Privacy Policy

1. Introduction

This Privacy Policy describes how Karanta Kids ("we," "us," or "our") collects, uses, and protects information in connection with the Karanta Kids mobile application ("the App"). The App is a children's educational reading platform that provides illustrated stories, narrated audio, and interactive quizzes for young readers.

We are committed to protecting children's privacy and complying with applicable privacy laws, including the Children's Online Privacy Protection Act ("COPPA") in the United States, the General Data Protection Regulation ("GDPR") as it applies to children in the European Economic Area and the United Kingdom, and Apple's App Store Guidelines and Google Play's Families Policy.

By downloading and using the App, parents and guardians acknowledge that they have read and understood this Privacy Policy.

2. Information We Collect

2.1 Information Collected from Children

Karanta Kids is designed to operate with minimal data collection. We do not require children to create accounts, provide names, email addresses, or any other personally identifiable information.

The App stores the following data locally on the device and in our backend system to enable core reading functionality:

• Reading progress: The current page number for each book, allowing the child to resume where they left off.
• Quiz responses: Answers to comprehension quizzes associated with each book, used to track learning progress within the App.
• Content preferences: Which books are in the child's bookshelf, enabling personalized reading lists.

This data is associated with an anonymous device identifier and is not linked to any personally identifiable information about the child.

2.2 Information Not Collected from Children

We want to be clear about what we do not collect from child users of the App:

• Names, email addresses, or physical addresses
• Photographs, videos, or audio recordings
• Precise geolocation data
• Contact lists or social media identifiers
• Persistent identifiers for advertising or cross-site tracking
• Biometric data

2.3 Information Collected from Parents and Administrators

Our content management system (used exclusively by adult administrators, not by children) collects the following information from authorized personnel:

• Email addresses used for administrator account authentication
• Names provided during account setup
• Login timestamps and session data for security purposes

This administrative data is entirely separate from the children's reading experience and is not accessible through the App.

2.4 Automatically Collected Technical Information

The App may automatically collect limited, non-personal technical information necessary for its operation:

• Device type and operating system version (for compatibility and crash reporting)
• App version number
• General, non-precise location data at the country level (derived from IP address, used solely for content language and regional availability)

This technical data cannot be used to identify individual children.

3. How We Use Information

We use the limited information we collect solely for the following purposes:

• Providing core functionality: Saving reading progress, quiz results, and bookshelf selections so children can continue their reading journey across sessions.
• Improving the App: Analyzing aggregate, anonymized usage patterns to understand which books are popular and to improve the reading experience. This analysis never involves individual-level data about children.
• Maintaining security: Protecting the integrity and availability of the App and its content.
• Technical support: Diagnosing and resolving technical issues that affect the App's performance.

We do not use any collected information for advertising, behavioral profiling, or any purpose unrelated to the educational reading experience.

4. Advertising and In-App Purchases

Karanta Kids does not contain any form of advertising. We do not display banner advertisements, interstitial advertisements, video advertisements, sponsored content, or native advertisements of any kind.

We do not engage in interest-based advertising, contextual advertising, or any advertising that targets children.

Any future introduction of in-app purchases would require verifiable parental consent before any transaction and would be clearly disclosed through an update to this Privacy Policy.

5. Data Sharing and Third Parties

5.1 We Do Not Sell Data

We do not sell, rent, lease, or trade any personal information or usage data to third parties under any circumstances.

5.2 Service Providers

We use the following third-party service providers to operate the App. These providers process data solely on our behalf and under our instructions:

• Supabase (database and authentication): Provides secure cloud infrastructure for storing reading progress and quiz data. Supabase processes data in accordance with their privacy policy and applicable data protection agreements.
• Vercel (web hosting): Hosts our administrative content management system. Vercel does not have access to children's data from the App.
• Apple App Store / Google Play Store: Distribution platforms for the App. Their respective privacy policies govern data collected during download and installation.

We require all service providers to maintain appropriate security measures and to use data only for the purposes of providing services to us.

5.3 Legal Requirements

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect the safety of any person, prevent fraud, or respond to a law enforcement request.

6. Data Storage and Security

We implement industry-standard technical and organizational security measures to protect data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security)
• Encryption of data at rest in our database systems
• Row-level security policies that restrict data access at the database level
• Multi-factor authentication for all administrative accounts
• Role-based access controls for content management personnel
• Regular security reviews and updates

Reading progress and quiz data are stored on secure cloud servers. Local data on the device is stored within the App's sandboxed storage area, which is protected by the operating system.

7. Data Retention

Reading progress and quiz data are retained for as long as the App is installed on the device. If the App is uninstalled, locally stored data is automatically deleted by the operating system.

Server-side anonymized usage data may be retained for up to 12 months for analytical purposes, after which it is permanently deleted.

Administrative account data is retained for as long as the account remains active and is deleted upon account removal by a super administrator.

8. Children's Privacy Protections (COPPA Compliance)

We comply with the Children's Online Privacy Protection Act and take the following measures to protect children's privacy:

• We do not knowingly collect personal information from children under the age of 13.
• We do not require children to provide any personal information to use the App.
• We do not condition a child's participation in any activity on the disclosure of more information than is reasonably necessary to participate in that activity.
• We do not use persistent identifiers to track children across applications or websites.
• We do not serve behavioral or targeted advertising to children.

If we discover that we have inadvertently collected personal information from a child without appropriate consent, we will delete that information promptly. If you believe that we have collected personal information from a child, please contact us immediately using the information in Section 12.

9. European and United Kingdom Data Protection (GDPR)

For users in the European Economic Area and the United Kingdom, the following additional provisions apply:

• Legal basis for processing: We process the limited data described in this policy on the basis of our legitimate interest in providing the educational reading service (Article 6(1)(f) GDPR) and, where required, on the basis of consent obtained from a parent or guardian (Article 8 GDPR).
• Data controller: Karanta Kids is the data controller for the purposes of GDPR.
• Data transfers: Data may be transferred to and processed in countries outside the EEA or UK. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection law.
• Data subject rights: Parents and guardians have the right to access, rectify, erase, restrict processing of, and port data relating to their child. To exercise these rights, please contact us using the information in Section 12.

10. Parental Rights and Controls

Parents and guardians have the following rights regarding their child's use of the App:

• Review information: Parents may request a review of any data associated with their child's use of the App by contacting us.
• Request deletion: Parents may request the deletion of any data associated with their child's use of the App at any time.
• Withdraw consent: Parents may withdraw consent for the collection of their child's data at any time by uninstalling the App or by contacting us.
• Refuse further collection: Parents may refuse to allow further collection of their child's data without requiring deletion of previously collected data, though this may limit the App's ability to save reading progress.

To exercise any of these rights, please contact us using the information provided in Section 12.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features of the App. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Provide notice of the change through the App or through the applicable app store listing.
• Where required by law, obtain renewed consent before applying material changes to data practices affecting children.

We encourage parents and guardians to review this Privacy Policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy, about our data practices, or if you wish to exercise any parental rights regarding your child's data, please contact us:

We will respond to all legitimate requests within 30 days. In certain circumstances, we may require verification of your identity before fulfilling a request to ensure the security of the data.