Privacy Policy

Introduction

Parasha Kids is operated by GN-Projects Solutions Oy (business ID: 3636596-8) ("we", "us", "our"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have. We take privacy seriously, especially because families with young children use our App.

Who Is the Data Controller

GN-Projects Solutions Oy Business ID: 3636596-8 Address: Niittumäentie 13, 04350 Nahkela, Finland Privacy contact: [email protected]

What Data We Collect

We collect the following categories of data: Account data: Email address, display name (if provided), and account creation date. If you sign in with Google, we receive your Google account email and display name. If you sign in with Apple (iPhone/iPad), we receive your Apple ID email — or a private relay address if you choose to hide your email — and your name, if you grant access; Apple only provides your name on your first sign-in. Family account data: If you use the family account feature, we store information about which devices or anonymous identifiers are linked to your family account, and the status of link requests. When a device asks to join your family, we use your email address to send you the approval request. You can give a linked device an optional label (for example "Living room tablet"); please do not use a child's name as a label. We do not collect personal details (names, ages, or contact information) about linked family members or children. Usage data: Which stories you have read, favourites saved, and in-app reading progress. This is stored per account to sync across your devices. Subscription data: Your active subscription status and plan type (provided by RevenueCat, backed by Google Play or the Apple App Store depending on your device). We do not receive your payment card details. Session data: Device type, operating system, the device name your device reports (so you can recognise your signed-in devices under Account → Sessions), and session tokens used for authentication security. Consent records: Records of when you accepted our Terms and Privacy Policy, and whether you opted in to marketing communications. Usage analytics: We collect limited technical and optional usage analytics to improve the app, understand which stories are helpful, fix errors, and improve reliability. This may include app version, platform, country, language, book/page usage, loading performance, safe error codes, and broad device categories such as phone/tablet and screen size bucket. Crash and error diagnostics: If the App crashes or hits an error, technical details (app version, device and operating-system type, error details and the screen in use) are sent to our crash-reporting provider, Sentry, which stores this data in the EU. Sentry may assign a random identifier to the app installation so that crashes can be counted; it is not linked to your account. We do not send Sentry your name, email address, account identifier, screenshots or screen recordings.

What Data We Do NOT Collect

We do not collect: - Your children's names, ages, or any data directly identifying a child - Personal details about linked family members beyond a device or anonymous identifier - Your location - Payment card numbers or bank details - Device advertising identifiers (IDFA / GAID) for tracking purposes - Precise behavioural analytics beyond basic reading history Regarding analytics specifically: we do not collect children's names, exact location, city, IP addresses in telemetry logs, advertising identifiers, exact device model, exact screen resolution, or persistent device identifiers. Optional usage analytics can be disabled in the app settings. Essential reliability and security telemetry may still be collected to keep the app working safely.

Legal Bases for Processing (GDPR)

We process your data on the following legal bases: Contract performance: To provide the App and manage your account, family account, and subscription. Legitimate interests: For security, fraud prevention, preventing family sharing abuse, and improving the App — balanced against your rights. Legal obligation: To comply with Finnish and EU law (e.g. GDPR data retention requirements). Consent: For marketing communications (you can withdraw consent at any time).

How We Use Your Data

We use your data to: - Create and maintain your account - Manage your family account and linked devices - Provide App features such as reading history and favourites - Process and verify your subscription and family access entitlements - Send password reset and account security emails - Improve the App and fix technical issues - Respond to your support requests - Send marketing emails if you have consented - Detect and prevent abuse of family sharing (e.g. sharing outside the household)

Data Sharing and Third Parties

We do not sell your personal data. We share data only with the following service providers who help us operate the App: RevenueCat — subscription management and entitlement verification Google — authentication (Google Sign-In) and app distribution (Google Play) Apple — authentication (Sign in with Apple) and app distribution (App Store), on iPhone and iPad Cloudflare — backend infrastructure and network delivery Scaleway — hosting of our main database and storage of anonymised usage analytics (EU) Sentry — crash and error diagnostics (data stored in the EU) Sender — delivery of account emails and, only if you opt in, newsletters (EU) Expo — checking for and delivering app updates For a full list of sub-processors, please see the Third-Party Providers document.

Data Retention

We keep your account data for as long as your account is active. If you request account deletion, your data is deleted within 30 days, except where we are legally required to retain certain records (e.g. billing records for tax purposes, which we retain for the period required by Finnish accounting law). When a device is unlinked, or the parent account is deleted, the device is removed from the family and its device label is deleted within 30 days. A request to join a family keeps the parent's email address and the proposed device label only until 30 days after the request was approved, declined or expired. The anonymous identifier of a device that has left a family stays in our family-link records; it is not connected to any name or contact details.

Data Transfers Outside the EU/EEA

Some of our service providers (RevenueCat, Google, Apple, Cloudflare and Expo) process data outside the EU/EEA. We aim to ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses) in accordance with GDPR requirements.

Your Rights Under GDPR

As a data subject under GDPR, you have the right to: - Access the personal data we hold about you - Rectify inaccurate data - Erase your data ("right to be forgotten") - Restrict processing in certain circumstances - Data portability — receive your data in a structured format (use the Export Data feature in Account settings) - Object to processing based on legitimate interests - Withdraw consent for marketing at any time - Lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) We provide these rights to all users, wherever they live. Depending on where you live, you may also have rights under your local data protection law, and you can complain to the data protection authority in your country. To exercise any of these rights, contact us at [email protected].

Security

We apply reasonable technical and organisational measures to protect your data. For details, see our Security Policy. No system is completely secure; we cannot guarantee absolute protection against all threats.

Children's Privacy

Because children use this App with their families, we take extra care. We do not knowingly collect personal data directly from children. The family account feature links child devices to a parent account without collecting personal details about the child. Parents and guardians are responsible for supervising their children's use. For more detail, see our Children's Privacy Notice.

Changes to This Policy

We may update this Privacy Policy. We will notify you of material changes by in-app notice or email. The "Last updated" date at the top of this document will always reflect the most recent version.

Contact

Privacy questions or requests: [email protected] General support: [email protected]