Privacy Policy

NGMI OÜ is the data controller for personal data processed through the app. You can reach us at hello@kuutar.app.

Account data: your email address and, if you use Google sign-in, basic profile information — handled by our authentication provider (Supabase) — used to identify your account.

Family data you enter: children’s first names or nicknames, the routines you set up, and progress such as completed steps, stars, and streaks.

Billing data: your purchase status and the identifiers Stripe needs to process your payment. Card details are handled by Stripe — we never see or store your full card number.

Usage data: with your consent where required (EU/EEA visitors see a banner), Google Analytics measures anonymous-by-default usage to help us improve the app.

To provide the app and your account (performance of our contract with you).

To process payments and manage purchases (contract, and our legitimate interest in running the business).

To keep the service secure and prevent abuse (legitimate interest).

To measure and improve usage through analytics (your consent, where required).

We use only what is needed to run the app, plus optional Google Analytics. EU/EEA visitors are asked for consent before any analytics cookies or identifiers are set; until you accept, analytics runs in a cookieless, default-denied mode. You can decline, and your choice is remembered.

We do not sell your data. We share it only with the processors that run the service on our behalf: Supabase (authentication and database hosting), Google (Google sign-in), Stripe (payments), and Google Analytics (usage). Each is bound to handle data on our instructions.

Accounts are created and controlled by an adult. Children do not create accounts or provide data directly. We ask you to enter only a first name or nickname for each child and no more than the app needs. We do not use children’s data for advertising or profiling.

Data is hosted on EU-based infrastructure (Supabase, EU region). Some processors (e.g. Stripe, Google) may process data outside the EU/EEA under appropriate safeguards such as the EU Standard Contractual Clauses.

We keep account and family data while your account is active, and delete or anonymise it within a reasonable period after you close your account or ask us to, except where we must retain limited records (for example, billing records) to meet legal obligations.

Under the GDPR you can request access to your data, correction, deletion, a copy (portability), restriction, or object to certain processing, and you can withdraw analytics consent at any time. To exercise these rights, contact us.

You also have the right to lodge a complaint with your local data-protection authority — in Estonia, the Andmekaitse Inspektsioon.

We protect your data with measures such as encrypted connections, row-level access controls so each account sees only its own data, and a PIN-gated parent area. No system is perfectly secure, but we take reasonable steps to keep your data safe.

We may update this policy as the app evolves. We will post the new version here and update the date above; material changes will be brought to your attention.

For any privacy question or request, contact NGMI OÜ at hello@kuutar.app.