Farsi Kids Privacy Policy
Farsi Kids stores recordings, child nicknames, avatars and practice progress on your device or browser. Recordings do not leave automatically; a grown-up can share or export them. There are no child accounts or ads. Purchase providers process payment and subscription data, and signed web access tokens last up to 7 days.
Last updated: 2026-11-04
Updated 3 November 2026. Controller: Shahar Frish, Israel, shaharfrish6@gmail.com.
What data is processed, and where?
| Data and location | Purpose and lawful basis | Retention |
|---|---|---|
| Recordings, local child nickname/avatar and practice progress: on-device only. Recordings never leave the device automatically or reach our server. A grown-up can explicitly share an answer or export family voices to a destination they choose. | Provide recording, playback and practice features: performance of the family licence contract. Microphone access requires device permission after a parental gate. | Until deleted or device/browser storage is cleared. Temporary audio may be removed by the OS. No server backup. |
| Web licence key, random install ID and activation ID: stored in the browser and sent through our server to Lemon Squeezy, the payment provider. IP address: processed by our server for rate limiting; not forwarded as a licence field. | Activate devices, check access and prevent abuse: contract and legitimate interests in protecting the service. | Browser key and activation remain until storage is cleared or invalidated; signed access tokens last up to 7 days. Server IP rate-limit entries expire after 1 minute of inactivity; hashed failed checks after 10 minutes (in memory, cleaned on subsequent requests). |
| Web buyer email, order and payment details: processed at checkout by the merchant of record named there. Our licence endpoint receives no card details. | Payment and order support: contract; required accounting records: legal obligation. | Provider records follow its policy and applicable legal requirements. Support correspondence is kept as needed to resolve the request and meet legal obligations. |
| App Store purchases: Apple and RevenueCat process purchase history, app user identifiers and subscription status. RevenueCat starts after a grown-up opens the gated purchase area, or at launch when the last-known subscription cached on this device is active, to refresh access. | App Functionality + Analytics, as RevenueCat requires for purchase history. Contract for entitlements; legitimate interests for purchase analytics and service reliability. | Apple and RevenueCat retain purchase records under their policies and applicable legal requirements; contact us for deletion assistance. We do not promise a provider deletion period we cannot control. |
| Website and API requests: IP and request metadata may be processed by our hosting provider. | Deliver pages and secure the service: legitimate interests. | Hosting retention depends on provider configuration; contact us for current details. |
How is children’s data handled?
No child accounts, no ads, no third-party analytics or tracking of children's learning, recordings or browsing. RevenueCat purchase analytics is the limited purchase-processing exception described above. We do not upload or analyse voices. Purchases, outside links and sharing sit behind a parental gate. The site uses system fonts and loads no third-party resources.
What controls and rights do families have?
In For grown-ups, pass the parent check and choose Delete all recordings to delete saved voices and conversation keepsakes. Conversations also have individual deletion controls. Clear app/browser storage to remove other local data. We cannot delete copies you chose to send elsewhere.
Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. Withdraw device microphone permission in Settings at any time; this does not affect earlier lawful processing. Email shaharfrish6@gmail.com with your request and enough purchase information to locate the record; do not send child recordings or card details. We may need to verify your authority and will respond within applicable legal deadlines. We cannot access local-only data remotely.
You may complain to the Israel Privacy Protection Authority, or your local data protection authority (including your EEA supervisory authority where GDPR applies). See Israel Privacy Protection Authority.
Which providers process data internationally?
Providers may process data outside your country. Applicable transfer safeguards and retention details are described in their policies: Apple, RevenueCat, Lemon Squeezy and Vercel. Contact us for questions about safeguards or this policy.
What else should parents know?
Are recordings uploaded automatically?
Recordings never leave the device automatically or reach our server.
How can I delete recordings?
In For grown-ups, pass the parent check and choose Delete all recordings to delete saved voices and conversation keepsakes.
Can you delete shared copies?
We cannot delete copies you chose to send elsewhere.