Dr. Panda Limited Privacy Policy, last updated 9 October 2021

Click here for Privacy Policy in German / Klicken Sie hier für die deutschen Datenschutzbestimmungen

Summary: Dr. Panda is committed to making sure that kids’ privacy is safeguarded and we aim to comply with all (privacy) regulations worldwide, like the Children’s Online Privacy Protection Act (COPPA) in the US.If you want to know what data is collected by our apps and how this is handled, please review this policy. If you have any questions or concerns, send us an email via [email protected], we are here to help.

When using the apps we produce for parents and children (the “Games”) our company and its subsidiaries (together “Dr. Panda” or “We”) may collect information including usage data.When adults or parents visit www.drpanda.com (the “Website”), we may also collect information on the usage of our website for adults and parents. This data collection is discussed in greater detail below.

If you are accessing the Games or Website from within the European Union (EU) or are an EU citizen, please review the Lawful Bases for Processing Personal Data and Individual Rights sections below for more information on your how your personal data will be processed and the rights you have regarding this processing.

Information collected through our Games

Information Collected Automatically By:

Dr. Panda: Most of our apps note your IP address and use this to determine the country the device is located. The IP address is not stored on our systems, but we keep track of the country our app is functioning in. This information cannot be connected to a unique device and is never shared with third parties.

Our QR enabled apps (the “QR App”) require you to scan a QR code to activate the QR App. The QR code, a regional code (indicating the country the QR App is located) and a random number (generated based on the hardware characteristics of the device the QR App is installed on, but which cannot be used to determine any specifications of this hardware) is forwarded to our servers and stored there. This information is only used to verify the QR App is only functioning on a limited number of devices at the same time and is not shared outside Dr. Panda. If you install the QR App on more devices, the first authorization (based on the random number) will be deleted and this will de-authorize the first device to run the QR App.

Flurry (Yahoo): We used to use this service for analytics, and older versions of our applications may still have the Flurry SDK included in them. The SDK in those apps has since been made inactive and is no longer collecting any data.

Mixpanel: We use Mixpanel in some of our apps services to get a better understanding of the usage of our apps. To this end our apps collect non-personal data which is sent to Mixpanel and only used to provide us with an overview of the usage of our apps. The information collected by us through Mixpanel is used solely to improve our service and we do not provide this information to any other third party, unless in order to comply with a legal obligation to do so (e.g. court order) or in case the ownership of the information changes due to a merger, acquisition or restructuring involving Dr. Panda Limited.

For more information on Mixpanel please see their privacy policy here: https://mixpanel.com/legal/privacy-policy

Firebase is an attribution tool that lets us know which sites, apps or platforms users of some of our apps may come from. This specific tool is only used in relation to adult users of our apps or sections of our apps targeted at adults (such as subscription purchase areas).

For more information on Firebase, please see their privacy policy here: https://firebase.google.com/support/privacy

Unity Analytics: Unity technologies makes the software engine for some of our Games. It collects analytical information to better understand your use of our Games and to improve them for you. Unity does not share any personal information with other third parties. Unity will use the collected information only in anonymized form for their own products.

For more information on Unity please see the privacy policy here: http://unity3d.com/legal/privacy-policy, and for more information on the exact data collected you can refer to the appendix below.

Sensorsdata: We use Sensorsdata in some of our apps to get a better understanding of the usage of our apps. To this end, our apps use Sensorsdata to collect data which is collected, sent to and stored on our own servers only. If a user is logged in with a Dr. Panda Account, we may link certain app usage information collected by Sensorsdata, such as which activities have been completed by a user, so we can inform parents of their child’s progress and usage in an app. Other information collected by us through Sensorsdata is used solely to improve our service and we do not provide this information to any other third party, unless in order to comply with a legal obligation to do so (e.g. court order) or in case the ownership of the information changes due to a merger, acquisition or restructuring involving Dr. Panda Limited.

