Privacy Policy

1Privacy by Design: Core Principles

At Kalkulo Play (“we,” “our,” or “us”), we are deeply committed to protecting the privacy of children, parents, and educators. We design our educational mobile applications and web services around a strict Privacy-by-Design standard, ensuring compliance with major global child privacy regulations and app store family policies.

2Information We Collect and Process

A. Information stored strictly on your device

• Local player profiles: custom display names, birth month and year, unlocked monster avatars, lesson completion records, and local speed drill progress.
• App preferences: sound, music, haptics, and interface language settings.

B. Leaderboard data (publicly visible)

To provide safe, motivating peer competition across countries, players can optionally share high scores. The leaderboard is off by default and can only be turned on by a parent behind the parental gate. Only the following is sent to our cloud database (Supabase):

• Random nickname: a playful 3-part handle (e.g. SpeedyBlazeRocket), randomly generated by the app. It is never the child’s real name.
• Age: age in years (e.g. 8), used only to sort players into age brackets.
• Country and region: a 2-letter country code (e.g. CA) and, if chosen, a state or province. We never access or track GPS or device location.
• Game results: speed time, table facts completed and accuracy scores.
• Anonymous install ID: a random ID created by the app on install, used only to link records without accounts or emails. It is not tied to any device or advertising identifier.

C. Anonymous usage data

Session start/end time and basic usage counts, linked only to the anonymous installation identifier, used to understand overall app usage and improve the app. Stored in Supabase.

3Adult Parental Gate & App Store Family Standards

In compliance with Apple App Store Kids Category Guidelines (1.3 & 5.1.4) and Google Play Families Policies, all sensitive areas are secured behind an Adult Parental Gate, such as dynamic, randomised arithmetic challenges:

• Configuring player profiles and turning on public leaderboard participation (off by default).
• Accessing in-app purchases, subscriptions, and billing management.
• Accessing external links, customer support channels, or this Privacy Policy.

4International Regulatory Compliance

United States — COPPA & state children’s privacy laws

We comply with the Children’s Online Privacy Protection Act (COPPA) and state-level frameworks, including California’s CCPA/CPRA, the California Age-Appropriate Design Code Act, and Maryland’s Kids Code. We do not collect persistent identifiers for behavioural profiling or targeted advertising.

Canada & Quebec — Law 25 & PIPEDA

In compliance with Quebec’s Law 25 and Canada’s PIPEDA, any configuration involving minors under 14 is validated via adult parental oversight. All child display names remain isolated on local device storage.

European Union & United Kingdom — GDPR / GDPR-K & UK Children’s Code

• Legal basis & minimisation: we process pseudo-anonymous leaderboard statistics under legitimate educational interest authorised via parental settings, strictly adhering to GDPR Article 5(1)(c).
• High privacy by default: high-privacy settings and data isolation are enabled by default.
• Parental rights: guardians have the right to access, rectify, or request the immediate erasure (Right to Erasure / Right to be Forgotten) of any cloud-stored leaderboard entry.

Latin America — Brazil (LGPD)

In compliance with LGPD Article 14, all processing is carried out in the child’s best interest. Access to core gameplay and learning lessons is never conditioned on disclosing optional personal data.

Asia-Pacific frameworks

• India (DPDP Act): we strictly prohibit behavioural tracking, targeted ads, or detrimental profiling for minors under 18.
• Australia (Privacy Act & Online Safety Act): we enforce high-privacy defaults and ban persistent behavioural tracking.
• South Korea (PIPA) & China (PIPL): we adhere to strict guardian-authorisation and data minimisation standards for young learners under statutory thresholds.

5Data Retention, Control & Erasure

• Local data erasure: you can permanently erase all locally stored child profiles, scores, and preferences at any time by clearing application data in your device settings, or using the on-device reset option in settings.
• Cloud leaderboard erasure: parents may request the immediate, permanent removal of cloud leaderboard records by contacting us at support@kalkuloplay.com with their displayed public nickname and country code, or the anonymous installation ID.
• Automatic deletion: leaderboard entries and anonymous usage data are permanently deleted after 12 months of inactivity.

6Third-Party Service Providers

We rely on a minimal set of secure infrastructure providers to deliver app functionality:

7Contact Us & Privacy Officer

If you have questions, feedback, or data erasure requests regarding this Privacy Policy, please contact our team:

• Privacy Officer: Hendrick Peter Sterlin
• Privacy inquiries: privacy@kalkuloplay.com
• General support: support@kalkuloplay.com
• Website: kalkuloplay.com