App Privacy Policy — Summary

Last updated: April 2026

1. Data Controller

Nami Group S.r.l., VAT IT 14622510965

• Registered office: Gorgonzola (MI), Via Milano 37/C — 20064, Italy
• Email: team@namikids.app
• Phone: +39 331 169 2850

2. Scope

This policy covers data processing within the Nami Parents app (installed on the parent's device) and the Nami Kids app (installed on the child's device, the "Target Device"). Together these apps allow a parent to monitor and manage their child's digital activity, set restrictions, and access educational content designed for children aged 6–12.

For data collected via the website (e.g. waitlist sign-up), see the separate Website Privacy Policy.

3. What Data We Collect

a) Data provided by the parent

• Account creation: name, address, email, phone number, payment details
• Support requests: messages, screenshots, device information
• Payment data is handled by PCI-DSS compliant processors — full card numbers, CVV and expiry are never stored by Nami Group

b) Automatically collected data

• IP address (for cloud service connections)
• Device identifiers generated by the OS or app platform
• Push notification tokens (Firebase Cloud Messaging)
• Basic session information

Nami does not collect MAC addresses or other persistent hardware identifiers.

c) Data from the child's device

• Screen time, apps used, educational activity progress
• Notification metadata (timestamp, sender/recipient) — Nami Kids only accesses notification content, not full messages or chats
• GPS location and timestamp (only if enabled by the parent)
• Child's username and year of birth

All data from the child's device is collected only with the parent's explicit authorisation. Nami Kids does not read full chat messages — it only flags specific safety-related keywords found in notification content.

4. Purposes and Legal Bases

Data is also processed for system maintenance (legitimate interest, Art. 6(1)(f)), legal obligations (Art. 6(1)(c)), and defence of rights.

5. Data Sharing

Personal data may be shared with:

• Service providers essential to app operation (hosting, payment processors, ICT)
• Judicial, administrative, or public safety authorities as required by law
• Professional advisors engaged by the data controller

In case of a corporate transaction (merger, acquisition), users will be notified.

6. International Transfers

Data is generally processed within the EU. Any transfer to third countries complies with GDPR safeguards ensuring an equivalent level of protection.

7. Children's Data (COPPA)

Nami Kids does not collect personal data from children under 14 without verified parental consent. All child-related data is encrypted and visible only to the parent's account.

8. Data Retention

9. Your Rights

Under Articles 15–22 GDPR you may:

1. Access (Art. 15) — obtain a copy of your data and processing details;
2. Rectification (Art. 16) — correct inaccurate or incomplete data;
3. Erasure (Art. 17) — request deletion;
4. Restriction (Art. 18) — restrict processing;
5. Data portability (Art. 20) — receive data in a structured, machine-readable format;
6. Objection (Art. 21) — object to processing;
7. Withdraw consent — at any time, without affecting prior processing;
8. Lodge a complaint — with your local data protection authority. In Italy: Garante per la protezione dei dati personali. For other EU countries, consult the EU list of DPAs.

10. Account Deletion

You can delete your account and all associated data at any time via the "Delete my account" option in the Nami Kids dashboard, or by writing to team@namikids.app.