multo-privacy

Privacy Policy for Multo

Last updated: 23 May 2026

Multo is an iOS app that helps children practise multiplication and division. This policy explains exactly what happens to data when you use Multo.

The short version

Multo doesn’t collect, transmit, or share any personal information. Everything happens on your device. There are no accounts, no analytics, no ads, and no tracking.

What’s stored on your device

The following stays on your iPhone or iPad and is never sent anywhere:

• Profile names you create (e.g. “Emma”, “Liam”).
• Practice results — which times tables a profile has practised, scores, and streaks.
• Settings — language, appearance, voice model state.

You can delete this data at any time by removing a profile inside the app, or by deleting the Multo app from your device.

Microphone & speech recognition

If you turn on voice answers, Multo asks for permission to use the microphone. Audio is processed entirely on your device using:

• WhisperKit — an open-source speech recognition library that runs locally. Audio never leaves your device.
• Apple’s Speech framework — when used, Multo configures it for on-device recognition only.

Recordings are not stored after they are transcribed. Nothing is uploaded to Apple, OpenAI, or anyone else.

The voice model download

If you enable voice answers, Multo will — with your explicit consent — download a speech recognition model from Hugging Face’s content delivery network. This is a one-time download of roughly 1.5 GB. Hugging Face will see the standard network metadata of any HTTPS request (such as your IP address); Multo does not send any personal information along with the download. You can remove the model at any time from Settings → Voice Model → Clear voice model.

Children’s privacy

Multo is designed for children. Because Multo collects no personal information, transmits nothing off-device, and contains no advertising or third-party tracking, it is consistent with the U.S. Children’s Online Privacy Protection Act (COPPA) and the children’s provisions of the EU General Data Protection Regulation (GDPR).

A profile name is the only thing a child types that resembles personal data, and it never leaves the device.

No analytics, no ads, no tracking

Multo contains no third-party analytics SDKs (e.g. Google Analytics, Firebase, Mixpanel), no advertising, no marketing trackers, and no crash reporting that transmits data off-device. If you choose to share crash diagnostics with Apple through iOS Settings, those reports go through Apple’s standard process — not through Multo.

Changes to this policy

If this policy changes, the updated version will replace this page. The “Last updated” date at the top will reflect any change.

Contact

Questions? Email multomultply@gmail.com.