Privacy Policy
How we handle your family's data
Last updated: January 2026
1. Data we collect
We collect only the minimum data needed to run the service: parent account email and display name, kid profile names and preferences (birth year, gender, avatar, preferred language), viewing history and progress, technical logs (device type, language, error diagnostics), and — for subscribers — billing information handled directly by Paddle.
2. How we use the data
We use the data to operate and improve the service: authenticate you, remember where each kid stopped watching, recommend age-appropriate content, prevent abuse, and send essential service messages. We do not sell personal data and we do not use it for third-party advertising.
3. Legal basis (GDPR / UK GDPR)
For visitors in the European Economic Area, the United Kingdom, and Switzerland, we process personal data under the following legal bases: performance of a contract (running your subscription and profiles), legitimate interests (security, service improvement), consent (optional analytics cookies), and legal obligation (tax, accounting, and fraud-prevention records).
4. Sharing with processors and third parties
We share only what is necessary with vetted providers: Paddle (billing, taxes and payment support as Merchant of Record), Bunny.net (video delivery and CDN), Lovable Cloud / Supabase (hosted database and authentication), and email/diagnostic providers. Each processes data on our instructions under a Data Processing Agreement. We do not share data with third parties for their own marketing.
5. International transfers
Some of our processors are located outside the EEA/UK. Where required, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.
6. Cookies
We use essential cookies to keep you signed in and remember your language and profile. Analytics cookies, when used, are set only after your consent and can be withdrawn at any time from the site.
7. Data retention
Account and profile data are kept while your account is active and deleted within 90 days of account closure, except where a longer period is required for legal, tax, or fraud-prevention reasons. Payment records held by Paddle follow Paddle's own retention policy.
8. Your rights
You have the right to access, correct, export, or delete your personal data, to restrict or object to certain processing, and — for EU / UK residents — to lodge a complaint with your local supervisory authority. Contact us at the address below to exercise these rights; we respond within 30 days.
9. Children's data
Kid profiles are created and managed by the parent account holder. We do not knowingly collect personal data directly from children under the age applicable in your country without verifiable parental consent. Parents can review or delete kid profiles at any time from the parents area.
10. Contact
For privacy questions or data-protection requests, contact us at privacy@pneimelech.com.