Privacy Policy

1) Who we are

Company name: My Green Keys
Contact: waleedbinkhalid86@gmail.com

2) Summary of key points (plain language)

• Kids’ privacy first: For children under 13, we require parental consent where COPPA requires it and we limit collection to what’s needed for learning.
• GDPR rights: European users can request access, correction, deletion, portability, restriction, objection, and can withdraw consent where applicable.
• Core providers: We use Supabase for data storage/authentication and Vercel for hosting. Future payments may use Stripe or Paddle.
• Account deletion: Parents/guardians can request deletion of a child’s information at any time.

3) Information we collect

A. Information you provide

• Parent/guardian account info: email address and login credentials.
• Child profile info: a display name (or nickname) and learning settings.
• Learning content: typing progress such as lessons completed, speed (WPM), and accuracy.
• Uploads (if enabled): photos or other content submitted for features like eco-action rewards (these may contain personal information depending on the photo).
• Support communications: information you include in emails to us.

B. Information collected automatically

• Device & log data: IP address, browser type, timestamps, pages viewed, and diagnostic events used for security and reliability.
• Cookies / similar technologies: used for essential functions such as authentication, session management, and security. Where non-essential cookies are used (for example, analytics), we will provide appropriate controls.

4) How we use information

• Provide the learning experience and features you request.
• Authenticate users, keep accounts secure, and prevent fraud/abuse.
• Maintain, debug, and improve the service.
• Respond to support requests and parental/GDPR requests.
• If paid plans are enabled, process payments and manage subscriptions through Stripe or Paddle (future).

5) COPPA: Children under 13

My Green Keys is designed for kids, and we take children’s privacy seriously. For users under 13:

• Parental consent: We require verifiable parental consent where COPPA requires it before collecting personal information from a child.
• Parental rights: Parents/guardians can review their child’s personal information, request deletion, and refuse further collection or use.
• Limited collection: We aim to collect only what’s reasonably necessary for the educational purpose.
• No targeted advertising to kids: We do not knowingly serve interest-based advertising to children under 13.

To make a COPPA request, email waleedbinkhalid86@gmail.com.

6) GDPR: European users

Lawful bases

When GDPR applies, we process personal data under one or more lawful bases, such as: performance of a contract (providing the service), legitimate interests (security, fraud prevention, improving reliability), and consent (where required for certain cookies or optional features).

Your rights

• Access, correction, deletion, and portability of your personal data.
• Restriction or objection to certain processing.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local supervisory authority.

To exercise rights, contact waleedbinkhalid86@gmail.com. We may need to verify your identity and authority (especially for parent/child accounts).

7) Sharing and third-party services

We share information only as needed to operate My Green Keys, comply with law, or protect users. Key service providers include:

• Supabase (data storage/authentication): stores account data and learning progress in our database.
• Vercel (hosting): hosts our website and server infrastructure.
• Stripe / Paddle (future payments): if enabled, processes payments and may collect payment identifiers and billing-related metadata.

8) Cookies

We use cookies and similar technologies for essential functionality (like login sessions) and security. If we add optional cookies (such as analytics), we will provide appropriate notices and choices consistent with applicable law.

9) Data retention

We keep personal data only as long as necessary to provide the service and for legitimate business or legal purposes. Parents/guardians can request deletion of child accounts at any time.

10) Account deletion and parental deletion requests

You can request deletion by emailing waleedbinkhalid86@gmail.com. When account deletion tools are available in-app, you may also delete from your account settings. We may verify parental authority to protect children.

11) International transfers

Our providers (such as Supabase and Vercel) may process and store data in the United States and other countries. Where GDPR applies, we rely on appropriate safeguards for cross-border transfers (such as standard contractual clauses or equivalent mechanisms) as provided by the relevant service providers.

12) Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

13) Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you (for example, by posting an update on this page).

14) Related pages

See also our Terms of Service.

Note: This document is provided for general informational purposes and is not legal advice.