Privacy Policy
Effective Date: 5 November 2025
Last Updated: 5 November 2025
Introduction
SORBIO PTE. LTD. ("we," "us," or "Sorbio") is committed to protecting the privacy of children and families who use the Sorbio Kids mobile application ("App"). This Privacy Policy explains how we collect, use, and protect personal information when you use our educational audio storytelling service.
We understand that you are entrusting us with your child's information, and we take this responsibility seriously.
Who This Policy Applies To
- Parents and Guardians (account holders, ages 18+)
- Children (ages 5-8, the intended users of our content)
- Visitors to our website www.sorbiokids.com
Geographic Scope
This policy is designed for users in Australia and Singapore. If you are located outside these regions, different privacy laws may apply.
Information We Collect
Information About Your Child (With Your Consent)
We only collect information about your child with your explicit consent and only what is necessary to provide our educational service:
Profile Information:
- Child's first name (for story personalization)
- Age (to provide age-appropriate content)
- Gender (optional, for story personalization)
Educational Progress Data:
- Stories listened to and completion status
- Development area progress (Emotional Intelligence, Focus & Calm, Resilient Thinking, Expression & Connection)
- Points earned and level achievements
- Story preferences and listening history
Technical Usage Data:
- App usage patterns and session duration
- Device information (iOS version, device model)
- Crash reports and app performance data
Information About Parents/Account Holders
Account Information:
- Your name
- Mobile phone number (for SMS verification) OR Apple ID identifier
- Email address (optional, for communications)
- Device information
- Account preferences and settings
Communication Data:
- Feedback and support requests
- Survey responses (if you choose to participate)
- Communication preferences
Information We Do NOT Collect
- Location data or GPS information
- Camera or microphone access
- Contact lists or phone numbers
- Social media information
- Browsing history outside our app
- Any information that directly identifies your child beyond their first name
How We Use Information
Primary Purposes (Legal Basis: Consent)
Educational Service Provision:
- Personalizing story recommendations for your child
- Tracking educational progress across development areas
- Providing age-appropriate content selections
- Generating progress reports for parents
App Functionality:
- Account creation and management
- Content delivery and streaming
- App performance and security
- Customer support and communication
Secondary Purposes (Legal Basis: Legitimate Interest)
Service Improvement:
- Analyzing usage patterns to improve our educational content
- Identifying technical issues and improving app performance
- Developing new features and educational frameworks
Business Operations:
- Legal compliance and dispute resolution
- Protecting against fraud and abuse
- Internal analytics and reporting
- Subscription billing and payment processing (via Apple App Store)
Information Sharing and Disclosure
We Do NOT Sell or Rent Personal Information
We do not sell, rent, or trade your child's personal information or your personal information to third parties for marketing purposes.
Limited Sharing for Service Provision
Technology Service Providers:
- Google Firebase/Firestore (database and authentication services)
- Cloudflare (content delivery for audio files and app assets)
- Apple Inc. (app distribution and future payment processing)
These providers are contractually required to protect your information and use it only for providing services to us.
Legal Disclosures:
We may disclose information if required by law or to:
- Comply with legal process or government requests
- Protect the rights, property, or safety of Sorbio, our users, or others
- Enforce our Terms & Conditions
- Investigate potential violations of our policies
International Data Transfers
Data Storage Locations:
- Primary database: Google Cloud (Firebase) - Asia region (Mumbai, India)
- Content delivery: Cloudflare CDN (Oceania and Asia regions primary, global caching)
- Data is transferred to and stored in countries other than Australia and Singapore
Safeguards for International Transfers:
- Google Cloud Firebase provides enterprise-grade security and data protection
- Standard contractual clauses ensure adequate protection for cross-border transfers
- Data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access controls and audit logging meet international security standards
- Our service providers maintain SOC 2 Type II and ISO 27001 certifications
Data Security
Technical Safeguards
- Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
- Access Controls: Limited employee access on a need-to-know basis
- Secure Infrastructure: Google Cloud and Cloudflare enterprise-grade security
- Regular Updates: Security patches and monitoring
Organizational Safeguards
- Employee training on privacy and data handling
- Incident response procedures for potential data breaches
- Regular security assessments and updates
Breach Notification
In the unlikely event of a data breach that poses a risk to your privacy:
- We will notify affected users as soon as practicable upon discovery
- We will notify relevant authorities as required by law (OAIC in Australia, PDPC in Singapore)
- We will provide information about the breach and steps taken to address it
Your Rights and Choices
Parental Control Rights
As a parent or guardian, you have the right to:
