Foleza
In short
- The account is opened and held by the parent. A child has no account, types nothing and sends us no personal data themselves.
- We keep as little about the child as we can, only what the parent enters and what the parent's dashboard needs.
- There are no ads, no trackers and no third-party analytics, and we never sell data.
- Fshi historikun dhe mbyll llogarinë (Delete the history and close the account) deletes the account, the children and all their history at once. What remains, and for how long, is in section 4.
These are the main points. All the details are below.
1Who we are
Foleza is an app of learning games for children aged 3 to 5, with a dashboard for the parent.
The controller of your data is {{OWNER_NAME}}, {{CONTACT_ADDRESS}}. For any question about your data, write to {{SUPPORT_EMAIL}}.
The account is opened and held by the parent (or legal guardian). A child has no account, types nothing and sends us no personal data themselves.
2What we collect
About the parent
- Your e-mail address, your name (if you give it) and the app's language.
- Your password, stored only as a hash, so nobody, us included, can read it.
- Which version of the Terms of use and of this policy you accepted, and when.
- If you sign in with Google or Apple, the identifier Google or Apple gives us, your e-mail and name. For Apple we also keep an encrypted key that lets us end Sign in with Apple when you close the account.
- For each phone you sign in on, the system (iOS or Android), the model, the app version and when it was last used. Sign-in sessions are stored only as hashes.
About the child (entered by the parent)
- A first name (a nickname is fine) and the year of birth, not the date.
- The time zone, taken from the phone, so the child's day and bedtime follow the child's clock. We do not collect location.
- The parent's settings, that is the daily time limit, bedtime and wake time, and the weekly goal.
- A photo, only if the parent chooses to add one. The phone crops and shrinks it before sending; it is kept in our database and shown only in the parent dashboard.
How the child plays
- When a game opens and closes, the play time (one record per 10 seconds of play), the stars won and the levels completed, with the time each happened.
- From these we build the totals the parent sees, that is minutes, stars and sessions per day, game and hour of the day, the level reached in each game and the medals already shown.
- Progress inside a game is kept only on the phone and is not sent to us.
Error reports and security logs
- Error reports. When something fails, the app sends us the error message, the screen it happened on, the operating system and its version, the app version and the account and phone identifiers. E-mail addresses, sign-in keys and anything a person typed are removed before sending, and the server cleans the report again.
- Security log. For sign-ins, failed sign-ins and changes to the account or a child we keep the action, identifiers (account, child, phone), the time and only the network part of the IP address (e.g. 203.0.113.0/24, never the full address). Never a name, an e-mail, a password or any content.
- Server technical log. For each request we collect the page address (without its values), the answer, how long it took, the account identifier and the network part of the IP address.
What we do not collect
There are no ads, no trackers, no third-party analytics, no in-app purchases and no chat or messages between users. We do not collect location, contacts, voice or the advertising identifier, and we never sell data.
3Why we use it
- To provide the service, that is the account, the games, the parent dashboard, the daily limit and bedtime. The basis is our contract with you, the Terms of use.
- The child's details and photo, because you, as the parent, enter them and give us your consent. You can withdraw it at any time by deleting them (see section 6).
- For security and to keep the app working we use the security log, error reports and the technical log (legitimate interest).
- To send the e-mails you need, that is confirming your address and the link for a new password. We send no marketing.
4How long we keep it
| What | How long |
|---|---|
| The account, the children's profiles, photo, settings and play totals | As long as the account exists. Deleted at once when you delete a child or close the account. |
| Play-time records (every 10 seconds) | 90 days; after that only the daily totals remain. |
| Other play records (stars, levels, games opened and closed) | 400 days. |
| Error reports | 30 days. |
| Security log | 365 days, also after the account is closed (no name or e-mail, only identifiers). |
| Sign-in sessions | An unused session expires after 90 days and is deleted 30 days later. |
| E-mail links (confirmation, new password) | Valid 1 day and 30 minutes; deleted one day after they expire. |
| A phone no longer used that never recorded play | 180 days. |
| Server technical log | {{SERVER_LOG_DAYS}} days. |
| Database backups | {{BACKUP_DAYS}} days, then overwritten. |
Short copies in the server's fast cache (e.g. the latest dashboard) last 1 to 5 minutes.
5Who else processes it
We use only these providers, and only for their task.
- {{HOSTING_PROVIDER}} ({{HOSTING_COUNTRY}}) is the server where all the data above is stored.
- Cloudflare (R2) stores and delivers the game files (code, pictures, voices). When a phone downloads a game, Cloudflare sees the phone's IP address. No child data is stored there.
- Resend sends the confirmation and new-password e-mails; it receives your e-mail address and the message.
- Google and Apple are used only if you choose to sign in with them.
Some of these providers may process data outside Albania and the European Union. Where that happens, we rely on the data protection safeguards they offer in their terms.
From the dashboard's Ndaj (Share) tab you can share a summary of play with apps you pick yourself. Nothing leaves the phone unless you press the button.
6Your rights
- Deletion. In the app, under Parent dashboard → Cilësimet (Settings), Fshi historikun dhe mbyll llogarinë (Delete the history and close the account) deletes the account, the children and all their history at once. A child's profile is deleted from that child's Profili (Profile) when the account has more than one child; the photo is removed under Profili → Hiq foton (Remove the photo). The full steps are on the support page.
- A copy of your data. Write from the account's address to {{SUPPORT_EMAIL}} and we send your and your children's data in a readable file within one month.
- Correction. You change the child's name, year of birth, photo and settings yourself in Cilësimet (Settings); for anything else, write to us.
- Objection and restriction. Write to us and we answer within one month.
- Complaint. You can complain to Albania's Commissioner for the Right to Information and Protection of Personal Data, or to the data protection authority where you live.
7Children
Foleza is made for young children, so we keep as little data about them as we can, only what the parent enters and what the parent's dashboard needs.
The child types no names, addresses or messages and has no way to talk to other people.
The parent dashboard opens only with the phone's own lock (Face ID, fingerprint or PIN) or, on a phone with no lock, a question for grown-ups.
8Security
The connection to the server is encrypted (HTTPS). Passwords, sessions and e-mail links are stored only as hashes, and the photo is never kept anywhere public.
On the phone, the sign-in keys are held in the system's secure storage and only a copy of the dashboard is kept.
9Changes
When we change this policy, we change the version and date at the top of this page. For an important change, the app shows it to you before you go on.