Privacy Policy
Last updated: 22 October 2026
Version: 5.0
Effective date: 22 October 2026
At Kidzplora, protecting the privacy of children and families is an important part of how we design and operate our Service.
Our digital adventures are intended for children, but accounts and purchases are managed by parents and legal guardians.
This Privacy Policy explains what personal information we collect, why we use it, who we share it with, how long we keep it and how you can exercise your privacy rights.
Our Privacy Commitments
- Only adults aged 18 or over may register customer accounts or make purchases.
- Children do not need their own accounts or profiles. They play through their parent's account.
- We do not ask children for their names, dates of birth, email addresses or other personal details.
- We do not save children's answers, scores or individual activity histories, and we do not create behavioural profiles.
- There is no advertising in Kidzplora.
- We do not sell personal information.
- We aim to collect only the information necessary to operate, maintain and secure the Service.
These commitments are subject to the more detailed explanations below.
1. Who We Are
1.1. Kidzplora is operated by SYOS by SS FZC, a limited-liability company registered in Sharjah Publishing City Free Zone, United Arab Emirates.
1.2. We are committed to protecting the privacy of families using Kidzplora and limiting personal information to what is necessary to operate, maintain and secure our services.
1.3. SYOS by SS FZC is responsible for determining how and why personal information is processed through Kidzplora, except where a third-party provider acts as an independent controller.
1.4. Our contact details are:
Legal company name: SYOS by SS FZC
Registered address: Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Privacy email: privacy@kidzplora.com
Website: https://kidzplora.com
1.5. This Policy applies to our website, adult accounts, digital purchases, interactive adventures, newsletter subscriptions and related customer services.
2. Children's Privacy
2.1. Kidzplora is designed for children aged 3 to 10, with accounts and purchases managed by adults aged 18 or older.
2.2. Children do not need to create personal accounts or profiles to participate in Kidzplora adventures.
2.3. We do not ask children to provide their names, dates of birth, email addresses or other personal details.
2.4. We do not save individual children's mission answers, track their personal learning progress, maintain individual activity histories or create behavioural profiles.
2.5. We only remember which missions your family has finished in each adventure, so you can carry on where you stopped. This bookmark belongs to the parent account. It does not record which child played, and it contains no names, answers or scores. Children who share the account share the same bookmark.
2.6. There is no advertising in Kidzplora.
2.7. Limited technical information may still be processed where necessary to operate and protect the website, as explained in this Privacy Policy.
2.8. Children's privacy receives additional protection under laws that may apply to Kidzplora, including UAE Federal Decree-Law No. 26 of 2025 Regarding Child Digital Safety, the US Children's Online Privacy Protection Act (COPPA), EU GDPR, UK GDPR and the UK Age Appropriate Design Code. We design the Service so that it does not need children's personal information.
2.9. Kidzplora has no public profiles, child-to-child messaging, chat, social networking or public sharing of children's content.
2.10. Some activities let children draw, write or choose how they feel. These answers stay in the browser on the device being used and are not sent to our servers. Information stored in a browser may be visible to other users of the same device and is lost when browser data is cleared. Parents can clear it at any time from the dashboard or the browser settings.
2.11. Parents can set a daily playtime limit and a daily rest period for the account in the parent dashboard. A gentle reminder appears shortly before the limit or rest period, and play then pauses until the next day or the end of the rest period. To do this, we record only the total minutes played on the account each day.
2.12. Links that lead out of the children's play area ask an adult question first. This is a safeguard for children, not proof of age: purchases, account settings and account deletion require the parent's signed-in account.
2.13. Please do not send children's personal information through support messages or other general fields. If it is sent by mistake, we may delete it.
3. Information We Collect
3.1. To operate Kidzplora, we process limited information relating to adult account holders and their purchases. This may include:
- Account information, such as email addresses and authentication details.
- Purchase records, transaction references and purchased-product entitlements.
- Customer service communications.
- Essential technical and security information needed to operate and protect the platform.
3.2. We do not require customers to provide their children's personal information to purchase or access Kidzplora adventures.
3.3. In more detail:
| Category | Information | Purpose |
|---|---|---|
| Parent account | Email address, account identifier, sign-in records and the versions of the Terms and Privacy Policy accepted at sign-up | Registration, sign-in and account security |
| Orders and billing | Purchased products, amounts, dates, billing details (name, email address, country and, where the checkout asks for them, street address, city, region and postcode), order confirmation information and payment references | Processing purchases, delivery, refunds and financial records |
| Legal acknowledgements | Records of accepted Terms and checkout acknowledgements, including the immediate-access acknowledgement | Compliance and dispute resolution |
| Adventure bookmark | For each adventure on the account: missions finished, the last screen reached in an unfinished mission and whether a mission's real-world part was tried or saved for later | Letting the family carry on where it stopped and showing progress on the parent dashboard |
| Playtime settings | The account's daily playtime limit and rest period, and the total minutes played on the account each day | The parent's playtime limit |
| Technical information | IP address, browser information, session identifiers, security events and error logs | Technical operation, security and fraud prevention |
| Customer support | Email address, order details and information provided in an enquiry | Responding to support and privacy requests |
| Newsletter | Email address, optional first name, where the subscription started, consent wording and version, confirmation and unsubscribe records | Sending the optional newsletter and keeping a record of consent (see section 5) |
3.4. Authentication is handled through secure authentication services. Sign-in uses a six-digit code sent by email, and we do not store readable passwords in the Kidzplora application database.