For more information on Sensorsdata, see their privacy policy here: https://manual.sensorsdata.cn/sa/latest/tech_sdk_client_privacy_policy_english-22256010.html

Appsflyer is an attribution tool that lets us know which sites, apps or platforms users of some of our apps come from. This specific tool is only used in relation to adults users of our apps or adult sections of our apps (such as subscription areas).

For more information on Appsflyer please see their privacy policy here: https://www.appsflyer.com/services-privacy-policy

SuperAwesome.

Software Rating Board’s Privacy Certified Program (“ESRB Privacy Certified”). To protect your privacy, SuperAwesome has voluntarily undertaken this privacy initiative, and its services have been reviewed and certified by ESRB Privacy Certified to meet established online information collection, use and disclosure practices. As a licensee of this privacy program, SuperAwesome’s services are subject to frequent audits and other enforcement and accountability mechanisms administered independently by ESRB Privacy Certified.

SuperAwesome also provides advertising services in compliance with the General Data Protection Regulation (EU 1996/679). Adopting an approach of ‘privacy by design and by default’, SuperAwesome utilises proprietary technologies so that it neither collects, stores nor shares your personal data to provision advertisements or target advertising to you.

You may contact SuperAwesome directly at @superawesome.tv, on + 44 203 668 6677, or by post: Privacy Team, SuperAwesome Trading Limited, 22 Long Acre, London WC2E 9YL, United Kingdom

Information you provide through the Games:

Child users do not have the ability to provide any personal information when using the Games beyond what is collected automatically (as noted above). Adult users can use the Support link within the adult/parent area of the app to access the customer support features on the Website. If you submit a support ticket on our Website, you must provide an email address and may provide your name. We do not require you to provide your full name to contact us. Adult users can also register a Dr. Panda account with an email address.

Information collected through our Websites:

Information collected automatically:

Our Websites are intended for use by parents and adults and use Google Analytics (third party scripts) that collect the following information and might (also) store such information as a cookie on the device you use to access our webpage:

In order for you to use any of our Websites you should agree with the placement of the specific cookies and their use.

Information you provide:

In addition to the information automatically collected when you visit the Website, parents may provide their name and email address for specific purposes:

To provide you with the newsletter, we require you to provide your email address. We use the email address only to provide you with the newsletter and for no other purpose. And you can opt out of receiving the newsletters at any time using the unsubscribe link or by contacting us at [email protected]

If you submit a support ticket or reach out to us using the contact form on our Website, you must provide an email address and may provide your name. We do not require you to provide your full name to contact us.

How your information is used

We use the information collected through our Games and Websites for getting a better understanding of their use and the preferences of our visitors. We do not use this information for any other purpose or make it available to any other party (beyond those disclosed above), unless in order to comply with a legal obligation to do so (e.g. court order) or in case the ownership of the information changes due to a merger, acquisition or restructuring involving Dr. Panda.

How your information is shared

Any personal information automatically collected by us is used solely to improve our service and we do not provide this information to any third party (beyond those disclosed above), unless in order to comply with a legal obligation to do so (e.g. court order) or in case the ownership of the information changes due to a merger, acquisition or restructuring involving Dr. Panda Limited.

Information that is collected on our Websites by scripts from Google will also be available to Google. Dr. Panda has no control over the collection or usage of this information by Google and does not accept any liability for the same. However, we believe that the collection and usage of information by Google is compliant with relevant regulations. According to the disclosures of Google they will use this information as follows:

According to the best of our knowledge Google uses the information collected to provide us with a better understanding of the use of our Websites and of the preferences of our visitors. Google will also use the information collected to personalize advertisements that are shown to you while surfing the web or while using Google services. Please refer to http://www.google.com/policies/privacy/ and more specifically here: https://support.google.com/adwordspolicy/answer/143465?hl=en&rd=1 for more information. You can also opt-out using the following Google tool: Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout/). Click here to opt-out of Google Analytics.

