Privacy Policy
Last updated 4 November 2026
In short
- We show no ads to children and never use children’s data for advertising.
- A child’s progress is shown only to the parent.
- We never sell customer data or share it with anyone for marketing.
- Data on subscriptions bought on our website is stored in the EU. Where we use US services, data transfers follow EU rules.
- Advertising cookies on our website are used only if you allow them.
1. Data controller
BeiZ Oy (Lola Panda)
Business ID 2370475-6
Åkerlundinkatu 8, 33100 Tampere, Finland
Privacy questions: support@lolapanda.com
2. What data we collect
Parent account and subscription. Email address, subscription details and payment history. Card details are handled by the payment provider, and we never see the card number. Subscriptions bought in an app store are paid through Apple or Google.
Child profile. The child’s age, level, the character the child picks, playing times and progress in the app. They are stored on our servers so the parent can follow progress and it carries over between devices. They are not shared with outsiders. We do not ask for the child’s name.
App usage data. For example which parts are played and where errors occur. We use it only to improve the app.
Reading test. The parent’s answers to the test questions and the level calculated from them. Based on the level we show the parent a suitable subscription option. It is a recommendation and does not limit what you can buy. The test does not ask for the child’s name. If you give your email address, we send you the result and related tips.
Website. Essential cookies and, with your permission, analytics and advertising cookies. We also count page visits and button clicks anonymously, without cookies.
Messages and forms. The information you give us when you contact us or apply for a daycare trial or a job.
3. Why we process data
| Purpose | Legal basis |
|---|---|
| Providing the subscription, customer support and billing | Contract |
| Bookkeeping | Law |
| Improving the app and the website | Legitimate interest |
| Newsletters and marketing emails | Consent or customer relationship. You can unsubscribe at any time. |
| Measuring and targeting advertising on the website | Consent (cookie choice) |
4. Services that process data on our behalf
| Purpose | Service | Data location |
|---|---|---|
| App development and error tracking | Firebase (Google) | United States |
| Managing in-app subscriptions | Qonversion | United Kingdom |
| Website purchases and billing | Chargebee | Germany |
| Emails | Mailchimp and Mandrill | United States |
| Website | Vercel | Ireland |
| Forms and reading test data | Supabase | Switzerland |
| Advertising measurement (only with your permission) | Google Analytics, Google Ads, Meta | EU and United States |
| Measuring app downloads | AppsFlyer | Ireland and Belgium |
When a service transfers data outside the EU, the transfer is based on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. Switzerland and the United Kingdom have EU adequacy decisions.
We do not sell data and do not share customers’ names or contact details with others. Our accounting firm receives what bookkeeping requires, but not customers’ names. Only a small number of our own staff can access customer data. We disclose data to authorities only when the law requires it.
5. Children’s data
Our apps are made for children aged 3–8, and the account is always created by a parent. Child profile data is used only to make the app work and to show the parent the child’s progress. The app has no ads, and children’s data is never used for advertising or shared with advertisers. Links leading out of the app and purchases are in the parents’ area, which is protected from children.
6. How long we keep data
- Account and child profiles: as long as the account exists. When you delete the account, the data is deleted within 30 days.
- Bookkeeping records: 6 years by law, financial statements 10 years.
- Reading test answers: 3 months.
- Forms and messages: as long as handling the matter requires, at most 12 months.
- Sign-ups for the English launch notice: until the notice has been sent.
7. Cookies and opting out of advertising measurement
- On our website: you can change or withdraw your choice at any time from the Cookie settings link at the bottom of every page.
- On iPhone and iPad: Settings → Privacy & Security → Tracking.
- On Android: Settings → Google → Ads → Delete advertising ID.
Opting out does not stop us from sending you messages about your subscription.
8. Your rights
You have the right to know what data we hold about you, to ask us to correct or delete it, to restrict its use, to object to processing, to receive your data in a portable format and to withdraw your consent. Send your request to support@lolapanda.com. We reply within one month.
If you believe we process your data unlawfully, you can lodge a complaint with the data protection authority in your country. In Finland it is the Data Protection Ombudsman (tietosuoja.fi).
9. Changes
We update this policy when our services change. We tell customers about significant changes by email.