Privacy Policy

1. Data Controller Information

Buzzworthy Vibe Co., Ltd ("we", "us", or "our") is the Data Controller responsible for your personal data when you use Spellings.App.

2. Information We Collect

Personal Data We Collect:

• Account Information: Name, email address, password (encrypted)
• Profile Data: Child's age, learning preferences, progress data
• Usage Data: Learning activities, time spent, performance metrics
• Technical Data: IP address, device type, browser information
• Communication Data: Support messages, feedback submissions

Children's Data Protection:

3. Legal Basis for Processing (PDPA Compliance)

Under Thailand's PDPA, we process your personal data based on the following legal grounds:

• Consent: You have given clear consent for processing your personal data
• Contract Performance: Processing is necessary to provide our educational services
• Legitimate Interests: For service improvement, security, and customer support
• Legal Obligation: To comply with Thai laws and regulations

4. How We Use Your Information

We use your personal data to:

• Provide personalized learning experiences for your child
• Track learning progress and generate performance reports
• Communicate with you about your account and our services
• Improve our educational content and platform functionality
• Ensure platform security and prevent fraud
• Comply with legal obligations under Thai law
• Provide customer support and respond to inquiries

5. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Third-party companies that help us operate our platform (cloud hosting, analytics, payment processing)
• Educational Partners: Content providers and educational institutions (with your consent)
• Legal Authorities: When required by Thai law or to protect our rights
• Business Transfers: In case of merger, acquisition, or asset sale (with notice to you)

We never sell your personal data to third parties or use children's data for advertising purposes.

6. International Data Transfers

Some of our service providers may be located outside Thailand. When we transfer your personal data internationally, we ensure adequate protection through:

• Adequacy decisions by Thai authorities
• Standard contractual clauses approved under PDPA
• Binding corporate rules and certification schemes
• Your explicit consent for specific transfers

7. Your Rights Under Thailand PDPA

You have the following rights regarding your personal data:

8. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Account Data: Until you delete your account or request deletion
• Learning Progress: 3 years after last activity for educational continuity
• Communication Data: 2 years for customer support purposes
• Technical Logs: 1 year for security and debugging purposes
• Children's Data: Deleted when child reaches 18 or upon parental request

9. Data Security

We implement comprehensive security measures to protect your personal data:

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your login status and preferences
• Analyze platform usage and performance
• Provide personalized learning experiences
• Ensure security and prevent fraud

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

11. Data Breach Notification

In accordance with PDPA requirements, we will notify the relevant Thai authorities and affected individuals of any personal data breach within 72 hours of becoming aware of the breach, where feasible and when the breach is likely to result in high risk to your rights and freedoms.

12. Third-Party Services

Our platform may integrate with third-party services:

• Authentication: Secure login providers (Google, Apple)
• Analytics: Usage analytics (anonymized data only)
• Payment Processing: Secure payment gateways
• Cloud Storage: Encrypted data storage providers

These services have their own privacy policies. We ensure all third-party providers meet our data protection standards.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify you of material changes by:

• Email notification to registered users
• Prominent notice on our platform
• 30-day advance notice for significant changes

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact our Data Protection Officer:

15. Regulatory Information