Datenschutzerklärung

1. Who we are

This Privacy Policy is issued by ORZUKIDS MCHJ (Orzukids LLC), a limited liability company registered in the Republic of Uzbekistan, with its registered address at Jondor 3rd Lane, 12th Street, Mevazor Neighborhood, Zangiota, Zangiota District, Tashkent Region, Uzbekistan, 111812 ("Orzukids", "we", "us" or "our"). Orzukids is the data controller for the personal data described in this policy.

You can contact us about privacy matters at info@orzukids.org.

2. Scope

This policy applies to:

the website orzukids.org (the "Website"); and
the mobile applications that we develop and publish on the Apple App Store and Google Play (the "Apps"), to the extent that an App does not have its own product-specific privacy policy.

Where an App has its own privacy policy, that policy applies to the App and takes precedence over this document in case of conflict. The privacy policy for HabitKid is available at https://habitkid.app/privacy-policy.html.

3. Information we collect on the Website

The Website is an informational site. We collect very little data through it:

Server logs. Like most websites, our hosting infrastructure automatically records the IP address, browser type, requested pages, referring page and timestamp of each request. We use these logs to keep the Website secure and available. Logs are kept for a limited period and then deleted.
Correspondence. If you email us, we keep your email address, name (if provided) and the content of your message for as long as needed to respond and to keep a record of the conversation.

We do not use advertising cookies or third-party tracking on the Website. Fonts may be loaded from Google Fonts, which means your browser sends a request (including your IP address) to Google's servers when the page loads.

4. Information we collect in our Apps

Depending on the App and the features you use, we may process the following categories of data:

Account data of the parent or guardian who creates the account: email address and, when you sign in with Apple or Google, the identifier and name shared by that provider.
Child profile data entered by the parent: a first name or nickname, an avatar, age range and the tasks, habits and rewards configured in the App. We ask parents not to enter more information than necessary.
Usage and diagnostic data: app version, device type, operating system, crash reports and anonymous usage events that help us understand which features work and fix problems.
Purchase data: subscription status and transaction identifiers provided by Apple or Google. We never receive your full payment card details.

5. How we use information

We use personal data to:

provide, operate and maintain the Website and the Apps;
create and manage accounts, sync data across devices and process subscriptions;
respond to support requests and other enquiries;
monitor, debug and improve performance, stability and usability;
detect and prevent fraud, abuse and security incidents; and
comply with legal obligations.

We do not sell personal data, and we do not use personal data from our Apps for third-party advertising.

6. Legal bases (EEA and UK users)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:

Performance of a contract: to deliver the Apps and services you request.
Legitimate interests: to secure and improve our services and respond to enquiries.
Consent: where required, for example verifiable parental consent for a child's data.
Legal obligation: where processing is required by applicable law.

7. Sharing of information

We share personal data only with service providers that help us run our services, and only to the extent needed:

Apple Inc. and Google LLC for app distribution, sign-in and in-app purchases;
Google Firebase for authentication, database, crash reporting and analytics;
RevenueCat for subscription management; and
hosting and email providers used to operate the Website and support.

We may also disclose data when required by law, to protect our rights or the safety of users, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to the transferred data.

8. Children's privacy

Our Apps are designed to be used by children together with, and under the supervision of, a parent or legal guardian. Accounts are created by adults. We do not knowingly collect personal data directly from children under 13 (or the applicable age of digital consent in your country) without verifiable parental consent.

We follow the principles of the U.S. Children's Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation (GDPR) and comparable laws. Parents can review, update or delete their child's data at any time from within the App or by contacting us. If you believe a child has provided us with personal data without parental consent, please contact us and we will delete it promptly.

9. Data retention

We keep personal data for as long as your account is active or as needed to provide our services. When you delete your account, we delete or anonymise the associated data within 30 days, except where we must keep it longer to comply with legal obligations (for example, transaction records).

10. Security

We use industry-standard technical and organisational measures, including encryption in transit, access controls and reputable cloud infrastructure, to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Your rights

Depending on where you live, you may have the right to:

access the personal data we hold about you or your child;
correct inaccurate data;
delete your data ("right to be forgotten");
restrict or object to certain processing;
receive a copy of your data in a portable format; and
withdraw consent at any time, where processing is based on consent.

To exercise these rights, use the account deletion feature in the App or email us at info@orzukids.org. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

12. International transfers

We are based in Uzbekistan and use service providers located in other countries, including the United States. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses or the recipient's participation in recognised data-transfer frameworks.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date. If changes are material, we will provide additional notice in the affected Apps.

14. Contact

ORZUKIDS MCHJ
Jondor 3rd Lane, 12th Street, Mevazor Neighborhood, Zangiota, Zangiota District, Tashkent Region, Uzbekistan, 111812
info@orzukids.org