3.5. We do not store customers' complete card numbers or card security codes. Payment details are entered with the payment provider, not with Kidzplora.
3.6. Payment providers may independently collect information needed for fraud prevention, transaction authorisation and legal compliance.
4. How We Use Information
4.1. We use personal information where necessary to:
- Create and manage adult customer accounts.
- Provide access to purchased products.
- Manage purchases and transaction records.
- Respond to customer enquiries.
- Maintain website functionality and security.
- Prevent fraud and misuse.
- Meet applicable legal, accounting and regulatory requirements.
4.2. We do not use children's gameplay to build individual learning histories, behavioural profiles or advertising audiences.
4.3. Where EU or UK GDPR or similar laws apply, our legal bases are:
| Purpose | Legal basis |
|---|---|
| Create and maintain parent accounts, provide purchased adventures, keep the adventure bookmark and playtime settings, and process orders | Performance of a contract |
| Send the optional newsletter | Consent, which can be withdrawn at any time |
| Protect accounts, detect fraud and misuse and keep the Service secure | Legitimate interests |
| Respond to customer enquiries | Performance of a contract or legitimate interests |
| Keep required business, order, tax and accounting records, and records of legal acknowledgements | Legal obligation |
4.4. Our legitimate interests are keeping the Service safe and working, protecting accounts, preventing misuse and answering enquiries. We take account of children's interests when relying on them.
4.5. We will not use personal information for materially new purposes without providing the required notice and obtaining further permission where necessary.
4.6. We do not use automated systems to make clinical, psychological, developmental or educational assessments of anyone. Routine automated functions are used only to authorise purchases, manage access and save the adventure bookmark.
5. Newsletter and Marketing Emails
5.1. Adults may choose to receive the Kidzplora newsletter about new adventures, activity ideas and special offers. It is optional, separate from account and purchase emails, and available to people with or without a Kidzplora account.
5.2. A subscription starts when an adult ticks the boxes agreeing to receive the newsletter and confirming they are 18 or over. We then send one welcome email to that address, with an unsubscribe link. We keep a record of the consent wording and version, the confirmation of being 18 or over, where the subscription started and when it was started or withdrawn, to show that consent was given.
5.3. Subscribers can withdraw consent at any time through the unsubscribe link in every newsletter or, for account holders, in the account settings. After an unsubscribe, we keep the subscription record marked as unsubscribed, with its consent history, and a coded (hashed) form of the address, so that we do not send to it again and can show what consent was given.
5.4. We do not send marketing to children and do not use children's information for marketing.
6. Cookies and Technical Information
6.1. Kidzplora uses essential technologies needed to operate the website securely, maintain authenticated sessions and provide access to purchased digital products.
6.2. We do not use children's mission activity for behavioural profiling or advertising.
6.3. Limited technical information, including information processed through hosting and security systems, may be collected where necessary for the operation and protection of the service.
6.4. Any additional cookies or tracking technologies will be disclosed and managed according to applicable privacy and consent requirements.
6.5. At present we use only essential cookies and browser storage:
| Technology | Purpose |
|---|---|
| Sign-in cookies (Supabase) | Keep the parent signed in and protect the account |
| Display cookie (kz_theme) | Remember whether light or dark colours were chosen on this device |
| Browser storage on the device | The basket, sound and motion settings, and mission screens and activity answers on this device |
6.6. We do not use advertising cookies, advertising pixels, analytics cookies or cross-site tracking. Because only essential technologies are used, there is no cookie banner. If this changes, we will update this Policy and ask for any consent the law requires before the new technology is switched on.
6.7. You can clear cookies and browser storage in your browser settings, although clearing sign-in cookies will sign you out.
7. Third-Party Service Providers
7.1. We use trusted third-party service providers where necessary for services such as hosting, account authentication, transactional emails and payment processing.
7.2. For purchases processed through Paddle, Paddle handles payment-related personal information in accordance with its applicable privacy policy.
7.3. Our providers are:
| Provider | Service |
|---|---|
| Supabase | Account sign-in, database and private file storage |
| Cloudflare | Website hosting, delivery and security |
| Resend | Sign-in codes, account and order emails, and the newsletter |
| Paddle (once Paddle payments are active on our website) | Online reseller and Merchant of Record: payments, tax, receipts and refunds |
7.4. Providers acting on our behalf process information only on our instructions and under appropriate data protection terms where the law requires them.
7.5. We may disclose limited information where legally necessary to comply with a lawful request, prevent fraud, protect users or establish or defend legal claims.
