PRIVACY POLICY

Effective Date: April 2026

At Kidiyo World B.V. (“Kidiyo”), we are committed to providing a secure and educational environment. Kidiyo is designed with the “Best Interests of the Child” as our primary consideration. We have implemented privacy-by-default to ensure a safe environment for families in the USA, UK, Canada, Australia, and the EU.

1. Our Privacy Commitment

• No Selling of Data: We never sell or rent your or your child’s information.
• Ad-Free Experience: The Kidiyo app environment is 100% free of third-party advertisements.
• Privacy by Design: We prioritize data minimization, collecting only what is essential for the service.

2. Information We Collect and Legal Basis

Under the GDPR and international laws, we specify the following legal grounds for processing data:

3. Our Service Providers (Sub-Processors)

To provide the Service, we use trusted third-party providers who are COPPA and GDPR compliant:

• Unity Analytics: We use Unity to monitor in-app performance and gameplay activity. This includes tracking which games are played, the duration of play sessions, and learning progress (e.g., levels completed). This data helps us understand which content children enjoy most so we can improve the educational experience. We operate this in COPPA-compliant mode. 
• Firebase (Google): Used for backend infrastructure and to monitor app stability (Crashlytics). Data is anonymized.
• Mailchimp: Used to send updates, newsletters, and subscription info to Parents only.

Google & Meta: Used on our website for parental marketing attribution (measuring the success of ads shown to adults).

4. Parental Consent and Control

• Verifiable Parental Consent (VPC): We do not knowingly collect personal information from children under 13 (USA) or 16 (UK/EU) without verifiable parental consent.
• Control: Parents have the right to review, update, or request the deletion of their child’s data at any time.
• Parental Gate: Access to account settings, external links, and the Mailchimp subscription area is protected by a math-based or gesture-based Parental Gate.

5. Data Retention and Deletion

• Child Data: Profile nicknames and game progress are deleted within 30 days of account termination.
• Parental Data: We retain billing information for the legal period of 7 years for tax and accounting purposes.
• Anonymization: For long-term analytics, we may anonymize data so it can no longer be linked to a specific user.

6. Security and International Transfers

All data is encrypted (SSL/TLS) and stored on secure servers within the European Union.

• International Transfers: For data transferred outside the EEA (e.g., Firebase or Mailchimp in the USA), we rely on Standard Contractual Clauses (SCCs) or the Data Privacy Framework to ensure a high level of protection.

7. Technical Tracking & Cookies

• In-App: We use internal IDs to track game progress. We do not use behavioral ad-tracking inside the app environment.
• Website: We use the Meta Pixel and Google Analytics on our website for adult-directed marketing. You may opt-out via browser settings.

8. Kid-Friendly Privacy Promise

We believe kids have a right to understand their privacy. Our 5-point promise:

1. No real names: We only use your nickname.
2. No following: We only look at what you do inside our app.
3. No ads: No commercials for toys or other things.
4. Safe secrets: We don’t share your play time with strangers.
5. You are the boss: Ask a grown-up if you want us to forget your nickname.

9. Your Legal Rights

Regardless of your location, you have the right to Access, Correct, Delete (the “Right to be Forgotten”), or Transfer your data. To exercise these rights, contact us at the email below.

10. Contact Us

Kidiyo World B.V.
Saturnusstraat 95, Den Haag, The Netherlands

KvK: 90891686

Email: [email protected]