← Back to HomepagePrivacy Policy of the "Number Land" App
This privacy policy sets out the rules for the processing and protection of data of users using the Number Land mobile application. Our priority is the safety of children and transparency towards their parents.
1. Data Controller
The controller of your personal data is Denis Stolarczyk Gizd Studio, based at ul. Ciasna 5/42, 43-100 Tychy, Poland, VAT ID (NIP): PL6462939097, email: kontakt@gizdstudio.pl. We process data in compliance with the General Data Protection Regulation (GDPR). Contact for privacy matters: kontakt@gizdstudio.pl or kontakt@krainacyfr.pl.
2. Data Collection and Processing
The Number Land application was designed following the Privacy by Design model:
- No child account required: The app does not require the child's name, email address, or account creation. In certain forms directed to parents, the child's age may be provided voluntarily.
- Diagnostics (Firebase Crashlytics): Firebase Crashlytics (provided by Google) may process technical data related to application crashes, including device and operating system information, app version, error diagnostic data, and installation identifiers. This data is used solely to diagnose and resolve technical issues.
- Default local storage: All learning progress, collected stars, unlocked levels, and character accessories unlocked in-game are saved by default in the device's local memory. Core educational games work without an internet connection once downloaded.
- Optional cloud synchronization (KC Code): Parents can optionally enable learning progress synchronization between their devices using a randomly generated code, without requiring any registration or email address. The server stores game progress data and limited technical data necessary for the operation and security of synchronization, such as device identifier, platform, and technical connection data via an encrypted HTTPS connection on a secure server. Synchronization data is removed from the active database upon using the "Delete cloud data" feature in the Parents Area. If data is also stored in technical backups, it may remain there until removed in accordance with the backup retention cycle.
3. Analytics and Tracking
We do not use any user tracking systems for marketing or ad profiling. Diagnostic tools (Firebase Crashlytics) are used solely for quick technical bug fixes, which is necessary to maintain proper game functionality.
4. Purposes of Data Processing
Crash data is processed solely for:
- Maintaining application functionality (fixing reported bugs and freezes),
- Technical analytics (optimizing performance on older phone and tablet models).
Diagnostic data includes technical information related to app installation and operation. The application does not transmit the child's name or email address to Crashlytics.
5. In-App Purchases and Payments
We apply a transparent monetization model:
- One-time purchase: Purchases of the full version of the Application and payment processing are handled via Apple App Store or Google Play platforms, in accordance with the terms and conditions applicable in the respective store. Payment is collected through the platform where the User completes the purchase. The app requires no subscription and has no paid virtual items.
- No subscriptions: The game contains no recurring charges or subscriptions.
- No paid virtual items or pay-to-win mechanics: Monster shop items are unlocked only with Stars earned through learning. There are no paid virtual items or pay-to-win mechanics, and stars cannot be purchased with real money.
6. Advertisements and External Links
The application is entirely free from third-party advertising. It does not contain any external links in sections accessible to children. Access to the parent zone (Parent Gate) is secured by a mathematical barrier.
7. Child Privacy Standards
The application is built in accordance with Privacy by Design principles. We do not require user accounts, do not collect children's personal data for advertising or profiling, and do not share data with marketing partners.
8. Application Permissions
The application plays audio and narrator recordings and may use vibration as in-game tactile feedback. These features are not used to collect data.
9. Website Cookie Policy
Our website uses cookies. These are small text files sent by the server and stored on the visitor's device.
- Used cookies: the site uses only essential technical cookies necessary for correct site functionality (e.g., remembering session settings).
- No tracking cookies: we do not use any third-party analytical, advertising, or profiling cookies.
- Cookie management: users can modify cookie settings in their browser at any time (block saving or delete existing ones). Restricting technical cookies might affect certain website functionalities.
10. User Rights (GDPR)
In connection with using our website and data protection regulations, every user holds the following rights:
- Right of access to their data and receiving a copy,
- Right to rectify (correct) their data,
- Right to erasure (right to be forgotten), provided no other legal obligations prevent it,
- Right to restrict data processing,
- Right to lodge a complaint with a supervisory authority - in Poland, the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw), if the user believes the data processing violates GDPR regulations.
All requests regarding these rights can be directed to the email address: kontakt@gizdstudio.pl.
11. Data Recipients and Retention Periods
- Data recipients: Data may be processed by technical service providers used by the Controller, in accordance with applicable agreements and data protection principles: OVHcloud – hosting infrastructure provider within the EEA, Google LLC (for Firebase Crashlytics error reports), Cloudflare Inc. (for anti-bot and security protection via Turnstile), and RevenueCat Inc. (for app license validation). We never sell data or share it with data brokers.
- Retention period: Correspondence data is retained for the period necessary to handle the communication, and subsequently – where applicable – for the period necessary to establish, assert, or defend legal claims; anti-abuse rate-limit blocks expire in 15 minutes; promotional code database mappings are kept for campaign duration and limitation periods; Firebase Crashlytics reports are retained for 90 days (Google standard policy); local device game saves are kept until uninstalled; cloud sync data is removed from the active database upon using "Delete cloud data" in the app (if also present in technical backups, it may remain until the backup retention cycle elapses).
Terms of Service, complaints & right of withdrawal
Detailed terms of use, promotional code rules, complaint procedures, and right of withdrawal information are defined in our Terms of Service: