4. Legal Basis for Processing (GDPR)

• Consent (Art. 6(1)(a) GDPR): For optional features such as analytics cookies and marketing communications. For children, consent is obtained from a parent or legal guardian where required by law.
• Contractual necessity (Art. 6(1)(b) GDPR): To provide access to the Service, including maintaining your account and storing your stories and progress.
• Legal obligations (Art. 6(1)(c) GDPR): To comply with statutory retention rules and other legal requirements.
• Legitimate interests (Art. 6(1)(f) GDPR): To improve and secure our Service, prevent abuse and fraud, and understand how users interact with our content, provided these interests are not overridden by your fundamental rights and freedoms.

5. How We Use Personal Data

• To provide, operate, and maintain the Service, including personalized story experiences.
• To manage and secure user accounts, including child profiles under a parent or guardian account.
• To analyze usage and improve story quality, features, and user experience.
• To communicate with you about updates, changes, or new features (with your consent where required).
• To monitor, prevent, and address technical issues, misuse, or security incidents.
• To comply with legal obligations and enforce our Terms of Service.
• For internal business analysis, product development, and strategic planning.

6. Cookies and Tracking

We use cookies and similar technologies (such as localStorage and analytics tags) to analyze usage, store preferences, and secure the Service. You may disable cookies via your browser settings or via our cookie banner, although some features may not function properly without essential cookies.

Types of cookies and tracking technologies used:

• Essential Cookies: Required for basic site operation, authentication, and security.
• Functionality Cookies: Remember your preferences (such as language or UI settings).
• Analytics Cookies (only with your consent): Google Analytics is used to understand how users interact with our Service and to improve content and features.
• Local Storage & Sessions: Used to maintain state within the app (for example, story progression or UI preferences) without storing sensitive data in the browser.

7. Children’s Privacy (Under 13 and Under 16)

I Edu Tales is designed to be used by children together with a parent, legal guardian, or responsible adult. We recognize special legal protections for children’s data, including children under 13 years of age. • Accounts and Sign-In: Only a parent or legal guardian is permitted to create an account and sign in using Google or other authentication methods. Children should use the Service through the adult’s account and under adult supervision. • Personal Data from Children: We do not knowingly collect personal data directly from children without verifiable consent from a parent or legal guardian. The usage statistics we store (e.g., total stories, totalActiveMs, lastStoryAt) are associated with the parent/guardian account and are used to understand engagement and improve the Service. • If You Believe We Collected Data from a Child: If you believe that a child under 13 has provided personal data to us directly without appropriate consent, please contact us at info@iedutales.com. We will promptly review the request and delete such data where required by law. Where applicable (for example, in the United States), we aim to comply with children’s privacy laws such as the Children’s Online Privacy Protection Act (COPPA) by limiting direct collection from children and relying on parent or guardian accounts.

8. International Transfers

We may process and store personal data on servers located in the European Union and other countries. For infrastructure and storage we may use trusted providers such as Google Cloud Platform (GCP) and MongoDB Atlas. If personal data is transferred outside the EU/EEA, we take appropriate safeguards, such as Standard Contractual Clauses or equivalent agreements, to ensure an adequate level of data protection.

9. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, including providing the Service, complying with legal obligations, and resolving disputes. Usage and analytics data may be kept for a longer period in anonymized or aggregated form. You may request deletion of your account and associated data at any time by contacting us at info@iedutales.com.

10. Your Rights under GDPR

• Right of access: Obtain confirmation as to whether we process your personal data and receive a copy of that data.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data (“right to be forgotten”), subject to legal retention obligations.
• Right to restriction: Request that we restrict the processing of your personal data in certain circumstances.
• Right to object: Object to processing based on legitimate interests, including profiling for analytics, at any time.
• Right to data portability: Receive your personal data in a structured, commonly used format and transmit it to another controller where technically feasible.
• Right to withdraw consent: Withdraw your consent at any time where processing is based on consent (for example, analytics cookies or marketing). This will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint: You may lodge a complaint with your local data protection authority. For users in Bavaria, Germany, the competent authority is: Der Bayerische Landesbeauftragte für den Datenschutz (BayLDA).

To exercise these rights, please contact us at: info@iedutales.com. We may need to verify your identity before fulfilling your request, and for children’s data we may require authorization from a parent or legal guardian.

11. Data Sharing

• Service Providers: We share data with carefully selected processors who provide infrastructure, storage, analytics, and other services (for example, hosting providers, email service providers, and analytics providers). These parties are bound by data processing agreements and may not use the data for their own purposes.
• Affiliates: We may share data with affiliated entities controlled by or under common control with I Edu Tales, subject to this Privacy Policy.
• Business Transfers: In connection with a merger, acquisition, asset sale, or reorganization, your data may be transferred to a successor entity subject to appropriate safeguards.
• Legal Requirements and Protection: We may disclose data where necessary to comply with legal obligations, respond to lawful requests from public authorities, or protect the rights, property, or safety of I Edu Tales, our users, or others.
• With Your Consent: We may share data for other purposes only with your explicit consent.

12. External Links

Our Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of such third parties. We encourage you to review the privacy policies of every website or service you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our Service, technology, or legal requirements. When we make material changes, we will post the updated policy on our website and update the “Munich, [month year]” line at the top of this page. Where required by law, we will also notify you by email or through the Service and, if necessary, ask for your consent.

Contact Us

If you have any questions about this Privacy Policy, data protection, or how we handle children’s data, please contact us: Email: info@iedutales.com Website: https://iedutales.com Location: Munich, Germany