Samio Learning Privacy Policy

We design the App so children can enjoy it without sharing personal information. The App does not request a child's full name, email, phone number, exact age, or location. We collect only the minimal information needed to support gameplay: - Nickname and age range - Entered by a parent or trusted adult to create learner profiles. Nicknames stay on the device and are not transmitted to our servers. - Progress data - Stars, streaks, badges, drawing saves, and lesson selections. Stored locally on the device and synced to a parent account only when the adult explicitly opts in. - Device identifiers - A randomly generated, non-resettable identifier stored using secure local storage so the App can keep a session with the Samio Learning content service. The identifier cannot be used to track the child across other apps or services. - Support diagnostics (optional) - If a parent contacts us for help, we may request app logs or screenshots shared voluntarily by the adult to resolve the issue.

We use the data described above to: - Display a learner's in-app progress and saved artwork. - Recommend the next activity based on recent usage. - Deliver lesson content from our secure Samio Learning API. - Keep the App stable, secure, and updated. We do not use the data to build advertising profiles, deliver targeted ads, or sell data to third parties.

The App integrates a small number of third-party services. We configure each service in line with Google Play's Families Policy and require that no personally identifiable information about children is collected. | Service | Purpose | Child-friendly configuration | | --- | --- | --- | | Firebase (Google LLC) | Crash reporting, service availability, optional aggregated analytics | We disable personalized advertising features and demographic reporting. We do not send child names, precise locations, or contact details. | | Expo Notifications (Expo, Inc.) | Optional reminders configured by parents | Notifications are opt-in and may only deliver educational reminders. No advertising or promotional messaging is sent to children. | | Samio Learning API | Provides curriculum content and exercise metadata | Uses a randomly generated device identifier; no child personal data is stored on Samio servers without guardian consent. |

The App contains no third-party advertisements, in-app purchases, or commerce features. There is no behaviorally targeted advertising and no sharing of data for advertising purposes.

Parents and legal guardians have the right to: - Review, update, or delete learner profiles saved in the App. - Request deletion of any information stored on Samio Learning servers by emailing info@samiolearning.com. - Decline optional services (such as notifications or analytics) without affecting access to the core learning experience. We provide adult-only gateways before any setting that influences data sharing or external communication. Children cannot submit support requests or contact information without adult assistance.

- Local gameplay data (profiles, progress, drawings) is stored on the device until an adult removes it from the in-app settings or uninstalls the App. - Content service tokens and anonymous identifiers are rotated automatically to maintain security. - If a guardian requests deletion of remote data, we will complete the request within 30 days and confirm once finished.

We implement industry-standard protections, including secure network requests, encrypted storage providers where available, and access controls, to safeguard information. No method of transmission or storage is completely secure, so we continually review and improve our safeguards.

Our servers are located in the United States. If you access the App from another region, your information may be transferred to and processed in the United States, where privacy laws may differ. We rely on appropriate safeguards permitted under applicable law for these transfers.

Samio for Schools is our platform for educational institutions. When a school uses Samio for Schools, the school acts as the data controller and Samio Learning acts as the data processor. Data processed for schools: - Teacher accounts — Schools register teachers with their school email address. Teacher emails are used solely for authentication and school administration. - Student data — Students are identified only by anonymized nicknames assigned by their teacher. We do not collect student names, email addresses, or other personally identifiable information. - Class groups — Teachers can create class groups and assign students. Class rosters contain only nicknames. - Learning progress — Exercise completion, scores, and skill progression data is collected to provide teachers with classroom analytics. Schools may request a full export or deletion of all their data at any time by contacting info@samiolearning.com. Deletion requests are completed within 30 days. For more details on how we process data on behalf of schools, please see our Data Processing Agreement at samiolearning.com/dpa.

We may update this Privacy Policy to reflect new features or legal requirements. If the changes are material, we will notify parents or guardians through the App or via email (when provided) before the new policy takes effect.

For privacy questions or to exercise your rights, email info@samiolearning.com or write to: ``` Samio Learning Attn: Privacy Team Willem de Merodestraat 91 1382TC Netherlands ``` Please include the learner nickname or device name (not the child's real name) so we can locate the relevant data.