ShopKid Privacy Policy

In Short

• ShopKid is a game that teaches children aged 6-12 how to manage money using virtual money. There is no real money, no real payments and no in-app purchases in the app.
• The Android version shows only child-appropriate, non-personalized ads; the iOS version has no ads. No ads are shown with a Premium membership.
• The app contains no third-party analytics or tracking tools, and no advertising identifier is used.
• Child accounts can only be created and managed by a parent. We do not collect email, phone number, location, photos or voice from children.
• We do not sell data and do not share it with anyone for advertising purposes.
• Parents can permanently delete a child profile or their whole account at any time inside the app.

Data Controller

ErdoDev ("we") is the data controller for personal data processed in the ShopKid app. Contact: tezcanerdem81@gmail.com · USKUDAR/ISTANBUL

Data We Collect

For the parent account:

• Email address and username (to create the account and sign in).
• Password — stored only in hashed form by the authentication service; we cannot see it.
• If notification permission is granted, the device notification token (push token) — for allowance and debt approval notifications.
• Parent settings (e.g. whether debt approval is required).

Data We Collect for Child Profiles

• A username chosen by the parent. We recommend using a nickname rather than the child's real name.
• 4-digit PIN — stored only in hashed form; nobody can see it.
• In-game choices: character appearance, avatar, the name and type of the virtual pet.
• Game activity: virtual purchases, change calculation results, quiz results, missions, daily streak, level and points, virtual wallet balance.
• Social features: friend connections, virtual debt records with other children, allowance requests sent to the parent. The app has no free-text chat.
• An anonymous session ID created on the device for sign-in (it does not identify the person).

Data We Do Not Collect

• Location, contacts, photos, camera, microphone or health data.
• Advertising identifiers (IDFA/AAID) or cross-device tracking data.
• Real payment or bank information.

Why We Process Data

Legal basis: children's data is processed with the parent's explicit consent; account data is processed to perform the contract (providing the service).

• To run the game: saving progress, the virtual wallet and the pet.
• To show parents their child's virtual spending and learning reports.
• To provide features such as the friends leaderboard and parent-approved virtual debts.
• Account security (e.g. temporarily locking sign-in after repeated wrong PIN attempts).

Who Can See It

• Parent: sees all game data of their own children.
• Friends: see only the child's username, avatar and weekly leaderboard totals; they cannot see individual purchases.
• Other users: usernames can be searched to add friends; parent information (email, etc.) is never shown to any user.
• Our service provider Supabase (database and authentication) hosts the data only on our behalf and under our instructions.
• In the Android version, ads are served by Google AdMob (see "Ads" below). The child's username, profile or game data is not sent to Google.
• When the app starts, it checks Expo (EAS Update) servers for bug-fix updates. This request contains only technical information (platform, app version and a random installation ID); it is not linked to your account and is not used for tracking.

Ads

To keep ShopKid free, the Android version shows ads. Ads are configured according to the rules for children:

• All ad requests are tagged as "child-directed" and only general-audience (G) content is requested.
• Ads are not personalized: no interest-based targeting or remarketing, and access to the advertising ID (AAID) is disabled in the app.
• We use Google AdMob, an ad network certified for Google Play's Families program.
• To show ads, limit frequency and prevent fraud, Google may process technical information such as IP address, device model and operating system version.
• Ads appear only at the bottom of the home screen and in rewarded videos the child chooses to watch; no ads are shown while shopping, at checkout or while solving questions. Rewarded videos can be watched at most 5 times a day.
• Parents can remove ads completely with a Premium membership. The iOS version has no ads.

Retention and Deletion

Data is kept until the account is deleted. Deletion can be done inside the app:

• A single child profile: Parent panel → the child's card → "Delete Profile".
• The whole account (parent + child profiles): Parent panel → Account & Privacy → "Delete My Account".
• Deletion is immediate and permanent; all game data and sign-in accounts are deleted. It is removed from the service provider's backups within 30 days at the latest.
• If you cannot access the app, you can request deletion by writing to tezcanerdem81@gmail.com.

Children's Privacy

ShopKid is designed for children and in line with the children's data rules of the US Children's Online Privacy Protection Act (COPPA), the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).

A child account can only be created by a parent who accepts this policy when registering. Access to the parent area is protected by a parental gate.

Your Rights

Under KVKK Art. 11 and the GDPR you have the right to access, correct and delete your data, to restrict processing and to object. You can send requests to tezcanerdem81@gmail.com; we reply within 30 days at the latest.

Security

Data is transmitted over an encrypted connection (HTTPS). Each user can access only their own data, and parents only their own children's data; these rules are enforced on the server. PINs and passwords are stored in hashed form.

Changes

If this policy changes significantly, we will let you know inside the app. The current version is always available in the app and on our website.