The founding-family page has an application form. It does not send or save anything: what you enter stays in your browser and is cleared when you reload the page.
| What the form asks | Sent to us? | Saved? |
|---|---|---|
| Your email | No | No |
| Whether you live in the United States | No | No |
| The ages of the children who would play (8, 9 or 10) | No | No |
| Which device your child would use, and the iPad model if it is an iPad | No | No |
| Your agreement, and whether you want an email when Mechna launches | No | No |
Before this form sends anything, we will update this section with the same detail as the tables above.
8.7 Emails our team receives #
When you send the educator or district form, our server emails an alert to team@mechna.ai through Resend, an email delivery service. The alert contains your name (district form only), email, role, organization, state, topics, which form you used and the time you sent it. Its subject line includes your organization. Replying to the alert replies to you.
Mail to team@mechna.ai is forwarded by Cloudflare Email Routing to our team's inbox, held by our business email service provider. We delete messages you send to team@mechna.ai, and the alert emails about your forms, from that inbox no later than 365 days after our most recent exchange with you. Resend handles the alert email as our service provider, under its own terms.
Waitlist sign-ups are not emailed to us one by one. Any summary email we receive contains only the number of new sign-ups.
8.8 Request details and logs #
Our own code does not log your form answers, email or IP address.
Cloudflare, which runs our website, receives every request your browser makes to it, including your IP address and browser details, and may keep its own logs as our service provider, under its own terms.
8.9 What the website does not collect #
The website does not use analytics, advertising or tracking scripts. Our fonts, images and the home tour's voice clips are served from our own site.
9. Who else sees your information #
We use these service providers to run the website, deliver our team's email and distribute the app. Each receives the information listed for the service listed, and handles it to provide that service to us, under its own terms.
| Provider | What it does for us | What it receives |
|---|---|---|
| Cloudflare (Workers, D1, Email Routing) | Runs the website, stores form entries in our database, and forwards mail sent to team@mechna.ai | Every website request, including your IP address; everything you send in our forms; the alert emails and other mail to team@mechna.ai |
| Cloudflare Turnstile | Checks that form submissions come from a person | Your IP address, the browser check result, and the signals the Turnstile widget collects in your browser. Cloudflare also uses these signals for its own bot detection (section 8.5). |
| Resend | Delivers alert emails to our team | The contents of educator and district alert emails; the daily sign-up count, if we receive one |
| Our business email service provider | Holds our team inbox | Mail sent to team@mechna.ai, including the alert emails |
| Apple (App Store, TestFlight) | Distributes the app; during the pilot, TestFlight reports crashes and usage | What section 4.4 describes, under Apple's own terms |
Legal requirements. We may disclose information if we believe in good faith that the law requires it, for example to answer a valid legal request, or to protect the safety of a child or anyone else.
If the business changes hands. If Banana Flip LLC or Mechna is sold or merged, the information in section 8 may pass to the new owner, who must follow this policy or ask for your consent before using it differently.
10. What we do not do #
- We do not sell personal information.
- We do not share personal information for advertising, and we show no ads on the website or in the app.
- We do not put analytics code on the website or in the Mechna game. During the pilot, TestFlight gives us crash reports and usage information (section 4.4).
- We do not use third-party tracking or advertising tools on our website.
- We do not use children's data to train AI.
11. Cookies and similar technologies #
Our code sets no cookies. Our code does not use local storage or other long-term browser storage.
One setting for the home tour. If you turn the home tour's captions on or off, your browser remembers that choice in session storage, under the name tour-cc, until you close the browser tab. It holds only "on" or "off" and is not sent to us.
Cloudflare Turnstile is a third-party security check on our forms. It may set its own cookies or use browser storage to tell people from bots, under Cloudflare's terms.
We do not use advertising or analytics cookies.
Do Not Track and Global Privacy Control. Our website does not respond differently to these browser signals. We do not use advertising or analytics tools that track visitors across websites.
