Privacy Policy - iSophro

Last updated: February 2024

1. Introduction

Protecting your personal data and that of your children is a priority for Scholar Sophro. This Privacy Policy explains how we collect, use, store, and protect your information when using the iSophro mobile application.

This policy complies with the General Data Protection Regulation (GDPR) and French data protection law.

2. Data Collected

2.1 Account data

When you create an iSophro account, we collect:

• Your email (for account creation and management)
• Your password (stored in encrypted form)
• Your first and last name (optional)
• Country of residence

2.2 Child profile data

For each child profile created:

• Child's first name (pseudonym possible)
• Date of birth or age range
• Profile picture (optional)

2.3 Data NOT collected

We never collect:

• Audio conversations or interactions of the child
• GPS location data
• Device contacts
• Photos or videos except optional profile picture

3. Purpose of Processing

Your data is used only for:

• Create and manage your user account
• Personalize user experience based on child's age
• Display history of listened sessions
• Manage child profiles (up to 5 profiles)
• Improve the service and develop new content

4. Children's Data Protection

5. Your GDPR Rights

In accordance with GDPR, you have the following rights:

• Right of access: Request a copy of your data
• Right to rectification: Correct your data
• Right to erasure: Delete your data
• Right to data portability: Receive your data in a readable format
• Right to object: Refuse certain processing

Exercising your rights

To exercise your rights, contact us at: hello@scholarsophro.com

We will respond within a maximum of one month.

6. Data Security

Scholar Sophro implements technical and organizational measures to protect your data:

• Encryption: All data transmitted via HTTPS/TLS
• Secure storage: Encrypted databases
• Passwords: Hashed with secure algorithms
• Authentication: Two-factor available (optional)

7. Data Sharing

Your personal data and that of your children is never sold, rented, or transferred to third parties for commercial purposes.

We only share certain data with technical service providers (Firebase, Apple, Google) who are contractually bound to comply with GDPR.

8. Contact