I'm wondering about that cipher. If they can do it in their head, without using paper or equipment like tables, codewheels, calculator etc., it cannot be very complicated.
Maybe something like Caesar or Rot13, so not really secure if the message gets intercepted.
So, mostly 'security by obscurity'.