12. Security #
What we do:
- IP addresses are not stored. For rate limiting we store a one-way code made from your IP address with a secret key. An automatic job that runs every 10 minutes deletes it, normally within 30 minutes.
- Bot and abuse checks. Forms pass a Cloudflare Turnstile check, and each form type allows at most 5 attempts in 10 minutes from one address. The server refuses oversized requests and form submissions sent from other websites.
- The game keeps your child's progress on the device, so we hold no copy of that progress.
- Waitlist entries are not emailed to our team one by one.
- Limited access. Only the people who need it to run Mechna can open our database, our team inbox and our Apple developer tools.
No method of storing or sending information is completely secure. If you think something is wrong, email team@mechna.ai.
13. How long we keep information #
13.1 Waitlist entries #
We delete a waitlist entry 12 months after the later of the date places open and the date you first joined, or sooner if you ask us to delete it (section 14).
13.2 Educator and district messages #
We delete what our database holds from the educator and district forms 365 days after the most recent message from the same email address. A new message from that address starts the 365 days again for every earlier message from it.
13.3 Security records #
An automatic job that runs every 10 minutes deletes the one-way IP codes used for rate limiting, normally within 30 minutes.
13.4 Copies outside our database #
- Our team inbox. We delete messages you send to team@mechna.ai, and the alert emails about your forms, including the name sent with a district form, no later than 365 days after our most recent exchange with you.
- Our service providers. Resend's records of the alert emails, any logs Cloudflare keeps, and the recovery copies our database provider keeps for a limited time are handled by those providers under their own terms.
13.5 App data and TestFlight #
We hold no copy of your child's progress. On your device, it stays until you reset or delete it (section 4.6). Apple keeps TestFlight information under its own rules. If we copy any of it elsewhere to fix a problem, we delete that copy no later than 365 days after we make it (section 4.4).
14. Your rights and how to use them #
14.1 What you can ask #
You can ask us to:
- tell you what information we hold about you, and give you a copy;
- correct it;
- delete it;
- stop contacting you, by withdrawing your consent to the waitlist.
Depending on where you live, the law may give you further rights. If those laws apply to us, we will respond as they require.
You can also correct your waitlist answers yourself by joining again with the same email. Your new answers replace the old ones.
14.2 How to ask #
Ask us to delete your email at any time. Email team@mechna.ai from the email address you used on our forms, and tell us what you'd like us to do. To leave the waitlist, email team@mechna.ai. You can also write to Banana Flip LLC, Lafayette, CO 80026.
We answer within 30 days. We do not charge for a request.
14.3 How we check it's you #
Before we share or delete information, we may ask you to confirm the request from the email address it belongs to. If your request is about information Apple sent us through TestFlight, tell us the email address of the Apple Account that installed the app. We will not ask for more information than we need to find yours.
14.4 Deleting your information #
When we act on a deletion request, we delete your entries from our waitlist and contact records, and your messages and alert emails in our team inbox. Copies our service providers keep in their own logs or recovery systems are removed on their own schedules (section 13.4).
15. Visitors outside the United States #
Mechna Academy is run from the United States, and we do not market it outside the US. Our forms can still be sent from anywhere, and the waitlist accepts "Outside the US" as an answer.
If you use our website from outside the US, your information is processed in the United States and wherever our service providers operate.
Wherever you live, you can ask us to see, correct or delete your information by emailing team@mechna.ai, and we will do it (section 14).
16. Changes to this policy #
We will post any change on this page with a new effective date, and record it in the change log below. If a change is material, we will also say so at the top of this page.
If we change how we use or share information we already hold in a way that matters, we will ask for your consent before we do.
Each form records which version of this policy you agreed to. When this policy changes, the version our forms record changes with it.
Effective date: October 8, 2026.
Change log
| Date | Change |
|---|---|
| October 8, 2026 | Removed the home-page waitlist form from section 8.2; joining the waitlist now happens only on the waitlist page. |
| October 8, 2026 | Policy rewritten in full. Added the Mechna app, children's privacy (COPPA), schools, a table for each form, cookies, security, retention rules, your rights and our contact details. |