Privacy Policy

Fynxo Kiddies Solutions Ltd is responsible for deciding why and how personal data is processed for the Fynxo service. Our address is 8 Gideon Close, Parkland Estate, Peter Odili Road, Port Harcourt, Rivers State, Nigeria. Write to info@fynxoapp.com about privacy, requests concerning a child profile, a complaint, or a message for the Data Protection Officer.

A parent or lawful guardian aged at least 18 registers, pays for, and manages the family account. The adult creates a separate child profile and controls the username, PIN, or access code. Children cannot enter a subscription contract or make a payment through their profile. We require the registering adult to declare their authority for each child and may use proportionate steps to verify it. If a person without authority creates a child profile, please tell us promptly so that we can restrict access and assess deletion.

Parent or guardian:

Name, email address, account credentials, family settings, support correspondence, consent choices, subscription status, and payment references. Payment-card details are entered with the payment provider or app store shown at checkout; Fynxo receives the transaction information needed to administer the subscription.

Child profile:

First name or nickname, username, date of birth or age information, selected avatar, and parent-managed login details. These are supplied or authorised by the parent or guardian.

Learning and family activity:

Lessons, quiz answers and scores, chores, progress, coins, badges, goals, parent-approved spending requests, family messages, and reactions. These records allow the adult to supervise the child's progress.

Optional material:

Chore-proof photographs, family faith preference, optional AI-assisted personalisation, and notification choices, if the adult enables the relevant feature.

Technical and website data:

Device and app version, notification token, service logs, security events, crash information, and waitlist email addresses submitted on the website. We use necessary website storage; any non-essential analytics or tracking requires an appropriate notice and choice before use.

A photograph or family message may contain information about other people. Parents should avoid uploading identifying documents, addresses, faces of other children, or sensitive information that is unnecessary for a chore or lesson.

Where consent is the ground, it may be withdrawn through the parent settings where available or by contacting us. Withdrawal does not make earlier lawful processing unlawful. Disabling an optional feature will not cancel the family's basic subscription. A legal duty may require us to keep a limited record despite withdrawal or account closure.

The parent or guardian can review the child's progress, manage account settings, and ask us to correct or remove the child's information. A family leaderboard, if enabled, is limited to profiles within the same family account. Other families and strangers should not be able to see the child's profile, photographs, or messages. We do not use children's information for third-party behavioural advertising or sell it.

Photo proof is turned on only by the parent and is used for family chore approval. Faith lessons are off unless the parent selects a preference. A parent can change or remove that preference. Optional permissions can be withdrawn individually. If an optional feature is later redesigned to expose a child to other families or to a new use of data, we will assess that change and obtain any new consent required before it is introduced.

Some lessons or discussion suggestions may be generated using an AI service. When the service requires information related to a child, only the lesson topic and a general age band should be sent. The child's name, photograph, family messages, faith preference, exact date of birth, access code, and persistent identifier must not be included in prompts. AI output can be inaccurate; it should be subject to appropriate review before it is presented as learning material. A parent may decline optional personalisation without losing ordinary lessons.

We use providers for app development and support (Machi Kunzult Ltd), hosting, payment processing (including Paystack or the app-store payment channel actually used), media storage (Cloudinary), transactional email (ZeptoMail), notifications (Expo and Google Firebase), AI generation (Mistral AI), and error reporting (Sentry). Providers receive only information needed for their task. Some act on our instructions; a payment or app-store provider may also have its own legal duties and privacy notice. We may disclose data if the law requires it or a proportionate disclosure is needed to protect a person or the service.

Some suppliers may handle information in the European Union, the United States, or other locations shown by our supplier records. Before transferring personal data outside Nigeria, we assess the destination, the recipient, and the safeguards available under sections 41–43 of the Nigeria Data Protection Act 2023. Depending on the transfer, we rely on an applicable adequacy decision, enforceable contractual safeguards, or another lawful ground under the Act. A parent may request information about the applicable safeguard by writing to us.

We retain information for its stated purpose and review it when a profile is closed. These periods govern the live service; where deletion is requested earlier and there is no lawful reason to retain the data, we erase it earlier.

We instruct providers to apply the relevant deletion requirements. Limited records may be retained for tax, security investigations, dispute resolution, or another legal requirement, with access restricted and deletion when that basis ends.

We use access restrictions, protected credentials, encrypted connections, administrator controls, and backup arrangements proportionate to the risks. Children's access codes must be protected against repeated guessing. Only people who need information for an authorised task may access it. If an incident affects personal data, we will investigate, reduce harm, and notify the Nigeria Data Protection Commission and affected people when the Act requires it.

Subject to the Act and verification of the requesting person's authority, a parent, guardian, or other data subject may ask to know whether we process their data, access it, correct inaccuracies, request erasure, object to processing, withdraw consent, request data portability where available, and seek review of a decision made solely by automated means if it has a legal or similarly significant effect. We also consider requests to restrict processing where applicable. Children may raise a concern through a trusted adult or through our contact address.

Email info@fynxoapp.com with the account email and the nature of the request. Do not send a password, a child's PIN, or an identity document in your first email. We may ask for proportionate evidence of identity or guardianship, especially if adults disagree about access to a child's information. We aim to answer within 30 days; if a lawful exception applies, we will explain the position. You may complain directly to the Nigeria Data Protection Commission at https://ndpc.gov.ng/ or seek another remedy available by law.

We will update this policy if the service or applicable law changes. Material changes will be brought to the adult account holder's attention before they take effect where practicable. A change that requires new consent will not be applied to the relevant optional processing until that consent is obtained.

Fynxo Kiddies Solutions Ltd
8 Gideon Close, Parkland Estate, Peter Odili Road, Port Harcourt, Rivers State, Nigeria
Email: info@fynxoapp.com
Website: https://fynxoapp.com/