Privacy Policy

How we protect children and families on PandaPanda Kids

Last Updated: September 27, 2026. This is the same policy shown inside the app (Parent Zone → Privacy Policy).

PandaPanda Kids ("we", "our", "us") is committed to protecting the privacy of children and families who use our application. We comply with all applicable laws including COPPA (Children's Online Privacy Protection Act), GDPR Article 8 (children's consent), and relevant state privacy laws including CalOPPA and CCPA.

1. Operator Information

PandaPanda Kids is the operator of this app. For privacy inquiries contact: privacy@pandapandakids.com. For COPPA-specific requests: coppa@pandapandakids.com.

2. Information We Collect

From parents/guardians: no name or email is required. Payments are processed by Apple; we never see card details. An anonymous account identifier keeps your family's profiles and playlists together.

From child profiles: first name only, age, avatar selection, listening history (songs played, playlists created, favorites). We do not collect photos, location data, contact lists, or any other personal information from children.

3. Children's Privacy (COPPA Compliance)

We design PandaPanda Kids around the Children's Online Privacy Protection Act (COPPA). Specifically:

4. How We Use Information

We use collected information solely to: provide and maintain the music streaming service, manage subscriptions and accounts, personalize age-appropriate song recommendations within the app, and improve app performance and stability.

5. Data We Never Collect or Use

We never collect: precise geolocation, photos or camera data, microphone recordings, contact lists, browsing history, cross-app tracking data, biometric data, or social media identifiers. We never display advertisements of any kind. We never sell, rent, lease, or trade any user data to third parties.

6. Third-Party Services

Payments are processed by Apple, and RevenueCat keeps track of subscription status. Account data is stored with Supabase and music files are served from Cloudflare. We do not integrate advertising networks, analytics SDKs that identify children, or social media plugins.

7. Data Security

All data is encrypted in transit (HTTPS), and our database provider encrypts stored data at rest. Access to user data is limited to the people who need it to run the service. If a data breach affects you, we will notify you as required by law.

8. Data Retention & Deletion

We retain account data only as long as the account is active. Upon account deletion request, all personal data (including child profiles) is permanently deleted immediately. Anonymized, aggregated usage statistics (e.g., "song X was played N times") may be retained for service improvement but contain no personally identifiable information.

9. Parental Rights

As a parent or guardian, you have the right to:

10. International Users (GDPR)

For users in the European Economic Area, UK, or Switzerland: we process data under GDPR Article 6(1)(b) (contract performance) and Article 8 (children's consent). To exercise your rights, contact privacy@pandapandakids.com.

11. Changes to This Policy

We will announce material changes to this privacy policy in the app before they take effect. Continued use of the app after that constitutes acceptance of the updated policy.

12. Contact Us

General inquiries: support@pandapandakids.com

Privacy & COPPA: privacy@pandapandakids.com

Child safety: safety@pandapandakids.com

Data deletion requests: delete@pandapandakids.com