little wins privacy policy
little wins / 宝贝刮刮卡 is provided by Smart Hippo.
Updated October 7, 2026. Covers the cloud app and account deletion introduced in version 0.7.0.
Android package: com.baobei.guaguaka
Accounts and family data
Registration and internet access are required. The server stores your login name, salted password hash, internal and public account identifiers, sessions, trial and invitation relationships, family membership, and the child nicknames, goals, rewards, cards, flowers, shop items and redemption records you enter. Passwords are not stored as plain text in the database. Use nicknames and avoid unnecessary details such as schools, addresses or health information.
Co-parents added by the administrator can view and manage the shared family. Shared configurations become available to others through codes you choose to generate and share; these include custom goals, prizes and shop text. Do not include private information in configurations you plan to share.
Device storage, hosting and purchases
Your device keeps a login session, a pending operation and language/audio preferences. Family data is hosted on Alibaba Cloud and transmitted over HTTPS. Necessary connection information, such as IP addresses, supports service operation, request limits and troubleshooting. The app has no advertising or behavioral analytics SDK and does not actively request camera, microphone, contacts or precise location.
Google Play processes payments. We store purchase tokens, plans, status and expiry times for server verification; we do not receive card numbers. A dedicated Cloudflare relay processes short-lived authentication information and purchase tokens without storing request bodies or the business database in the relay application. The Google private key and family database remain on Alibaba Cloud. Google and infrastructure providers handle service data under their own policies.
Google Privacy Policy · Cloudflare Privacy Policy · Alibaba Cloud Privacy Policy
Deletion and retention
Permanently delete your account in Parent settings → Delete account after re-entering your password, or request deletion using the page below. Deletion immediately removes the live account, credentials, original personal family data, cloud backup, your shared configurations and purchase links, and revokes all sessions. Deleting an administrator deletes their family and removes other parents’ access while preserving those parents’ accounts and original personal data. Deleting a co-parent does not delete the shared family. Configuration copies already imported into other families remain.
Isolated disaster-recovery backups remain for up to 30 days and are unavailable during normal use. An irreversible hash of the random internal account ID and deletion time is retained separately to prevent restoration from old backups; it contains no login name, password, child data or purchase token. Account deletion does not cancel Google Play subscriptions or automatically refund purchases. Manage your subscription first; membership from a deleted account cannot be restored to a new account.
Parents, support and updates
Parents manage family goals and rewards, and children may use tasks and scratch cards with parental guidance. Parents control the information entered and who it is shared with. Contact us if a child has provided unnecessary personal information. Support email addresses and messages are used to respond, verify requests and resolve issues, and are retained only as needed. We update this page when services or data practices change.