Privacy

Who is the controller

The Kina Stories app is published by Taco Labs. Privacy questions: [email protected]. We apply LGPD (Brazil), COPPA (when caregivers are in the United States) and GDPR-K (when caregivers are in the EU or EEA).

Initial consent

On first launch, the initial-consent screen explains that the app works without an account and that the notebook stays on this device. The library does not open until you accept. The record stays on the device. This policy is linked from that screen and from Profile.

What stays on the device (Notebook)

The child’s name, favorites, recents, listening progress, preferred language and player settings live in a local Notebook. We do not send that data to create a child account.

What the caregiver sends when signing in

To sync a subscription across devices, the caregiver signs in with Google or email. We process the account identifier, email and plan state (Free, Premium). We do not ask for the child’s date of birth or bedroom photos. No child data is used for an account.

Purchases and the store

Subscriptions go through Google Play. The store handles payment. We receive purchase confirmation, not card numbers.

Children, COPPA and privacy

The listening audience is 11 and under. We do not build a behavioral profile of the child or use their data for advertising. Caregivers in the US may request a review of the caregiver account data via the email above.

Rights (LGPD and GDPR)

The caregiver may request access, correction, portability or deletion of the account. The local Notebook is cleared by uninstalling the app or clearing app data. To delete the cloud account, see the section below or write to [email protected].

How to delete the account

The cloud account (email, identifier and plan state) may be deleted by the caregiver at any time. The child has no account.

• In the app: Ajustes (Settings) → "Delete account". Deleting removes the account right away and is permanent.
• Without the app (lost device, uninstalled), write to [email protected] from the account’s email address, requesting the deletion; we reply confirming within 7 days.
• The deletion removes the account from Supabase Auth, the plan state and the linked subscription. The Google Play subscription isn’t canceled there: manage or cancel the plan on Play.
• Google Play purchase records are kept for the legal retention period (5 years, LGPD and tax rules), unlinked from app usage.
• The local Notebook (child’s name, favorites, recents, listening progress) never leaves the device: it disappears when the app is uninstalled or its data is cleared.

Retention and changes

We keep account data while a subscription is active and for the legal period after it ends. If this policy changes in a material way, we notify you in the app and on this page, with the update date at the top.