How we protect children and families on PandaPanda Kids
PandaPanda Kids ("we", "our", "us") is committed to protecting the privacy of children and families who use our application. We comply with all applicable laws including COPPA (Children's Online Privacy Protection Act), GDPR Article 8 (children's consent), and relevant state privacy laws including CalOPPA and CCPA.
PandaPanda Kids is the operator of this app. For privacy inquiries contact: privacy@pandapandakids.com. For COPPA-specific requests: coppa@pandapandakids.com.
From parents/guardians: no name or email is required. Payments are processed by Apple; we never see card details. An anonymous account identifier keeps your family's profiles and playlists together.
From child profiles: first name only, age, avatar selection, listening history (songs played, playlists created, favorites). We do not collect photos, location data, contact lists, or any other personal information from children.
We design PandaPanda Kids around the Children's Online Privacy Protection Act (COPPA). Specifically:
We use collected information solely to: provide and maintain the music streaming service, manage subscriptions and accounts, personalize age-appropriate song recommendations within the app, and improve app performance and stability.
We never collect: precise geolocation, photos or camera data, microphone recordings, contact lists, browsing history, cross-app tracking data, biometric data, or social media identifiers. We never display advertisements of any kind. We never sell, rent, lease, or trade any user data to third parties.
Payments are processed by Apple, and RevenueCat keeps track of subscription status. Account data is stored with Supabase and music files are served from Cloudflare. We do not integrate advertising networks, analytics SDKs that identify children, or social media plugins.
All data is encrypted in transit (HTTPS), and our database provider encrypts stored data at rest. Access to user data is limited to the people who need it to run the service. If a data breach affects you, we will notify you as required by law.
We retain account data only as long as the account is active. Upon account deletion request, all personal data (including child profiles) is permanently deleted immediately. Anonymized, aggregated usage statistics (e.g., "song X was played N times") may be retained for service improvement but contain no personally identifiable information.
As a parent or guardian, you have the right to:
For users in the European Economic Area, UK, or Switzerland: we process data under GDPR Article 6(1)(b) (contract performance) and Article 8 (children's consent). To exercise your rights, contact privacy@pandapandakids.com.
We will announce material changes to this privacy policy in the app before they take effect. Continued use of the app after that constitutes acceptance of the updated policy.
General inquiries: support@pandapandakids.com
Privacy & COPPA: privacy@pandapandakids.com
Child safety: safety@pandapandakids.com
Data deletion requests: delete@pandapandakids.com