Paper Boat Apps Private Limited (the “Company”, “We”, “Us”, “Our” or “Kiddopia”) are committed to protecting your Personal Data and supports the right to your privacy. This Privacy Notice (“Notice”) explains what and how Personal Data is collected, and further processed by us, sources (if any) of Personal Data and to whom the Personal Data is disclosed.
Following are the various sections of the Privacy Notice. To understand in detail how we process and protect your Personal Data, please go through each of the sections below:
We may collect the following Personal Data attributes through Our Website:
Cookies: We also use cookies and similar technologies for purposes such
as analyze trends, enhance and
personalize your experience and improve Our Services. Please refer to Our Cookie
Policy, to learn more.
You are responsible for any third party Personal Data obtained, published or shared with Us and confirm
that you
have the third party's consent to provide the Data with Kiddopia.
Protecting the privacy of children is very important to Us. Our Website is not intended for children and We do not knowingly collect Personal Data from children. If you are under 16 years of age, then please do not use or access Our Website at any time or in any manner. If we learn that Personal Data has been provided to us and/or collected on the Website from children, such as through a support request, we take appropriate steps to delete that Data in a secure manner. If you are a parent / legal guardian and you discover that your child has registered for an account on Our Website, then you have the right to request us to delete such Data by contacting our privacy team at “privacy@kiddopia.com”.
We shall use your Data for the below purposes:
We endeavour, where practicable, to process your Personal Data in a safe environment by preventing any unauthorized or unlawful processing of Personal Data or accidental loss or destruction of, or damage to such information. We have implemented various physical, technical and administrative security measures to protect your Personal Data and Our network from unauthorized access.
Some of these measures include:
In some cases, we may disclose your Personal Data with external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies). We shall ensure that all such disclosures shall be in accordance with applicable privacy laws (such as executing Data Processing Agreements).
In some circumstances, Personal Data may also be transferred outside the country of your residence. Such transfers shall be in accordance with applicable privacy laws via implementation of appropriate safeguards (such as Data Transfer Agreements).
It should be noted that these external parties are not used for behavioral tracking of children.
For more further information on Our appointed external parties, please go through the below details:
The external parties in this section enable the Us to monitor and analyze web traffic and can be used to keep track of User behaviour.
Google Analytics (Google LLC) - Google Analytics is a web analysis service provided by Google LLC (“Google”). Google utilizes the Data collected to track and examine the use of Our Website, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
Please go through their Privacy Policy to learn more about their Personal Data processing practices.
Personal data collected: IP Address
We use external payment service providers to process any payments related to Our services. In general, and unless where otherwise stated, Users are requested to provide their payment details and personal information directly to such payment service providers. We aren’t involved in the collection and processing of such information. Instead, We will only receive a notification by the relevant payment service provider as to whether payment has been successfully completed.
Stripe (Stripe Inc) - Stripe is Our payment service provider. They collect your payment card information necessary to process your payment. Please go through their Privacy Policy to learn more about their Personal Data processing practices.
Personal data collected: First and Last Name, email address, billing information
We use a customer subscription management solution which helps Us to validate and manage the subscription of a User. It also enables Us to respond to support requests raised by Users related to their subscriptions.
RevenueCat (RevenueCat Inc.) - RevenueCat is a subscription management solution provider. The service allows Us to monitor and analyze the User and their purchase history and can be used to keep track of User behaviour.
Please go through their Privacy Policy to learn more about their Personal Data processing practices.
Personal data collected: First and Last Name, email address, language preference, profile picture
This type of service has the purpose of hosting Data and files that enable the Website to run and be distributed as well as to provide a ready-made infrastructure to run specific features or parts of this Website.
Some services among those listed below, may work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data is stored.
Firebase Cloud Firestore (Google LLC) - Firebase Cloud Firestore is a hosting and backend service provided by Google LLC. Please go through their Privacy Policy to learn more about their Personal Data processing practices.
Firebase Realtime Database (Google LLC) - Firebase Realtime Database is a hosting and backend service provided by Google LLC. Please go through their Privacy Policy to learn more about their Personal Data processing practices.
Google App Engine (Google LLC) - Google App Engine is a hosting service provided by Google LLC. Please go through their Privacy Policy to learn more about their Personal Data processing practices.
This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User. These services may also collect Data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.
Sendgrid (Twilio Inc.) - Sendgrid is an email address management and message sending service provided by Twilio Inc. Please go through their Privacy Policy to learn more about their Personal Data processing practices.
Personal data collected: First and Last name, Email address.
This type of service allows Us to manage support and contact requests received. The Personal Data processed depend on the information provided by the User in the messages and the means used for communication (e.g. email address).
