Privacy Policy

Effective Date: 10 June 2025

Stimul8 EdTech Limited ("Stimul8", "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our services through the Stimul8 app, website, and related platforms.

If you have questions or concerns, please contact us at info@stimul8.app.

1. Data We Collect

We may collect the following types of information:

• Account Information: Name, email address, username, password.
• Payment Information: Credit/debit card details (processed via secure third-party providers like Stripe).
• Usage Data: Information about how you use the app (e.g., completed tasks, preferences, device type).
• Child Information: Data provided by parents about their child(ren) (e.g., name, age) to enable personalized app features.
• Cookies & Analytics: Data about your interactions with our website, gathered via cookies or analytics tools, including Google Tag Manager, Meta Pixel, and TikTok Pixel.
• Health & Fitness Data:
  • Step Count: With your explicit consent, we access step count data from Apple HealthKit to enable activity-based tasks and rewards.
• Educational Progress Data:
  • Duolingo XP: Upon your permission, we retrieve Duolingo experience points (XP) to facilitate language learning tasks and associated rewards.
• Profile Photo (Avatar):
  • Users can upload a profile photo (avatar) for their account.
  • The uploaded avatar is stored securely on our servers.
  • The avatar is used exclusively for display within the user's profile and family profile pages.

2. How We Use Your Data

We use your information for:

• Creating and managing user accounts.
• Processing payments and providing rewards.
• Personalizing user experience, including gamification elements.
• Communicating with users, including service updates and marketing.
• Improving our app via analytics and feedback.
• Ensuring compliance with legal obligations.
• Personalized Tasks and Rewards: Step count and Duolingo XP data are utilized to create personalized tasks and to award points upon task completion.
• Progress Monitoring: This data helps in tracking user progress and enhancing the motivational aspects of the app.
• To measure app installs, session performance, and user engagement trends.
• To attribute installs to advertisement campaigns for internal analytics — not to serve personalized ads.

3. Sharing Your Data

We may share your data with:

• Service Providers: For payment processing, hosting, and analytics (e.g., Stripe, Google Cloud, HubSpot).
• Gift Card Partners: We collaborate with GiftBit to provide third-party rewards and incentives.
• Marketing & Tracking: Google Tag Manager, Meta Pixel, and TikTok Pixel are used to collect and share data for tracking and analytics purposes.
• Legal Authorities: When required to comply with applicable laws or respond to legal requests.
• Third-Party Integrations: We do not share your health or educational data with third parties. Data accessed from Apple HealthKit and Duolingo is used solely within the Stimul8 app to provide personalized experiences.

We never sell your personal data to third parties.

4. Third-Party SDKs & Integrations

We use third-party SDKs to improve functionality and analytics within the app. Notably:

• Adjust SDK: Used to measure app performance, user acquisition, and engagement. You can review Adjust's privacy practices at: https://help.adjust.com/en/article/submit-privacy-details-to-apple

5. Compliance with COPPA

Stimul8 complies with COPPA in the United States by ensuring that:

• Parental Consent is Required: Parents must provide consent before we collect any personal information from children under 13.
• Limited Data Collection: We only collect necessary data to enable our service and do not collect additional personal data from children.
• Parental Control: Parents can access, delete, or manage their child's data by contacting us at info@stimul8.app.
• No Targeted Advertising: We do not use child data for targeted advertising.

6. User Consent and Control

• Opt-In Access: Access to Apple HealthKit and Duolingo data requires your explicit consent.
• Revocation: You can revoke access at any time through your device settings or within the respective third-party apps.

7. Data Retention

We retain your data only as long as necessary:

• Account Information: Until your account is deleted.
• Payment Information: In line with legal and tax requirements.
• Analytics Data: Aggregated and anonymized where possible.
• Health and Educational Data: Retained only as long as necessary to provide the services and features described. You may request deletion of this data at any time by contacting us at info@stimul8.app.

8. Your Rights

If you are an EU/EEA user, you have rights under the GDPR, including:

• Access: Request a copy of your data.
• Correction: Update incomplete or inaccurate information.
• Erasure: Request deletion of your data.
• Objection: Restrict certain processing activities.

To exercise these rights, email us at info@stimul8.app.

9. Tracking & Advertising Data

• Device Identifiers (IDFA, IDFV): We may collect device identifiers (such as IDFA and IDFV) solely for analytics and attribution purposes through our integration with the Adjust SDK.
• We use Apple's AppTrackingTransparency framework to request your explicit permission before accessing IDFA. If permission is not granted, tracking is disabled, and the IDFA will not be collected.

10. Cookies & Tracking Technologies

Our website and app use cookies to enhance your experience. We also use tracking technologies, including Google Tag Manager, Meta Pixel, and TikTok Pixel, to analyze and improve user engagement.

You can manage or disable cookies in your browser settings. For more information, refer to our Cookie Policy.

11. Security Measures

We implement strict security measures, including:

• Encryption of sensitive data.
• Secure payment gateways.
• Controlled access to personal information.

If you believe your data has been compromised, please contact us immediately at info@stimul8.app.

12. Account Deletion and Data Removal

You may request deletion of your account and data by contacting us at info@stimul8.app. We process account deletion requests within 3 days.

13. Updates to this Policy

We may update this Privacy Policy periodically. The latest version will always be available at stimul8.app/privacy-policy.

We recommend reviewing it periodically to stay informed about our data practices.

For further details, contact info@stimul8.app.