7.6. Relevant business records may be transferred as part of a lawful merger, acquisition or sale, subject to applicable data protection safeguards.
7.7. We do not sell or rent personal information, and we do not share anyone's information for advertising.
8. International Data Transfers
8.1. Kidzplora is operated from the UAE and serves customers internationally.
8.2. Our providers listed in section 7 may process personal information in countries other than your own, including the United States, the European Union and other countries where they operate.
8.3. Where applicable law restricts international transfers, we rely on an appropriate lawful transfer mechanism, such as an adequacy decision or the standard contractual clauses offered in the provider's data processing terms.
8.4. You may contact privacy@kidzplora.com for information about the transfer safeguards that apply.
9. Data Retention
9.1. We retain adult account information for as long as necessary to provide the service and meet applicable legal obligations.
9.2. Purchase and transaction records may be retained for accounting, tax, legal and regulatory purposes.
9.3. Technical and security information is retained only for as long as necessary for its relevant purpose.
9.4. We do not maintain individual children's mission progress histories or personal gameplay records.
9.5. Our retention periods are:
| Information | Retention |
|---|---|
| Parent account | While the account is open, then deleted when the account is deleted |
| Adventure bookmark and playtime settings | While the account is open; a bookmark can be cleared at any time with "Start this adventure again", and all of it is deleted with the account |
| Daily playtime totals | Up to 30 days |
| Financial and tax records | For the applicable statutory period, generally at least seven years after the relevant UAE corporate tax period |
| Checkout acknowledgements and purchase records | For the period needed to show compliance and resolve disputes |
| Newsletter subscription and consent records | While subscribed; after an unsubscribe, the record marked as unsubscribed and a coded (hashed) form of the address, so we never send to it again |
| Customer support enquiries | Normally up to 24 months after resolution, unless longer retention is justified |
| Routine security logs | Up to 30 days, unless longer retention is required |
| Backups | Until overwritten under the provider's backup schedule |
9.6. We may retain limited order, payment or compliance records after account deletion where legally necessary.
10. How We Protect Information
10.1. We use appropriate technical and organisational measures intended to protect personal information against unauthorised access, disclosure, alteration, misuse and loss.
10.2. These measures include encrypted connections, secure sign-in, access controls that keep each account's information private to that account, protected download links and restricted administrator permissions.
10.3. Access to personal information is restricted to authorised persons and providers with a legitimate need for it.
10.4. No electronic system can be guaranteed completely secure.
10.5. If a personal data breach occurs, we will assess the incident and notify affected individuals or relevant authorities where required by law.
10.6. Customers should protect access to their email account and report suspected unauthorised access promptly.
11. Your Privacy Rights
11.1. Depending on your location and applicable data protection laws, you may have rights to access, correct, delete or restrict the use of your personal information, object to certain processing, request data portability or withdraw consent where consent is the legal basis for processing.
11.2. To exercise your privacy rights or ask a question about personal information, please contact us using the contact details provided on our website, including privacy@kidzplora.com.
11.3. You may also have the right to lodge a complaint with the relevant data protection authority.
11.4. We may ask for reasonable information to confirm your identity before acting on a request.
11.5. We will respond within the applicable legal deadlines. Under EU and UK GDPR, this is generally one month, subject to legally permitted extensions.
11.6. Withdrawing consent does not affect processing lawfully carried out before the withdrawal.
12. Account Deletion
12.1. You can delete your account at any time in the account settings. This deletes the account, the adventure bookmarks, the playtime settings and online access to purchases.
12.2. Before you delete your account, you can download your purchased printable books.
12.3. Account deletion does not by itself create a right to a refund.
12.4. Some order and compliance records are kept after deletion where the law requires it, as set out in section 9.
13. Privacy Complaints
13.1. If you have concerns about how information is collected, used, stored or disclosed, please contact privacy@kidzplora.com.
13.2. We will review privacy complaints and take appropriate action in accordance with applicable law.
13.3. Contacting Kidzplora first is encouraged but is not a condition for exercising legal rights or complaining to a data protection authority.
14. Changes to This Policy
14.1. We may update this Policy when laws, technology, service providers or personal information practices change.
14.2. Updated versions will be published with a revised date, and we will notify affected users of material changes where required by law.
14.3. Where new consent is necessary, we will obtain it before the affected processing begins.
15. Contact Information
Legal company name: SYOS by SS FZC
Trading name: Kidzplora
Registered address: Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Trade licence: 4432672.01
Privacy email: privacy@kidzplora.com
Customer support: support@kidzplora.com
Website: https://kidzplora.com
We aim to acknowledge privacy enquiries within two working days and resolve rights requests within applicable legal timeframes.
This Policy should be read alongside our Terms of Use and Digital Purchase Conditions, our Refunds & Digital Purchases Policy and our Accessibility Statement.
Effective date: 22 October 2026
Version: 5.0
© 2026 Kidzplora. All rights reserved.