Privacy Policy - Pingüi

1. Introduction

Pingüi: Learn Through Stories ("Pingüi", "the App") is operated by Manchay Montoya Keyner Alexis ("we", "us", or "our"), based in Ecuador.

This Privacy Policy applies solely to the use of the Pingüi application and does not apply to any third-party services, websites, or applications that may be accessible through our platform.

By using Pingüi, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your personal data and your privacy.

2. Information We Collect

2.1 Personal Information

When you create an account using Email/Password or sign in using Google Login, we may collect:

2.2 Learning Progress and Usage Data

2.3 Subscriptions and Payments

Subscriptions are processed through Google Play Billing and managed by RevenueCat, a third-party subscription management service. We do not collect or store your credit card or bank information directly. Payment processing is handled securely by Google, and RevenueCat provides us with confirmation of your subscription status to unlock Premium features. RevenueCat may collect anonymized purchase data in accordance with their own privacy policy.

2.4 Locally Cached Data

To improve your experience in areas with limited connectivity, the App may store certain content locally on your device, such as previously read stories, vocabulary, and user preferences. This data remains on your device and is not transmitted to external servers. You can clear this cached data at any time by clearing the App's data in your device settings.

2.5 Account Recovery

If you request a password reset, we will send a one-time verification code (OTP) to your registered email address. These codes are temporary (valid for a limited time), generated securely by our authentication provider (Supabase), and are not stored permanently. We do not share your email address with any third party during this process.

3. Device Permissions

4. Data Security

We take the security of your data very seriously. We implement industrial-standard technical and organizational measures to protect your information:

Encryption: All data transmitted between the App and our servers is encrypted using Secure Socket Layer (SSL/TLS) technology.
Secure Storage: We consolidate user data using Supabase, a secure cloud infrastructure with robust authentication and access control policies.
Regular Audits: We periodically review our data collection and storage practices to ensure compliance with modern security standards.

5. Advertising and Analytics

We use Google AdMob to display advertisements. Depending on your region and choices, AdMob may serve:

Data collected by AdMob is managed according to Google’s Privacy Policy. You can manage your ad preferences within your device settings.

5.1 General Data Protection Regulation (GDPR) - EU Users

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Pingüi aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

Right of Access: You can request a copy of your personal data.
Right to Rectification: You can ask us to correct inaccurate information.
Right to Erasure: You can request the deletion of your data (see Section 6).
Right to Withdraw Consent: You can change your ad preferences or revoke consent at any time.

5.2 California Consumer Privacy Act (CCPA) - California Users

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, and the right to opt-out of the "sale" of your personal information (note: we do not sell your personal information to third parties in the traditional sense).

6. Account and Data Deletion

You have the right to delete your account and all associated data at any time directly within the App:

Open the Pingüi App.
Go to Profile > Settings.
Select the "Delete Account" option.
Select the "Delete All Data" button in the Profile Modal.

Upon confirmation, your profile, learning history, vocabulary, and all associated markers will be permanently removed from our production servers within 24 hours. User-generated content in the community may be anonymized or removed.

7. Children's Privacy

Pingüi is not specifically directed toward children under the age of 13. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take immediate steps to delete such information from our systems.