Introduction

Ludooka ("we," "our," or "us") is committed to protecting the privacy of children and families who use our service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

We comply with the Children's Online Privacy Protection Act (COPPA), the General Data Protection Regulation (GDPR), and other applicable privacy laws. We never sell personal information to third parties.

Information We Collect

Parent/Guardian Information

Email address (for account creation and communication)
Payment information (processed securely through Stripe; we don't store card details)
Account preferences and settings

Child Information (with Parental Consent)

First name (used for story personalization)
Age range (to provide age-appropriate content)
Reading preferences and interests
Photos (optional, for character illustration; processed securely and deletable at any time)
Reading progress and vocabulary learned

Automatically Collected Information

Device type and operating system
App usage analytics (features used, session duration)
Crash reports and performance data

How We Use Information

To create personalized stories featuring your child
To track reading progress and vocabulary learning
To provide bilingual learning features
To improve our service and develop new features
To communicate with parents about their account
To process payments and manage subscriptions
To ensure the security and integrity of our service

Data Security

We implement industry-standard security measures to protect your data, including:

Encryption of data in transit (TLS 1.3) and at rest (AES-256)
Regular security audits and penetration testing
Access controls and authentication for all systems
Secure cloud infrastructure with SOC 2 compliance

Data Retention

We retain personal information only as long as necessary to provide our services. When you delete your account, we delete all associated personal data within 30 days, except where retention is required by law.

Photos uploaded for character creation are processed immediately and can be deleted at any time from your account settings.

Third-Party Services

We use limited third-party services to provide our functionality:

Stripe - Payment processing (PCI-DSS compliant)
Supabase - Database and authentication infrastructure
AI Services - Story and image generation (no personal data retained by AI providers)

We do not use advertising networks, analytics trackers that identify individuals, or social media plugins.

Your Rights

You have the right to:

Access the personal information we hold about you and your child
Correct inaccurate information
Delete your account and all associated data
Export your data in a portable format
Withdraw consent for optional data processing
Object to certain processing activities

To exercise these rights, contact us at privacy@ludooka.com or use the settings in your account.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Ludooka Privacy Team

Email: privacy@ludooka.com

Response time: Within 48 hours

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email and by posting the new policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically.