Ten dokument prawny jest dostępny wyłącznie w języku angielskim. Wiążąca jest wersja angielska.

This page adds information for families in the European Union, the European Economic Area and the United Kingdom under the General Data Protection Regulation (GDPR) and the UK GDPR. Please read it together with our Privacy Policy. It describes what we do; it is not a statement that a regulator or lawyer has reviewed our practices.

1. Controller

[CONTROLLER LEGAL NAME], [POSTAL ADDRESS], is the controller. Contact: privacy@heyscribblie.com. EU/UK representative, where required: [EU/UK REPRESENTATIVE, IF REQUIRED].

2. What we process and why (legal bases)

Parent account details and providing the Service to you: performance of our contract with you (Article 6(1)(b)).
Your child's information (first name, age, confirmed facts, drawings, redacted conversation text, friend voice clips, transient voice audio): consent given by the parent or guardian in the app (Articles 6(1)(a) and 8). You can withdraw consent at any time by deleting the account.
Pseudonymous diagnostics and technical logs to keep the Service secure and working: our legitimate interests (Article 6(1)(f)).
Website analytics (Google Analytics): your consent through the cookie banner, which you can withdraw at any time.
Records we must keep by law: legal obligation (Article 6(1)(c)).

3. Your rights

You have the right to access, rectify and erase your data and your child's data, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting processing before withdrawal. Delete everything in the app (Profile > Delete account) or email privacy@heyscribblie.com. We do not make decisions that produce legal or similarly significant effects based solely on automated processing.

4. International transfers

Our processors (Google Cloud, Firebase and Vertex AI) may process data outside the EEA and UK. Where they do, we rely on the safeguards in Google Cloud's data processing terms, such as the European Commission's Standard Contractual Clauses and the UK addendum.

5. Retention

Data is kept until you delete it or the account. After deletion, backup copies remain for up to 7 days and technical logs for up to 30 days. Your child's voice audio is deleted right after transcription.

6. Complaints

You have the right to complain to the data protection authority in the country where you live or work, or where you think a breach occurred. We would appreciate the chance to help first, at the address above.