- Access: Request a copy of your child's personal information we hold
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your child's account and all associated data
- Restriction: Limit how we use your child's information
- Withdrawal: Withdraw consent at any time
How to Exercise Your Rights
- Contact us at: privacy@sorbiokids.com
- Response time: We will respond to your request within 30 days
- Verification: We may require identity verification to protect your child's privacy
Account Deletion
You can delete your child's account at any time:
- Through the app settings (if available)
- By emailing us at privacy@sorbiokids.com
- All personal information will be permanently deleted within 30 days
Data Retention
Retention Periods
- Active Accounts: We retain your child's information while your account is active and as needed to provide our services
- Inactive Accounts: Accounts inactive for 24 months will be automatically deleted with 30 days advance notice
- Legal Requirements: Some information may be retained longer if required by law (e.g., transaction records)
- Immediate Deletion: Upon your request, we will delete all personal information within 30 days
What Happens When Data is Deleted
- All personal information is permanently removed from our systems
- Anonymized, aggregated data may be retained for service improvement
- Deletion is irreversible - you would need to create a new account to use our services again
Cookies and Tracking
Mobile App
Our mobile app does not use cookies. We do collect:
- App usage analytics through Firebase Analytics
- Crash reporting for app improvement
- No third-party advertising or tracking
Website (www.sorbiokids.com)
Our website uses minimal, essential cookies for:
- Basic website functionality
- Security and fraud prevention
We do not use:
- Advertising cookies
- Social media tracking
- Third-party analytics on our website
Children's Privacy Protection
Age Verification and Parental Identity Verification
- Only parents/guardians (18+) may create accounts
- Account creation requires either:
- Mobile phone number with SMS OTP verification
- Apple ID authentication (verified adult Apple account)
- Age gate prevents users under 18 from proceeding past signup
- Additional protection: Parent Hub access requires separate verification code
- Parent Hub (settings, account management, deletion) is separate from content area
- We require parental consent before collecting any child information
- Children cannot directly create accounts or modify privacy settings
COPPA-Style Protections
Although we are not subject to US COPPA laws, we follow similar principles:
- No behavioral advertising to children
- No collection of more personal information than necessary
- Parental access and deletion rights
- No sale of children's personal information
Parental Supervision
We encourage parents to:
- Review this privacy policy with your child
- Monitor your child's use of the app
- Contact us with any privacy concerns
- Regularly review your child's progress and data
Compliance with Privacy Laws
Australian Privacy Principles (APPs)
We comply with Australia's Privacy Act 1988 and the Australian Privacy Principles, including:
- Open and transparent handling of personal information
- Secure storage and protection of personal information
- Individual access and correction rights
- Notifiable data breach requirements
- APP 3.6 compliance for enhanced protection of children under 15
- Verifiable parental consent for collection of children's personal information
Singapore Personal Data Protection Act (PDPA)
As a Singapore-registered company (UEN: 202526193D), we comply with Singapore's Personal Data Protection Act 2012, including:
- Consent for collection and use of personal data
- Purpose limitation and data minimization
- Security and retention requirements
- Individual access and correction rights
International Users
If you are located outside Australia or Singapore, additional privacy laws may apply. We will work to ensure compliance with applicable local requirements.
Updates to This Policy
Notification of Changes
- We will notify you of material changes via email or in-app notification
- Continued use of our services after changes indicates acceptance
- You may delete your account if you disagree with changes
Review Schedule
We review this privacy policy annually or when:
- New features are added that affect privacy
- Legal requirements change
- Business practices are updated
Contact Us
Privacy Questions or Requests
Regulatory Complaints
If you believe we have not addressed your privacy concerns adequately, you may contact:
- Australia: Office of the Australian Information Commissioner (OAIC) - www.oaic.gov.au
- Singapore: Personal Data Protection Commission (PDPC) - www.pdpc.gov.sg
Additional Information
Third-Party Links
Our app may contain links to third-party websites or services. This privacy policy does not apply to those third-party services. We encourage you to read their privacy policies.
Business Transfers
In the event of a merger, acquisition, or sale of assets, personal information may be transferred. We will notify you and ensure the new entity maintains the same privacy protections.
Legal Basis Summary
We process personal information based on:
- Consent: For child profile creation and progress tracking
- Legitimate Interest: For service improvement and security
- Legal Obligation: For compliance with applicable laws
This privacy policy is designed to be transparent and comprehensive while protecting your family's privacy.
If you have any questions or concerns, please contact us at privacy@sorbiokids.com