Privacy Policy

1. Who this policy covers

This Privacy Policy applies to the Marvelo mobile application and the services available through it (together, the “App” or the “Service”). It describes how we handle information for two kinds of people:

• Parents and guardians — the account holders who register, manage the family account, set up child profiles, and make purchases.
• Children — the kids who use the child profiles a parent creates, read books, and earn rewards.

A Marvelo account belongs to a parent or guardian (an adult). Children do not create their own accounts and do not provide us with personal information directly — a parent sets up and controls each child profile.

3. Information we collect

3.1 Information you give us

• Parent account details — name, email address, and a password (which we store only in a securely hashed form). During sign-up we send a one-time verification code to confirm your email.
• Account security data — an optional PIN you set to protect access to parent-only areas such as settings and purchases.
• Child profile details — for each child you add: a display name or nickname, an optional avatar image, and an age or age range you choose.
• Profile images — avatar images you upload for yourself or a child.
• Reviews and feedback — ratings, reviews, or messages you choose to submit (for example, a book review or a support request).

3.2 Information created as you use the App

• Reading activity — which books are opened, reading progress, pages reached, and the language a book is read in.
• Rewards & gamification — badges earned, points, streaks, and daily check-ins tied to a child profile.
• Commerce activity — items in a cart, orders placed, subscription status, and coupons used.
• App preferences — settings such as language and notification choices.

3.3 Information collected automatically

• Device & technical data — device type, operating system version, app version, and a device identifier used to deliver push notifications.
• Diagnostic data — limited logs and error reports that help us keep the App working and fix problems.

4. How we use information

We use the information described above to:

• create and secure parent accounts and child profiles;
• deliver the core reading experience and save reading progress across devices;
• power rewards, badges, points, streaks, and daily check-ins;
• process subscriptions, orders, and coupons;
• send important account, transaction, and (where enabled) reminder notifications;
• provide customer support and respond to your requests;
• keep the App safe, prevent fraud and abuse, and troubleshoot problems;
• understand, in aggregate, how the App is used so we can improve it;
• comply with our legal obligations.

We do not use children's personal information to build advertising profiles or to serve behavioral ads.

5. Legal bases for processing (UK/EU users)

Where the GDPR applies, we rely on the following legal bases to process personal information:

• Contract — to provide the account and services you sign up for.
• Consent — for example, a parent's consent to process a child's information, and your consent to receive optional push notifications. You may withdraw consent at any time.
• Legitimate interests — to secure the App, prevent abuse, and improve our Service, balanced against your rights.
• Legal obligation — where we must retain or disclose information by law.

6. How we share information

We do not sell personal information. We share information only in the limited circumstances below, and only as needed:

• Service providers — trusted vendors who process information on our behalf under contract, such as cloud hosting and media storage, push-notification delivery, and email delivery for verification and account messages.
• Payment providers — local Myanmar payment providers (such as KBZPay, Wave Pay, and MPU) that process subscriptions and purchases. Your payment credentials are handled by the chosen provider under their own terms, and are not stored by us.
• Legal & safety — when required by law, legal process, or to protect the rights, safety, and security of our users, the public, or Marvelo.
• Business transfers — if Marvelo is involved in a merger, acquisition, or sale of assets, with continued protection under this policy.

7. Push notifications

With your permission, we send push notifications to your device — for example, reading reminders, streak nudges, or account updates. To do this we store a device token that identifies your device to the notification service. You can turn notifications off at any time in the App's settings or in your device's system settings.

8. Subscriptions & payments

Marvelo may offer subscriptions and purchases. Payments are processed exclusively through local Myanmar payment providers — such as KBZPay, Wave Pay, and MPU. We do not process payments through the Apple App Store or Google Play.

When you pay, you are redirected to your chosen provider, who collects and handles your payment details (such as wallet or card information) under their own terms and privacy policy. We do not see or store your full payment credentials; we receive only the information needed to confirm and manage your subscription or order — such as payment status, a transaction reference, and the items purchased.

9. How long we keep information

We keep personal information only for as long as it is needed for the purposes described in this policy, or as required by law. When you delete a child profile or close your account, we delete or anonymize the associated personal information within a reasonable period, except where we must retain certain records (for example, transaction records for tax or accounting). Backups are purged on a rolling schedule.

10. How we protect information

We use technical and organizational safeguards designed to protect personal information, including encryption in transit, hashed password storage, access controls, and a PIN option for parent-only areas. No method of transmission or storage is perfectly secure, but we work continuously to protect your family's information and to limit who can access it.

11. Your rights & choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. Because a parent controls the family account, parents can exercise these rights on behalf of their children. You can:

• review and update account and child-profile details in the App;
• delete a child profile or close your account at any time;
• request a copy of your personal information (data export);
• turn off optional notifications;
• contact us to exercise any right described above.

We will respond to verified requests within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

12. Parental controls

Parents and guardians can manage the family experience directly in the App, including adding or removing child profiles, setting a parent PIN to protect settings and purchases, managing subscriptions, and controlling notification preferences. These controls let you decide what your child can access and what information is collected.

13. International data transfers

We may process and store information in countries other than the one you live in. Where we transfer personal information across borders, we use appropriate safeguards (such as standard contractual clauses) so that it continues to receive a level of protection consistent with this policy and applicable law.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the App. We encourage you to review this page periodically.