Privacy Policy
This website itself collects nothing beyond our host's standard request logs: it has no forms, accounts or trackers. The rest of this policy describes the Palabasa app and the Family plan, which are opening to families in stages.
1. Who we are
Palabasa is a Filipino reading app for children, run by Eliric Rivera, Philippines ("we", "us"). We decide how the information described here is used, which makes us the personal information controller.
Our Data Protection Officer is Eliric Rivera. You can reach them, and us, at support@palabasa.com.
2. The short version
- A parent or guardian creates the account. Children never sign up, never type an email and never chat with anyone.
- We keep only what the app needs to work: your email address, and for each child a name or nickname, an age and their reading progress.
- We do not sell data, show ads, use advertising or analytics trackers, or share a child's information with other users.
- You can see your child's progress, correct it, and ask us to delete or export it at any time.
3. What we collect
About you (the parent or guardian)
- Your email address and a password (we store only a scrambled hash of the password, never the password itself).
- When the account was created, when you were last active, and when you last changed your password.
- Messages you send us through the Help page or by email, and our replies.
- If you subscribe: your plan and its status, renewal date and the payment region (Philippines or elsewhere). We never see or store your card or payment details; our payment provider handles them (section 6).
About each child you add
- The name or nickname you choose (a nickname is fine; we recommend one), the child's age, a starting reading level, and display choices (theme, avatar, Tarsi's accessory and frame).
- Reading progress: which lessons and books were opened and finished, time spent, quiz answers and scores, hints used, how often a page was listened to, words learned, rewards and badges earned, and the date of each.
Technical information
- Our servers record IP addresses and basic request details for security and to stop abuse (for example too many sign-in attempts). These logs are kept for up to 30 days.
- To show the right price, we read the country your connection comes from once, when you open the plans page. We keep only "Philippines" or "elsewhere", not your IP address.
- If the app crashes, an error report may be sent to our error-tracking service. Reports are scrubbed: no names, emails, reading data or request contents.
- Cookies and storage on your device: see our Cookie Policy. We use only what the app needs to work.
We do not collect a child's photo, voice, location, contacts, school, or full date of birth. Children cannot record their voice in the app.
4. Why we use it (and our legal basis)
| What we do | Why | Basis |
|---|---|---|
| Run your account and your children's profiles; save and show reading progress | To provide the app you asked for | Contract with you; your consent for your child's data as their parent or guardian |
| Show you your child's progress on the parent page | So you can follow your child's learning | Same |
| Answer your messages; send password-reset and account emails | To support you | Contract; legitimate interest |
| Keep the service secure; stop abuse; fix errors | To protect you, your child and the service | Legitimate interest; legal obligation |
| Process a subscription and its renewals | To provide the paid plan | Contract |
| Keep records the law requires (for example receipts) | Legal duty | Legal obligation |
We use reading data only to run the app and improve our lessons, looking at it in aggregate. We do not build profiles of children for advertising and we do not make automated decisions about a child that have legal or similar effects.
5. Children's privacy
Palabasa is made for children, but the account belongs to a parent or guardian who is at least 18. By adding a child, you confirm that you are that child's parent or legal guardian and that you consent to us processing the child's information as described here.
Inside the child's part of the app there are no ads, no links to other websites, no purchases and no prices. Settings, plans and messages to us are behind a parent check.
6. Who we share it with
We share information only with service providers that run Palabasa for us, under agreements that limit what they may do with it:
| Provider | What it does for us | Data it handles | Where |
|---|---|---|---|
| Neon | Database | Everything in section 3 | Singapore |
| Render | Hosting the app and its server | All requests pass through it | Singapore |
| Cloudflare | Storing lesson pictures and audio; our domain; forwarding email sent to support@palabasa.com | Lesson media holds no personal data; support emails pass through | Worldwide |
| Google (Gmail) | Our support inbox | Messages you send to support | United States and other countries |
| Resend | Sending account and support emails | Your email address and the message | United States |
| Sentry | Error reports (when switched on) | Scrubbed error reports, no personal data | Germany (EU) |
| Lemon Squeezy | Selling and billing the subscription (merchant of record) | Your name, email, billing address and payment details, which they collect directly | United States |
Some of these providers are outside the Philippines, so your information may be processed in the countries listed. Our voice provider (ElevenLabs) receives only lesson text to make the narration, never anything about you or your child.
We may also disclose information if the law requires it, or to protect someone's safety. If the business is ever sold or merged, the information would pass to the new owner under this policy, and we would tell you first.
We never sell personal information.
7. How long we keep it
- While your account is open, we keep your information so the app keeps working.
- If you delete a child's profile, that child's information is deleted.
- If you ask us to close your account, we delete your account and your children's information within 30 days, except what the law requires us to keep (for example payment records, for as long as tax and accounting law requires).
- Accounts with no activity for 12 months are deleted after we email you a warning.
- Backups are overwritten within 30 days.
8. Your rights
Under the Philippine Data Privacy Act of 2012 you have the right to be informed, to access, to correct, to object, to erasure or blocking, to data portability, to file a complaint and to damages. You can act for your child as their parent or guardian.
- See and correct: the parent area shows each child's profile and progress; you can edit a child's name, age and settings there.
- Delete: you can delete a child's profile in the parent area. To delete your whole account, email support@palabasa.com from your account's address.
- Export: email us and we will send you a copy of your and your children's data.
- Withdraw consent: you can stop at any time by deleting the child's profile or your account.
We answer requests within 15 days. If you are not satisfied, you can complain to the National Privacy Commission (privacy.gov.ph).
9. Security
We protect your information with encrypted connections, scrambled passwords, access limited to the people who run Palabasa (with two-factor sign-in for our admin tools), and an audit log of admin actions. No system is perfectly secure; if a breach affects your information, we will tell you and the National Privacy Commission as the law requires.
10. Changes to this policy
If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect, and ask for your consent again where the law requires it. Every version is dated and kept.
11. Contact
Eliric Rivera, Philippines · Data Protection Officer: Eliric Rivera · support@palabasa.com