Privacy Policy

Introduction

Ọmọ Yorùbá Kids (“we,” “our,” or “us”) is operated by Photizo Labs LLC and is committed to protecting the privacy of children and their families. This Privacy Policy explains what information we collect, how we use and protect it, and the choices parents have when using our mobile application. This app is directed to children (designed for ages 6–8 with parental supervision), and it is designed to comply with the Children's Online Privacy Protection Act (COPPA), the EU GDPR (including Article 8), and the UK Age Appropriate Design Code. Your use of the app is also governed by our Terms of Service.

Who We Are

The operator responsible for collecting and maintaining personal information through Ọmọ Yorùbá Kids is:

Verifiable Parental Consent

A parent creates the account and confirms control of their email address. Before any feature that collects a child's personal information is enabled, the parent must give affirmative, informed consent inside the app. Immediately after consent, we send a confirmation email to that same verified address; the email includes a one-tap link the parent can use to withdraw consent at any time. This method — affirmative in-app consent plus a confirmatory email (commonly called “Email Plus”) — is a recognized form of verifiable parental consent under COPPA for operators that do not disclose children's personal information to third parties for their own commercial use. We do not collect personal information from a child until a parent has given this consent. This applies to every account, including those on the free plan.

You can agree to let your child use the app's core learning features (which requires us to collect the information described below) without separately agreeing to any non-essential third-party disclosure. Where a disclosure is not integral to a feature, we ask for it separately, and declining it will not prevent your child from using that feature.

Parents may withdraw consent at any time — see “Consent Withdrawal & Data Deletion” below.

Data We Collect

• Display name & age range — to personalize the learning experience and show age-appropriate content for each child profile.
• Learning progress — lessons completed, stars earned, achievements, and badges to track your child's educational journey.
• Virtual currency balance — cowrie shells earned through activities, used for in-app rewards and avatar customization.
• Session duration — time spent in the app to enforce parental screen-time controls and provide usage reports.
• Parent email — for account management, password recovery, and important account notifications.
• Purchase & subscription history — your subscription plan, status, and renewal information, provided to us by RevenueCat (we never see or store your payment card details).
• User identifier — a randomly-assigned identifier we create for each account and child profile so we can associate data with the right profile. It is not derived from any real-world identity.
• Website feedback — if you voluntarily submit feedback through our website feedback form, we collect your message and, optionally, your name and email (used only to respond to you). It is stored in our own database (Supabase), is never displayed publicly, and is deletable on request.
• Email address for our free family guide — if you request our free family guide through our website, we collect the email address you submit. It is used to deliver the guide and to send occasional product updates from Ọmọ Yorùbá Kids; you can unsubscribe anytime. It is stored in our own database (Supabase) and is never sold.

Some of this is provided directly by the parent (for example, the parent email and each child profile's name and age range). The rest is generated automatically as the child plays (for example, learning progress and session data).

How We Use Data

• Personalize the learning experience for each child
• Track and display progress to parents
• Enforce parental screen-time controls
• Sync data across devices
• Improve app features based on aggregate usage patterns

Third-Party Services

• Supabase: backend, authentication, and database storage. Data is held in first-party databases we control.
• RevenueCat: subscription management (parent accounts only, no child data shared).
• Apple App Store / Google Play: payments; and cloud speech recognition for Yorùbá as described above.

We do NOT use advertising networks, tracking SDKs, or sell any personal information.

Your Rights as a Parent

Under COPPA and other privacy regulations, you have the right to:

• Review all data collected about your child
• Export your child's data in JSON format
• Delete your child's data at any time
• Pause data collection while still using the app
• Withdraw consent and disable child features
• Update consent preferences at any time

How to Exercise Your Rights

You can review, export, or delete your child's information at any time inside the app: open Parent Area → Privacy & Data. You may also email us at support@photizolabs.com and we will respond within 30 days. We may ask you to verify that you are the child's parent before acting on a request.

Consent Withdrawal & Data Deletion

You can withdraw consent in two ways: (1) from the Parent Dashboard inside the app, or (2) by tapping the withdraw-consent link in the confirmation email we sent you (also reachable at https://www.omoyoruba.app/auth/revoke-consent.html). Withdrawal links remain valid for 30 days; you can always withdraw from the Parent Dashboard.

When consent is withdrawn, we immediately stop collecting your child's personal information and schedule that child's data for permanent deletion within 7 days. You may also delete your entire account at any time, which permanently removes your parent account, every child profile, and all associated data. We keep only a minimal consent/withdrawal record where required by law (see Data Retention).

Data Retention

• Profile & learning data: retained until you delete the child profile or account
• After consent withdrawal: the child's data is permanently deleted within 7 days
• Session time: 90-day rolling window
• Voice input: When a child practices pronunciation, their speech is converted to text so the app can give feedback. Where the device has an on-device speech model for the language (often the case for English), this happens entirely on the device and the audio never leaves it. Yorùbá has no on-device model, so Yorùbá speech is sent to the platform's speech-recognition service (Apple on iOS, Google on Android) to be transcribed, then discarded. We do not store voice recordings, and we do not keep transcripts after generating in-the-moment feedback.
• Consent records: a minimal record of consent is kept only as long as reasonably necessary and as permitted by COPPA

Data Security

• All data encrypted in transit (TLS 1.3)
• Data encrypted at rest in Supabase
• Row-level security policies protect user data
• Regular security audits and updates
• PIN protection for parent controls

Changes to This Policy

If we make material changes to how we handle children's personal information, we will notify parents by email and update the “Last updated” date above before the changes take effect. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: