Privacy Policy

Pardis is a children's Persian-language learning app operated by Fyffe Ventures LLC, a California limited liability company (“we,” “us,” “our”).

Contact: support@fyffe.ventures · 6606 Whitbourne Drive, San Jose, CA 95120

Because our app is directed to children, we designed it to comply with the U.S. Children's Online Privacy Protection Act (COPPA) and, where applicable, the EU/UK GDPR and the UK Age Appropriate Design Code. This policy describes exactly what we collect, why we collect it, and the controls you have as a parent.

1. The short version

• The app works fully offline, with no account and no data collection. Cloud features are optional and require a parent account plus explicit parental consent.
• We collect the minimum needed: a parent's email, a child's first name or nickname, a chosen buddy character, and learning progress.
• Your child's traced handwriting and written Persian name never leave the device. Neither do voice recordings from the “say it back” practice feature.
• No advertising of any kind.No ad networks, no behavioral advertising, no third-party analytics SDKs. We never sell or share personal information, and we never use children's data for advertising.
• Parents can review and delete a child's data, or the entire account, from inside the app at any time.

2. Information we collect, and why

Parent account information

Children's information

We do not collect from children: precise location, contacts, photos, camera data, biometric identifiers, advertising identifiers, or browsing history. The app has no chat, no social features, and no user-generated content that leaves the device. We do not send marketing notifications to children.

Purchases

Technical and product data

Our usage events carry no account identifier, no device identifier, no child name, and no stored IP address. Event names come from a fixed internal list and the accompanying details are strictly limited.

Each event does include two random, rotating keys so we can count how many distinct devices use the app: one that changes every calendar day, and one that changes every calendar week. The weekly key means activity from a single device can be recognized as belonging to the same device within a given week, but not across weeks. Neither key is tied to an account, a name, or a device identifier, and neither is shared with anyone. IP addresses are used transiently to block abuse of this endpoint and are never written to our records.

3. Who we share information with

We share information only with service providers who process it on our behalf under contracts limiting their use of it to providing our service:

• Supabase — database and authentication hosting.
• RevenueCat— subscription management. Receives your account identifier — the random UUID that identifies your account in our systems, not your name or email — together with store transaction data. It never receives your child's name or, from us, your email address.
• Sentry — crash reporting. Receives crash traces, device metadata, and your account identifier. Reports are scrubbed before they are sent: no names, emails, IP addresses, or child identifiers.
• Apple App Store— payment processing, under Apple's own terms.
• Apple and Google (sign-in only) — if you choose to sign in with Apple or with Google instead of creating a password, that provider authenticates you and passes us your email address and an account identifier. They handle your account with them under their own privacy policies, not ours.

Co-parents. If you invite another parent or guardian to your family using an invite code, that person will be able to see the children in your family, their names, and their learning progress, and will be able to manage that data. Invite codes expire after seven days and can be used once. Only invite people you intend to give this access.

We do notdisclose children's personal information to third parties for advertising or for any independent use of their own, and we do notsell personal information. We may disclose information if required by law, or to protect someone's safety, and will notify parents where we are lawfully able to.

4. Parental consent and your rights (COPPA)

Before any of your child's information is synced to our servers, we show you a consent notice inside the app — behind a grown-ups gate — and record your agreement. You may decline and continue using the app fully offline.

As a parent or guardian, at any time you can:

• Reviewyour child's information in the parent dashboard.
• Deletean individual child's data, all children's data, or your entire account from the parent dashboard. Deletion is permanent. It removes the data from our live systems; residual copies in encrypted backups are purged on our provider's standard rotation schedule of no more than 30 days. If a co-parent is still a member of your family, deleting your own account does not delete the children's data, because the other parent still has an account and access to it — to remove the children's data entirely, delete the children first, or ask the co-parent to delete their account as well.
• Withdraw consentfrom the parent dashboard's Account tab. The app then keeps progress on that device only and stops syncing.
• Contact us at support@fyffe.ventures to exercise any of these rights. We will verify that you are the parent on the account before acting.

Deleting your account does notcancel an active App Store subscription. Cancel that in your device's subscription settings.

We keep personal information only as long as we need it for the purposes above: account and child data until you delete it, and consent records for as long as we are required to be able to demonstrate consent. We never require a child to disclose more information than is reasonably necessary in order to participate in an activity.

5. Security

Data in transit is encrypted with TLS. Database access is restricted by row-level security, so an account can only ever read its own family's records. Premium entitlements are verified on our servers rather than trusted from the device. Authentication tokens are held in the operating system's secure storage.

No system is perfectly secure. If a breach affects your family's personal information, we will notify you as required by law.

6. Families outside the United States

If you are in the EU/EEA or the UK, our legal bases for processing are your consent (syncing a child's data), contract (providing the app and any subscription), and legitimate interests(security and abuse prevention). This app requires parental consent for all children's data regardless of the age threshold in your country.

You have rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to your supervisory authority. Data is processed in the United States, under standard contractual clauses where required.

California residents:we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not sell or share children's information under any circumstances. You may exercise your rights to know, delete, and correct using the in-app controls or by contacting us.

7. Changes to this policy

If we materially change how we handle children's personal information, we will update this policy, raise the in-app consent version, and obtain fresh parental consent before the new practices apply to your child's data.

Questions? support@fyffe.ventures