Freshdesk (Freshworks, Inc.) - Freshdesk is a support and contact request management service provided by Freshworks, Inc. Please go through their Privacy Policy to learn more about their Personal Data processing practices.
Personal data collected: First and Last name, Email address, provided on a voluntary basis
By registering or authenticating, Users allow Us to identify them and give them access to dedicated services. In this case, We will be able to access some Data, stored by these third party services, for registration or authentication purposes.
Firebase Authentication (Google LLC) – Firebase is our registration and authentication solution provided by Google LLC (“Google”). Please go through their Privacy Policy to learn more about their Personal Data processing practices. Firebase is restricted from sharing personal data with any other third-party service providers.
Personal data collected: First and Last name, Email address, phone number
This type of service analyzes the traffic of this Website, potentially containing Users' Personal Data, with the purpose of filtering it from parts of traffic, messages and content that are recognized as SPAM.
Google reCAPTCHA (Google LLC) - Google reCAPTCHA is a SPAM protection service provided by Google LLC. Please go through their Privacy Policy to learn more about their Personal Data processing practices.
We shall retain your Personal Data for as long as it is necessary for the purpose(s) it was collected for. We may also retain and use your Personal Data for a longer period as permitted or required by law, to comply with Our legal, tax or regulatory obligations (e.g. audit and accounting requirements), handle disputes, to exercise or defend claims. We shall determine the retention period for your Personal Data on the basis of local law requirements and business requirements, post which we shall take measures to securely dispose your Personal Data.
We respect your rights and privacy by taking steps to ensure that your Personal Data is accurate and up to date.
We assure you that:
Any requests to exercise your rights can be directed to Our Privacy Team at “privacy@kiddopia.com”
In the event, if the User wants to delete their account, they can reach out to Our Privacy Team at “privacy@kiddopia.com”.
If you are not satisfied with the way have handled your request or you would like to make a complaint about the way we process your personal data, you can contact the relevant Data Protection Authority (DPA). Please contact us at privacy@kiddopia.com to find out more.
We will confirm receipt of your verifiable request within 30 days and provide information about how we will process your request. We will respond to your request within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfil your request.
We do not charge a fee to process or respond to your verifiable request unless such request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee, or refuse to act on the request. In either case, we will communicate Our choices and explain the reasons behind it.
If you are residing in California, the CCPA provides you with specific rights regarding your Personal Information. This section describes your CCPA rights and explains how to exercise those rights. If there are any conflicts between this section and any other provision of this Privacy Notice and you are a California resident, the section that is aligned more protective of your Personal Information shall hold on top of the others.
The right to know - You have the right to request to know the categories of Personal Information that We collect about you, the purposes for which We use your Personal Information and with whom such information is shared. The details on Personal Information that you can request shall be limited to the information collected or used over the past 12 months.
The right to delete - You have the right to request that we delete the Personal Information that we have collected about you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain your Personal Data to provide you with the Services or due to a legal obligation. If your deletion request is subject to one of these exceptions, we may deny your deletion request.
The right to opt-in and opt-out of sale of Personal Information - You are entitled to direct us to stop disclosing your Personal Information to third parties for monetary or other valuable consideration.
The right to non-discrimination - We will not discriminate against you for exercising your rights under the CCPA. We will not deny you Our services, charge you different rates for Our services, or provide you a lower quality of services if you exercise your rights under the CCPA.
To exercise the rights described above, you need to submit your verifiable request to us on “privacy@kiddopia.com”.
For us to respond to your request, it’s necessary that we know who you are. Therefore, you can only exercise the above rights by making a verifiable request which must:
We shall not respond to any request if we are unable to verify your identity and therefore confirm the personal information in Our possession actually relates to you. If you cannot personally submit a verifiable request, you can authorize a person registered with the California Secretary of State to act on your behalf. If you are an adult, you can make a verifiable request on behalf of a minor under your parental authority. You can submit a maximum number of 2 requests over a period of 12 months.
We will confirm receipt of your verifiable request within 10 days and provide information about how we will process your request. We will respond to your request within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfil your request.
We do not charge a fee to process or respond to your verifiable request unless such request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee, or refuse to act on the request. In either case, we will communicate Our choices and explain the reasons behind it.
Postal Address: Office no.505, Wellington Business Park,
Near Marol Naka, Andheri Kurla Road,
Andheri East, Mumbai-400059
Contact number: +91 22-66940030
Email Address: privacy@kiddopia.com
We reserve the right to amend, modify, vary or update this Privacy Notice, at Our sole discretion from time to time, as and when the need arises. The most recently published Privacy Notice shall prevail over any of its previous versions. You are encouraged to check this Privacy Notice from time to time to stay informed of any changes.
This notice was last updated on 11 October 2022