K Kalkulo Play Get the app

Legal

Privacy Policy

We design Kalkulo Play around a strict Privacy-by-Design standard — children’s personal information is never collected, and what little the leaderboard sends is anonymous by construction.

Last updated 30 August 2026

1Privacy by Design: Core Principles

At Kalkulo Play (“we,” “our,” or “us”), we are deeply committed to protecting the privacy of children, parents, and educators. We design our educational mobile applications and web services around a strict Privacy-by-Design standard, ensuring compliance with major global child privacy regulations and app store family policies.

Zero personal data from children

We never collect or process Personally Identifiable Information such as full legal names, physical addresses, phone numbers, or personal emails from children.

On-device profile isolation

Real child names entered by parents to customise local player profiles (up to 4 per device) remain 100% on the local hardware. They are never transmitted, stored on remote cloud servers, or shared.

100% ad-free experience

We do not include third-party advertising networks, behavioural trackers, or cross-app analytics SDKs.

No sale or leasing of data

We never sell, rent, or trade user data under any circumstances.

No manipulative nudges

We do not employ dark patterns or deceptive UI techniques designed to encourage children to extend screen time or share personal information.

2Information We Collect and Process

A. Information stored strictly on your device

  • Local player profiles: custom display names, unlocked monster avatars, lesson completion records, and local speed drill progress.
  • App preferences: sound, music, haptics, and interface language settings.

B. Leaderboard data (publicly visible)

To provide safe, motivating, and healthy peer competition across countries and continents, players can optionally share high scores. The only data transmitted to our cloud database (Supabase) consists of non-re-identifiable metrics:

  • Sanitised nickname: a playful 3-part handle (e.g. SpeedyBlazeRocket) selected or sanitised against prohibited terms.
  • Age: integer age (e.g. 8) used solely for peer-bracket sorting.
  • Country code: a broad 2-letter ISO country code (e.g. CA). We never access, request, or track precise GPS or device location coordinates.
  • Game performance: math speed time in milliseconds, table facts completed, and accuracy scores.
  • Anonymous installation identifier: a software-generated UUID used solely to map records without requiring user accounts or emails.

3Adult Parental Gate & App Store Family Standards

In compliance with Apple App Store Kids Category Guidelines (1.3 & 5.1.4) and Google Play Families Policies, all sensitive areas are secured behind an Adult Parental Gate, such as dynamic, randomised arithmetic challenges:

  • Configuring player profiles and public leaderboard participation.
  • Accessing in-app purchases, subscriptions, and billing management.
  • Accessing external links, customer support channels, or this Privacy Policy.

4International Regulatory Compliance

United States — COPPA & state children’s privacy laws

We comply with the Children’s Online Privacy Protection Act (COPPA) and state-level frameworks, including California’s CCPA/CPRA, the California Age-Appropriate Design Code Act, and Maryland’s Kids Code. We do not collect persistent identifiers for behavioural profiling or targeted advertising.

Canada & Quebec — Law 25 & PIPEDA

In compliance with Quebec’s Law 25 and Canada’s PIPEDA, any configuration involving minors under 14 is validated via adult parental oversight. All child display names remain isolated on local device storage.

European Union & United Kingdom — GDPR / GDPR-K & UK Children’s Code

  • Legal basis & minimisation: we process pseudo-anonymous leaderboard statistics under legitimate educational interest authorised via parental settings, strictly adhering to GDPR Article 5(1)(c).
  • High privacy by default: high-privacy settings and data isolation are enabled by default.
  • Parental rights: guardians have the right to access, rectify, or request the immediate erasure (Right to Erasure / Right to be Forgotten) of any cloud-stored leaderboard entry.

Latin America — Brazil (LGPD)

In compliance with LGPD Article 14, all processing is carried out in the child’s best interest. Access to core gameplay and learning lessons is never conditioned on disclosing optional personal data.

Asia-Pacific frameworks

  • India (DPDP Act): we strictly prohibit behavioural tracking, targeted ads, or detrimental profiling for minors under 18.
  • Australia (Privacy Act & Online Safety Act): we enforce high-privacy defaults and ban persistent behavioural tracking.
  • South Korea (PIPA) & China (PIPL): we adhere to strict guardian-authorisation and data minimisation standards for young learners under statutory thresholds.

5Data Retention, Control & Erasure

  • Local data erasure: you can permanently erase all locally stored child profiles, scores, and preferences at any time by clearing application data in your device settings, or using the on-device reset option in settings.
  • Cloud leaderboard erasure: parents may request the immediate, permanent removal of cloud leaderboard records by contacting us at support@kalkuloplay.com with their displayed public nickname and country code.

All valid erasure requests are fulfilled within 30 days.

6Third-Party Service Providers

We rely on a minimal set of secure infrastructure providers to deliver app functionality:

Supabase

Secure cloud database used to host anonymous leaderboard records and profile pairing codes.

RevenueCat, Apple App Store & Google Play Billing

Payment processing and subscription management, handled entirely by Apple and Google sandboxes. We never receive or store financial details.

7Contact Us & Privacy Officer

If you have questions, feedback, or data erasure requests regarding this Privacy Policy, please contact our team: