← Parauling

Privacy policy

In three lines. The account is yours: email address and password. For each profile we only keep the name or nickname you give it, an avatar, the age range if you give it, and the game progress; no date of birth and nothing else. Inside the app there are no ads, no third-party analytics and no trackers of any kind, and you can delete a profile or the whole account from the adults’ area whenever you want.

1. Who is the controller

2. One principle: the minimum

Parauling is an app for families. We only collect what is needed for it to work. Inside the app there are no ads, no third-party analytics and no trackers of any kind: no advertising identifier, no tracking technology, and no third-party library except the Google Play ones for buying and for rating the app in the Android app. The game data (what has been answered) is used so that the game adapts to whoever plays. The only third parties who see any data are the ones who charge for Premium (Stripe, Google Play or the App Store, depending on where it is taken out), and only the data of the adult who takes it out.

3. What data we process

From the account (the adult who creates it): - Email address and password (stored with a one-way hash: we cannot read it). - Preferred language. - The date and version of the terms that have been accepted and, if you have ticked the news box, the date you did so. - How the app is used and how you found out about us. - Technical security data: failed login attempts and temporary lockouts, open sessions (one identifier per device) and the date of last use. If you ask to change your email address, the new address until you confirm it.

From the profiles (whoever plays; usually the children): - The name or nickname that the adult gives them, the chosen avatar and, if the adult gives it, the age range (for example, “6 to 8”). Nothing else: no date of birth or any other data. - The game progress: which words they have worked on, how the answers went (right or wrong, which word they chose, in which exercise, how long they took, how many times they listened to the word), the album cards and the ducklings. This data is the heart of the app: it is what makes each word come back when it is due.

The voice, in the “Say it” exercise: - In this exercise you have to say the word out loud. If the option is switched on, the app records a few seconds so that the player can hear themselves and compare with the model. - That recording never leaves the device. It is not sent to any server, we do not listen to it, we do not keep it, and we do not keep anything derived from it: neither the voice nor any measurement taken from it. It lives only in the browser’s memory while the word lasts, and it is deleted when moving on to the next word, when closing the app or when switching to another window. The recording is not used to identify anyone and is not compared with any other voice. - Permission to use the microphone is asked of the adult: in the store apps, when creating the account or logging in; in the browser, the browser asks for it. You can say no and the game carries on just the same, without recording. If “Not now” is chosen when logging in with the account, it only applies to that device, and it is stored on the device. In the adults’ area, recording can be switched off for each profile (“Record the voice to compare it”).

From payment (Premium plan only): - If Premium is taken out on our website, payment is handled by Stripe. We only keep the customer and subscription identifiers that Stripe gives us, the status of the plan and the dates. We do not see or keep card numbers. - If you withdraw from the contract with the button in the adults’ area, the name you write and the date and time, as proof of the withdrawal. - If Premium is taken out in the Android app, the purchase is made and charged by Google Play with the Google account of whoever buys. From Google we only receive the purchase identifier, the status of the subscription, the amount and the dates, and we send Google a code that does not say who the family is, so that the purchase is linked to the account. - If it is taken out in the iPhone or iPad app, the purchase is made and charged by Apple with the Apple account of whoever buys. From Apple we only receive the purchase identifier, the product, the price, the currency, the store country and the dates; no name, email address or payment data. We send it the same code as to Google.

Technical: - A session cookie and the browser’s local storage (see the cookie policy); in the store apps, instead of the cookie, the session is stored in the app’s private storage. And the usual web server logs (IP address, date, page requested), which are kept for 14 days for security. - Our system does not store IP addresses: to curb abuse, it counts requests with an encrypted fingerprint of the address, which is deleted after two hours.

4. Minors and profiles

Parauling is designed for children to play, but the account is always created and managed by an adult (mother, father or legal guardian, or someone with their authorisation), who is the one who accepts the terms, who names the profiles and who can change or delete them at any time from the adults’ area.

A child’s name and their progress in the game are their own data, not the account holder’s. We process them on two bases: the name and the avatar, on the basis of the contract with the account holder (without profiles there is no service); the progress, on the basis of our legitimate interest in each profile learning at its own pace, which is the reason the app exists, and in informing the account holder about it (section 5); this processing does not involve any decision about the minor. We do not base any processing on the consent of the minor or of the parents. As a safeguard, when creating a profile for a minor, the account holder confirms that they are their parent or guardian, or have the authorisation of the parent or guardian, and that, if parental responsibility is shared, they act with the agreement of the other parent. We do not ask the minor for any data or for consent: inside the game there is no form, no chat and no free text field beyond the game answers (writing the word), except the testers’ button (section 5). We do not use profile data for advertising; outside the game it only appears in the two follow-up emails, if you have given your consent (section 5), and we do not give it to anyone. The voice recording from the “Say it” exercise never reaches us and we do not process it: it stays on the device, deletes itself and can be switched off from the adults’ area.