Lawful bases for processing personal data

If you are an individual in the European Union (EU) or an EU citizen, we collect and process data about you only where we have legal bases for doing so under applicable EU laws. This means we collect and process your data only when:

Where we rely on your consent to process your personal data, you have the right to withdraw or decline consent at any time. If you wish to withdraw your consent, please contact us using the information in the Contacts for Individual Rights Requests section. Some examples of our legitimate interests and the data being processed include:

Where we rely on our legitimate interests to process your personal data, you have the right to object. More information on exercising this right can be found in the Individual Rights section below.

We do not collect any other information

When you download and use our Games, or surf our Websites, we don’t require you to provide any information and we don’t collect any personal information, except general information explained above, including unique device identifiers and cookies (as specified above) to anonymously identify your computer or device so we can deliver a better experience. We do not share such information with third parties.

We do not knowingly contact or collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us so we can remove the information.

Individual Rights

Dr. Panda makes certain choices available to you when it comes to your personal data. Please review the below information outlining your choices and how to exercise them. We will respond to all requests within a reasonable timeframe. If our full response will ever take more than a month due to complexity or scope, we will notify you of this and keep you updated.

Review and update your data: You have the right to access and update any personal data that we have collected. To review the data that we have and update it as required, please submit a request using the contact information at the end of this section. We may request more information to confirm your identity before releasing or modifying any personal data.

Delete your data: You also the right to have your personal data deleted. This is sometimes known as the ‘right to be forgotten’. To request that we delete all personal data about you, please submit a request using the contact information at the end of this section. We may request more information to confirm your identity before deleting any personal data.

After you delete your personal data from our services, we may not immediately delete residual copies from our active servers and may not immediately remove data from our backup systems for archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so. We may also decline to honor this request in certain specific situations, such as if the data is necessary to comply with a legal obligation or to exercise/defend a legal claim.

Restrict Processing: You have the right to restrict how we process your personal data in certain circumstances. This is an alternative to requesting the deletion of your data. Rather than requesting we delete all your personal data, you may request that we limit our uses of your personal data to specific purposes. You may wish to request we restrict our processing if you contest the accuracy of your personal data and we are working to verify this information, or if you want us to retain your personal data in connection to a legal claim but cease processing it.

Data Portability: You have the right to obtain copies of your information in a structured, commonly used format that you can move your data between our service and the services of others. We may request more information to confirm your identity before providing any personal data.

Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or when our processing of your data is based on legitimate interests. You may request that we stop processing your personal data for direct marketing purposes. This is an absolute right and we cannot refuse this request. Beyond direct marketing, if you wish to exercise this right, you must give specific reasons why you object to our processing of your data, based on your particular situation. Even after receiving such a request, we may continue processing if it is necessary for the exercise/defense of a legal claim or if we can demonstrate a compelling legitimate ground for the processing.

If any request made under this section is clearly unfounded or excessive, we may reject the request or require a reasonable fee to honor the request. If we decide to reject your request, we will inform you of the reasons for not taking action and provide information on other possible remedies. If we decide that a reasonable fee is necessary, we will promptly inform you and will comply with the request upon receipt of this fee.

Contact for Individual Rights Requests

Email: [email protected]

If you are an EU citizen or reside in the EU and wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority.

Data Retention

Dr. Panda may retain users’ data for the following purposes:

We will retain your information for as long as is reasonably necessary in relation to the purposes for which this data was collected. In many instances, we will retain your data while it is necessary for your use of the Games or Website, which may include maintaining this information beyond when you cease using the Games or Website.

Updates to this Privacy Policy

This privacy policy was last updated on the date that appears at the top of this document. Our privacy policy may change from time to time, and we explicitly reserve our right to do so. If we make any material changes to our policies, we will place a prominent notice on our website or application. We will obtain prior parental consent if any changes we make to this Policy affect users under the age of 13 in a way that requires such consent under COPPA.

APPENDIX

Mixpanel collects the following information through our Games:

Unity collects the following information through our Games:

Information that is collected through our Games by Unity will be available to Unity and is shared by Unity in de-identified and/or aggregated form with certain third parties. We have explicitly indicated to Unity that our products are aimed at children under 13 (which means Unity is aware that the handling of information should be COPPA compliant).