Privacy Policy

Last updated: 20 July 2026

HamHam is a learning game for children, used under a parent’s or guardian’s supervision. The short version: your child’s gameplay data never leaves your child’s device, and the only personal information we receive is what an adult chooses to send us when they contact us.

1. What we collect

Enquiries to HamHam are for adults — parents and guardians. Depending on how you contact us, we may receive:

• Your name — optional in the website form.
• Your email address — required in the website form, so we can reply.
• Interest — which option you picked (try HamHam, Premium, Family, or updates only).
• An optional message — anything you choose to include when you write to us. Please send only what is needed to answer your question.
• Payment-verification information you voluntarily supply — for example a payment screenshot and reference code sent to us when you are confirming a purchase. You choose what to send; we never ask for card numbers, PINs, or account passwords.
• Limited anti-spam and security information — technical data used to stop abuse of the contact form, described in Service providers.

We use this only to respond to your enquiry, to verify and deliver a purchase where that applies, and to send you the HamHam updates you asked for. Submitting the website form sends one notification email to the operator. We do not sell this information, and we do not share it for advertising.

2. Your child’s data stays on the device

The HamHam app makes no network calls for gameplay. Everything your child creates or earns is stored only in the browser storage on your own device:

• Child profiles and in-app customisation
• Mission progress and answers
• Stars, rewards and unlocked characters
• Any audio or photos used by app features

There is no account system, no cloud sync, and no server copy of this information. We cannot see it. Backup and restore is a file saved to and loaded from your own device — it is not an upload to us or to anyone else.

A child does not need an online account to use HamHam, and children should not send us identifying details or payment information directly. Learning progress, answers, rewards, characters, settings, and related activity stay on the device or browser and are never automatically uploaded to a HamHam account database — because no such database exists.

Because the data lives on the device, clearing your browser or app data, or uninstalling HamHam, removes it. There is no cloud account for us to delete on your behalf, because none exists.

3. Service providers we use

These are the only third parties involved in running this website:

• Vercel — hosts the website and the contact-form endpoint.
• Resend — delivers the single notification email generated by the contact form.
• Upstash Redis — abuse protection for the contact form only. It stores a SHA-256 hash of the submitted email address, never the address itself, so the form can tell that some address submitted recently without the stored value being readable back. These keys expire automatically within roughly 25 hours.
• Vimeo — only if you choose to play the main promotional video. See Videos on this website.
• YouTube (Google) — only if you choose to play one of the installation tutorial videos. See Videos on this website.
• GCash and GoTyme — used by you, in your own banking or e-wallet app, to send a manual payment. The payment happens in their app, not on this website. Their handling of your payment is governed by their own terms and privacy policies.

4. Videos on this website

The videos on our pages are not loaded when the page opens. Until you press Play, you see only an image stored on our own website, and no request is made to Vimeo, YouTube, or Google.

Our main promotional video uses a Vimeo player. When you press Play on that video, we load a player from player.vimeo.com. That is a connection to Vimeo, and from that point Vimeo may set cookies or similar storage and collect device and usage data about the video you are watching, under Vimeo’s own privacy policy. If you would rather not load anything from Vimeo, simply do not press Play — that video also has a plain “Watch on Vimeo” link you can choose instead.

Our Android and iPhone/iPad installation tutorial videos use a YouTube player. When you press Play on one of those, we load a player from youtube-nocookie.com. That is a connection to Google, and from that point Google may set cookies or similar storage and collect usage data about the video you are watching, under Google’s own privacy policy. If you would rather not load anything from Google, simply do not press Play — every YouTube video also has a plain “Watch on YouTube” link you can choose instead.

5. Cookies and tracking

This website sets no cookies of its own and loads no analytics or advertising trackers when a page opens. The only third-party storage that can appear is the Vimeo or YouTube player described above, and only after you deliberately press Play on the corresponding video.

6. How long we keep information

• Abuse-protection hashes: deleted automatically within about 25 hours. This is enforced by the storage itself.
• General enquiries and the resulting email: normally kept for up to 12 months after our last meaningful interaction with you, then deleted.
• Payment, accounting, fraud-prevention, dispute and legally required records: kept longer where that is necessary — for example to prove a purchase was delivered, to resolve a dispute, or to meet an obligation under Philippine law.
• Data on your child’s device: kept until you clear it. It is under your control, not ours.

7. Security

Contact-form abuse-protection keys are stored as one-way hashes rather than raw email addresses, and expire on their own. The website is served over HTTPS. No system can be guaranteed perfectly secure, but because we deliberately hold so little — no child data, no accounts, no payment details — there is very little to expose.

8. Payments

This website never collects card or bank details. When purchasing is available, payment is made manually by the parent using their own e-wallet app, outside this website, and confirmed by sending proof to us. Payment is made through GCash or GoTyme, in your own app. We never see or store your card details, PIN, or account password — only the verification information you choose to send us, such as a payment screenshot and reference code.

9. Contact, correction and deletion

HamHam Learning App is independently created and operated by Jommel Santos, based in Calumpit, Bulacan, Philippines. You can reach us at jomsantosva143@gmail.com, or through the Facebook Messenger link used throughout this site.

You may ask us to:

• Tell you what information we hold about you.
• Correct information that is wrong.
• Delete information we no longer need to keep.

Once we have verified that the request genuinely comes from you, we will normally deal with it within 30 calendar days. We may need to keep some records for longer where section 6 above applies — for example payment, accounting, fraud-prevention, dispute, or legally required records — and we will tell you if that is the case.

For information on your child’s own device, you do not need us at all: resetting or clearing HamHam’s local data removes it directly. Contact us for anything you sent through an adult enquiry or payment channel.

10. Changes to this policy

We may update this policy as HamHam changes. The current version always lives on this page, with the “Last updated” date at the top. Please check back if this matters to you.

See also our Children’s Privacy Notice and Terms of Use.