5. What we use it for, and on what legal basis

Data Purpose Legal basis
Account email address, password and language Creating and managing the account, logging in, recovering the password Performance of the contract (art. 6.1.b GDPR)
Name or nickname and avatar of each profile Telling who is playing within the account Performance of the contract with the account holder, with their authorisation as parent or guardian (art. 7 of the Spanish Data Protection Act, LOPDGDD)
Age range of each profile, if the adult gives it Knowing which ages we make Parauling for (internal statistics); it changes nothing in the game The adult’s consent (art. 6.1.a GDPR); it is withdrawn by leaving it blank in the profile’s settings
Progress of each profile: words, right and wrong answers, times, listens, cards Making each word come back when it is due: the personalisation of learning, which is the service itself Legitimate interest (art. 6.1.f). Safeguard: the confirmation by whoever creates the profile (section 4)
Stripe, Google Play or App Store identifiers, plan status and dates Managing Premium: sign-up, renewal, cancellation, refund, invoices Performance of the contract and legal invoicing obligations (art. 6.1.b and 6.1.c)
Account email address Service emails: address confirmation, password recovery, change of address, welcome, advance renewal notice, receipts, changes to these texts Performance of the contract (art. 6.1.b)
Account email address, the profiles’ names and how they have played (days, cards, ducklings), and whether the adults’ area has been visited Two follow-up emails in the first month, once each: one if there has been no play for a few days and another on how the first ten days went. Only if you have ticked the news box. They do not mention Premium or any price Consent (art. 6.1.a), the one given with the news box. You can withdraw it from the adults’ area or from the email itself
Account email address, only if you have ticked the box News about Parauling (what is new, the Premium plan, a discount at the end of the trial period) Your consent (art. 6.1.a GDPR and art. 21.1 of the Spanish Information Society Services Act, LSSI); you can withdraw it whenever you want
Login attempts, sessions, encrypted fingerprint of IP addresses, server logs, backups Security of the service Legitimate interest (art. 6.1.f)
How the app is used and how you found out about us Understanding how the app is used and improving it Legitimate interest (art. 6.1.f)
Only in the accounts of the tester group: what is written using the “Tell us” button, with the screen and the question they were on, the device model and the app version Improving the app with the testers’ observations Legitimate interest (art. 6.1.f)
Aggregate counts: how many families, how many rounds; and, on the website and at the app’s entrance, how many visits and clicks each day, with the browser language, the referring website and the code of the arrival link (without any cookie, identifier or IP address) Internal usage statistics and website measurement Legitimate interest (art. 6.1.f)

News and communications. Only if you tick the “I want Parauling news” box (when signing up or in the adults’ area) do we send you emails from time to time about Parauling itself: what is new, the Premium plan, a discount at the end of the trial period and, in the first month, the two follow-up emails in the table above. You can stop receiving them whenever you want, from the adults’ area or by writing to support@parauling.com. Everyone receives the service emails (password, renewal, receipts, changes to these texts), because they are needed for the service to work. We do not send third-party advertising or give the data to anyone for advertising purposes.

6. How long we keep it

7. Who has access

We do not sell or give data to anyone. Only the providers we need to provide the service have access:

The emails you write to us at support@parauling.com arrive in a Gmail (Google) mailbox, which may process them outside the European Union. Apart from that and from Stripe, Google and Apple, the data is processed within the European Union.

If Parauling passed to another company that continued the service (terms, section 12), the data would pass to that company, which would become the new controller. We would tell you by email beforehand, and you could delete the account before the change.

8. Your rights

You can request access, rectification, erasure, restriction, portability and objection by writing to support@parauling.com from the account’s address (or, if that is not possible, by proving your identity). We will reply within one month at most. You can withdraw your consent to the news at any time (adults’ area or by writing to support@), object to the processing based on legitimate interest and lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es). Deleting the account from the app is the quickest way to exercise the right to erasure; if you want a copy of your profiles’ data, ask for it and we will send it to you in a structured, commonly used and machine-readable format.

9. Security

Connections are encrypted (HTTPS), passwords are stored with a hash, sensitive account actions ask for the password again, and backups are kept in a space that cannot be reached from the web. If there were ever a security incident that affected you, we would tell you and notify the authority as the law requires.

10. Changes

If we change this policy significantly, we will announce it inside the app before it applies and, if the change affects you negatively, by email as well. The version in force is always the one published at parauling.com/en/privacy, with its date.

Version “2026-10-30”.

Legal notice · Terms of use and subscription · Privacy policy · Cookie policy · Delete your account · Català · Castellano · Français