Kipibo Privacy Policy
Who is responsible
Nexura Systems SRL (IDNO 1026023119089), Chișinău, Republic of Moldova. Email for data questions: [email protected].
This policy covers the kipibo.com website, the Kipibo game and the parent area. We follow Law No. 195/2024 of the Republic of Moldova on personal data protection and, for users in the European Union, the EU General Data Protection Regulation (GDPR).
In short
The game works without sign-up: until a tablet is linked to the parent area, progress stays only in that tablet’s browser and never reaches us.
We do not keep a child’s name, photos, age, email, location or voice. The game and the website have no ads, no chat, no advertising or analytics cookies and no third-party counters. We do not sell data or use it for advertising or profiling.
The parent area and purchases are for adults only (18+). The child does not sign up and does not buy anything.
What data we process
Parent: email address; password (stored only as a secure hash); when signing in with Google — the profile data Google provides (email, name), kept by the sign-in service; in our own tables we copy only the parent–children link; records of consent to this policy (version and time).
Child (only if a tablet is linked to the parent area): a picture nickname out of 6 options and the robot’s accent colour chosen in the game; difficulty level; task results (done alone, with a hint, postponed), secrets found, sparkles, parts worn; play time per day; game settings (language, volume, subtitles, daily limit).
Tablet: an anonymous technical sign-in ID created only when a linking code is entered; records of failed code attempts (to prevent guessing).
Purchase: from Paddle we receive the order number, the buyer’s email, country, amount and payment or refund status. Card details never reach us.
Website: the server that delivers the pages records the IP address, time, page address and browser type in a log.
Why
To run the account and sign-in; to save the child’s progress and move it between devices; to show the parent a report (what the child learned, how long they played) and let them change settings; to unlock the full version after purchase and handle refund requests; to protect accounts and the website (one-time codes, attempt limits, server logs).
Legal basis
Consent of the parent or legal guardian — for processing the child’s and the account’s data (GDPR Art. 6(1)(a) and Art. 8; the corresponding provisions of Law 195/2024). Performance of the agreement for using the parent area and of the purchase contract — to run the account and give access to the full version (GDPR Art. 6(1)(b)). Legitimate interest — server logs for security (GDPR Art. 6(1)(f)). [to be confirmed by a lawyer]
Consent can be withdrawn at any time: unlink tablets or delete the account.
Who else processes data
The database, account sign-in, website and game run on our own server in Europe. We do not use third-party cloud services to store data.
Cloudflare, Inc. protects the website and speeds up loading: requests to kipibo.com pass through Cloudflare (IP address, page address, browser type). Cloudflare sets no cookies on the site. Transfers to the US rely on the EU standard contractual clauses and the EU–US Data Privacy Framework [to be confirmed by a lawyer].
Paddle.com Market Limited (United Kingdom) is the merchant of record for the full version: it takes payment, issues receipts, handles taxes and processes refunds. Paddle processes buyer data under its own privacy policy: paddle.com/legal/privacy.
Brevo SAS (France) sends the parent area’s emails (email confirmation, password reset): it receives the parent’s email address and the message text.
Emails to [email protected] are forwarded by Cloudflare Email Routing to the company’s mailbox at Google (Gmail).
Google — only if you choose “Sign in with Google”.
How long we keep data
Account and child data — for as long as the account exists. After the account is deleted, the data is removed from the database immediately; server backups may keep it for up to 30 days.
Linking codes are valid for 15 minutes and single-use; failed-attempt records are deleted after a successful link. Server logs — up to 14 days. Purchase records — as long as required by the accounting and tax laws of the Republic of Moldova [to be confirmed by a lawyer].
Your rights
Get a copy of your data — “Download my data” under “Account” (a portable JSON file). Correct data — the child’s settings in the parent area. Delete data — “Delete account” (removes the account, all children, progress, play time and tablet links). To restrict or object to processing, or withdraw consent, write to [email protected]; we reply within 30 days.
Complaints to a supervisory authority: in Moldova — the National Center for Personal Data Protection (datepersonale.md); in the EU — the authority of your country, in Romania — ANSPDCP (dataprotection.ro).
Security
Connections are encrypted (HTTPS). Access to data is restricted at the database level: a parent sees only their own children, a tablet only the linked child. Linking codes are random and single-use; after 5 wrong attempts within an hour, entry is blocked.
Changes
The policy has a version (date). If we change it, the parent area will ask you to confirm consent to the new version.