Toca Boca World

Is Toca Boca World safe for kids?

Yes. Toca Boca World is a digital dollhouse: children build homes, dress characters and make up stories, with nobody else in the room. There is no chat and no way to contact other players. We score it 73/100, ahead of Lingokids (69) and far ahead of Roblox (55), where meeting strangers is the core risk.

The score is held back by money and housekeeping, not danger. The game is built to sell paid packs to young players, and deleting your child's data takes an email.

What Toca Boca World collects

Very little, for a game with more than 100 million downloads on Google Play. Apple's privacy label lists no data used to track you. The only data linked to the player is coarse location, from the IP address. Device and user IDs, purchases, usage and crash data are collected without being linked to an identity.

The privacy policy, updated in September 2026, names the tools behind that: Firebase, Crashlytics and BigQuery for analytics and crash reports, Amazon Web Services for hosting, Helpshift for support, and AppsFlyer to measure Toca Boca's own ad campaigns. It says AppsFlyer collects no personally identifiable information, and it keeps attribution data for three months. One use parents may not expect: the game checks which other Toca Boca apps are on the device so it can promote them.

Toca Boca is part of Spin Master, the Canadian toy company, and the policy names Spin Master's data protection officer. The studio is a member of PRIVO's Kids Privacy Assured programme, an FTC-approved COPPA safe harbour, which means PRIVO reviews its practices and handles complaints.

Spending in the Toca Boca shop

This is the part to plan for. The US App Store lists packs at $0.99 to $4.99, among them a $4.99 character creator, a $3.99 hospital and a $2.99 mall, and new style packs keep arriving. Bitdefender's guide for parents notes that children may not understand the difference between free and paid content.

The game is in the App Store's Kids category, where Apple lists parental controls and age assurance among its in-app controls. That stops a child tapping straight into a purchase. It does not replace store-level limits, which are the ones that hold:

• On iPhone and iPad, use Family Sharing with Ask to Buy, or block in-app purchases in Screen Time's parental controls.
• On Android, turn on purchase verification for all purchases in the Play Store settings.

Risks outside the app

Most of what worries parents about Toca Boca happens around it. Fans post huge numbers of videos on YouTube and TikTok, and Bitdefender warns that some carry ads, bad language or fake links. Comment sections are open to adults.

Store search is a second trap. When we searched the App Store for Toca Boca World, an app called "Toca Life Aesthetic Mod Boca" from an individual developer appeared in the top results. Copycat and "mod" apps are not made by Toca Boca AB and are not covered by its privacy policy or its safe-harbour seal.

Deleting your child's data

Google Play's data safety form says the developer offers no way to request deletion. The privacy policy says the opposite: parents can email [email protected] to review or delete a child's data. Without a request, Toca Boca keeps account and usage data for two years after the last play, then deletes or anonymises it. Support emails from children get one reply and are then deleted, according to the policy.

How to set up Toca Boca World safely

1. Install only the app from Toca Boca AB, and check the developer name before downloading anything with "Toca" in its title.
2. Turn on Ask to Buy or Play Store purchase verification before handing over the device.
3. Watch Toca Boca videos with younger children, or use YouTube Kids, rather than letting them browse fan content alone.
4. When your child stops playing, email [email protected] to delete the data rather than just removing the app.

How we scored it

The regulatory record (87) and scams and harmful content (80) are Toca Boca World's strongest factors: no regulator action, and no contact with other players, though paid packs are aimed at young children. Privacy (74) benefits from a label with no tracking and only coarse location linked to the player. Transparency and control (60) is the weakest, because deletion needs an email and Google Play's form contradicts the policy.