Privacy policy
Last updated: [date]
1. Who is responsible for your data
The data controller is [company name], identified by [tax ID / registration number], with its address at [address]. You can write to us at contacto@yosicuento.com.
2. What data we collect
- Account data (only from the adult who creates the account): name, email address and encrypted password.
- Learning data: completed lessons, answers to exercises, points, badges and streaks.
- Payment data: processed by Stripe. We don't store your card numbers.
- Usage data: only if you accept analytics cookies (see section 7).
We don't ask children for their email address, photos, location or any other contact details.
3. What we use it for
- Providing the service: saving progress and showing it in the parent dashboard.
- Managing the subscription and payments.
- Sending emails about the account (confirmation, password recovery, important changes).
- Improving the platform, with aggregated usage data and only with your consent.
We don't sell personal data or show advertising to children.
4. Children
Yo Sí Cuento is designed for children, but the account is always created by an adult. When signing up, the parent or legal guardian confirms that they are of legal age and authorizes the processing of the child's learning data, under Colombia's Law 1581 of 2012 and, where applicable, the US Children's Online Privacy Protection Act (COPPA). [Describe the method used to verify parental consent.]
The parent or guardian can review or correct the child's data, or ask us to delete it, at any time by writing to contacto@yosicuento.com.
5. Who we share it with
Only with providers that help us deliver the service, under contract:
- Supabase: database hosting and authentication.
- Stripe: payment processing.
- PostHog: usage analytics, only with your consent.
- Sentry: logging of technical errors.
- [Web hosting and email provider.]
Some of these providers are outside your country. [List the countries and the safeguards for the transfer.]
6. Your rights
You can access, update, correct and delete your data, withdraw your authorization and file a complaint with the data protection authority in your country (in Colombia, the Superintendence of Industry and Commerce). Write to us at contacto@yosicuento.com and we will reply within [15 business days] at most.
8. How long we keep it
While the account is active. If you delete it, we erase the data within [30 days], except for what the law requires us to keep (for example, billing records).
9. Changes
If we make an important change to this policy, we will let you know by email before it takes effect.