This Privacy Policy outlines how Heapcoding ("we," "us") collects and processes personal information provided by you or gathered during your use of our mobile application, Kidlytic ("Kidlytic," "the app") (collectively referred to as "Services," "Service"). We process your personal information in accordance with this Privacy Policy and applicable legislation, including but not limited to the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the Data Protection Act No. 502 of May 23, 2018, along with any amendments and supplementary laws.
Heapcoding is the data controller responsible for the personal information collected through our Services. Should you have any questions, comments, or wish to exercise your rights as described in Section 6, please contact us at:
Heapcoding
Email: info@heapcoding.hr
Heapcoding collects your email address to facilitate secure authentication within the app and to keep you informed about updates and features.
When creating a user profile in the app, you may register using your email and password, Apple ID, or Google Login. By doing so, you authorize us to collect and store your email. Additionally, when creating an account, you will be required to:
To ensure secure access to your account, we use Firebase Authentication, which collects your IP address to safeguard against cyberattacks, including "brute-force" attacks. This is done to provide the highest level of security for both you and us.
Purpose of Processing:
Legal Basis:
The processing of your personal information is necessary for the performance of our contract with you, in accordance with GDPR Article 6(1)(b). Additionally, processing required to meet legal obligations is conducted under GDPR Article 6(1)(c).
When you upload a photo to the app, we collect and store it in Firebase Storage. The photo is also shared with Google Gemini.
Purpose of Processing:
Legal Basis:
This processing is based on your consent, as per GDPR Article 6(1)(a), and is further supported by Section 125(2) of the Act on Payments.
To enhance and optimize the app, we utilize Google Firebase ("Firebase") services, including:
Support Inquiries:
When you contact Heapcoding for support, we may access personal information related to your user profile, including your email, profiles, and usage data. This information helps us provide effective support and resolve any issues you may encounter.
Legal Basis:
The processing of your data for support purposes is necessary for the performance of our contract (GDPR Article 6(1)(b)) and aligns with our legitimate interest in supporting your use of our Services (GDPR Article 6(1)(f)).
We do not disclose your personal information to third parties, except as required by law or to public authorities such as law enforcement when investigating potential legal violations.
Your information may be shared with external partners who process it on our behalf. These partners are considered data processors and are bound by our instructions. They process the data solely for fulfilling their contractual obligations to us and are subject to strict confidentiality. All data processors comply with GDPR Article 28.
For subprocessors established in the USA, we ensure necessary safeguards for data transfers under the EU-U.S. Privacy Shield or standard contractual clauses, as per GDPR Articles 45 and 46.
We use Google Analytics, a web analytics service provided by Google, Inc. ("Google"), to analyze how users interact with the app. Google Analytics uses cookies to collect data, which is stored on Google's servers in the United States. IP anonymization is enabled, meaning your IP address is truncated within the European Economic Area before being transmitted to Google.
The app uses Facebook Pixel to log actions performed on your profile. This data helps us improve user experience.
As the data controller, we ensure transparency in processing your information and inform you of your rights. Should you wish to exercise any of these rights, please contact us using the details provided in Section 2.
We implement appropriate technical and organizational security measures to prevent unauthorized access, destruction, loss, alteration, or misuse of your personal information. Only employees and data processors who require access to your personal information to perform their duties have such access, and they are bound by confidentiality obligations.
We reserve the right to modify this Privacy Policy at any time without prior notice. Changes will take effect upon publication in the app. If significant changes are made, we will notify you via email or push notification.
This is Version 1 of our Privacy Policy, dated August 10, 2024.