Legal Documentation

Privacy Policy

Last updated: September 10, 2026

PandaMind L.L.C-FZ ("PandaFamily Hub", "we", "us", or "our"), a company registered in the United Arab Emirates, operates the PandaFamily Hub mobile application and web platform. This Privacy Policy explains how we collect, use, process, and protect your personal information in compliance with applicable laws, including the UAE Personal Data Protection Law (PDPL - Federal Decree-Law No. 45 of 2021) and Apple App Store Review Guidelines.

1. Information We Collect

Account Information: Name, email address, phone number, and password when you register.
Family Member Data: Names, dates of birth, and relationships of family members you add to the platform.
Activity Data: Session bookings, schedules, attendance records, and payment information you enter.
Device Information: Device type, IP address, operating system, and app version for diagnostics.

2. How & Why We Use Your Information (Legal Basis)

We process your personal data under the legal basis of contractual necessity (to fulfill requested services) and explicit user consent:

To provide, operate, and maintain the PandaFamily Hub platform services.
To manage your account, bookings, and family activity schedules.
To communicate important updates, account notifications, or verification codes via email or SMS/phone.
To ensure system security, prevent fraud, and optimize user experience.

3. Data Storage & Cross-Border Transfers

Your data is securely hosted and processed on global cloud infrastructure managed by Railway. To ensure optimal performance and strong legal protections, our core servers are located in secure compliance-vetted data centers internationally (including Western Europe). By registering an account, you explicitly consent to the secure transfer, storage, and processing of your data outside of the United Arab Emirates in accordance with international security standards (AES-256 and TLS 1.2+ encryption).

4. Analytics & Tracking Technologies

We do not use tracking technologies for behavioral profiling or targeted third-party advertising. We use standard, industry-compliant application analytics tools (such as Firebase Analytics) solely to collect anonymous diagnostic and aggregate performance data (monitoring latency, troubleshooting crashes, and optimizing navigation). You can manage or disable device tracking preferences anytime via your mobile operating system settings.

5. Data Sharing

We strictly do not sell or rent your personal data. We share information only with:

Service Providers / Providers: Entities you explicitly book or connect with through the platform (e.g., coaches, tutors).
Essential Infrastructure Vendors: Partners necessary to operate the service (cloud hosting, database providers, SMS/telecom gateways, error monitoring).
Legal Authorities: Only if strictly required by applicable law, court order, or governmental regulation.

6. Your Rights & Account Deletion

In accordance with UAE PDPL and international standards, you hold the following rights regarding your personal data:

Access & Portability: Request a copy of the personal data we hold about you.
Correction: Rectify inaccurate or incomplete information.
Erasure (Right to be Forgotten): Delete your account and associated data. You can delete your account directly inside the PandaFamily Hub mobile app by navigating to Settings → Account → Delete Account, or by emailing us.
Restriction & Objection: Object to or request restriction of processing your personal data.
Withdraw Consent: Withdraw your consent to data processing at any time without affecting prior lawful processing.

7. Children's Privacy & Guardian Consent

PandaFamily Hub helps families manage schedules and activities. We do not knowingly collect or process personal data from children under the age of 13 without explicit consent from a parent or legal guardian. Child profiles must be created and managed exclusively by an adult custodian. We do not engage in commercial profiling or targeted advertising directed at children. If you believe a minor has created an account independently, contact us immediately to have the data removed.

8. Data Retention & Immediate Deletion

      We retain personal information for as long as your account remains active. Upon initiating an account deletion request in the app (via Settings → Account → Delete Account), your account, personal profile, phone number, and all associated family data are deleted immediately from active databases in real time, except where temporary audit backups or statutory tax/legal obligations strictly require brief retention.
    

9. Changes to This Policy

We may update this Privacy Policy periodically. Significant updates will be communicated through an in-app notice or via your registered email address prior to taking effect.

10. Contact Us

For questions regarding this policy, or to exercise any of your data privacy rights, contact our Data Protection Office at:

Email: [email protected]