Privacy Policy

Introduction

Papercup Ltd ("we", "us", "our") operates the Papercup mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our App.

Papercup is designed for children to make phone calls under parental supervision. We take the privacy of children seriously and comply with applicable privacy laws including the New Zealand Privacy Act 2020 and the US Children's Online Privacy Protection Act (COPPA).

Information We Collect

Information Provided by Parents/Guardians

When a parent or guardian creates an account, we collect:

• Email address
• Password (encrypted)
• Payment information (processed securely by our payment provider)

Information About Children

Parents provide the following information about their children:

• Child's first name
• Approved contacts list (names and phone numbers)
• Device identifiers for the child's phone

Information Collected Automatically

When the App is used, we automatically collect:

• Call logs (date, time, duration, numbers called)
• Device information (device model, operating system)
• App usage data

Information We Do NOT Collect

• Location data
• Photos or media from the device
• Contacts from the device (only parent-approved contacts are stored)
• Microphone recordings (calls are not recorded)
• Advertising identifiers

How We Use Information

We use the information we collect to:

• Provide the calling service
• Display call history to parents
• Enforce approved contact restrictions
• Process subscription payments
• Send service-related notifications
• Improve and maintain the App
• Comply with legal obligations

Children's Privacy (COPPA Compliance)

We do not knowingly collect personal information directly from children under 13 without verifiable parental consent. All account creation and management is performed by parents or guardians.

Parental Rights:

• Review personal information collected about your child
• Request deletion of your child's information
• Refuse further collection of your child's information
• Manage approved contacts and calling permissions

To exercise these rights, contact us at hello@papercup.kids.

Data Sharing and Disclosure

We do not sell personal information. We may share information with:

• Service Providers: Companies that help us operate the App (hosting, payment processing)
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Data Retention

We retain account information for as long as your account is active. Call history is retained for 12 months. When you delete your account, we delete associated personal information within 30 days, except where retention is required by law.

Data Security

We implement appropriate technical and organisational measures to protect personal information, including:

• Encryption of data in transit and at rest
• Secure authentication systems
• Regular security assessments
• Access controls limiting who can view data

International Data Transfers

Your information may be transferred to and processed in countries other than New Zealand. We ensure appropriate safeguards are in place for such transfers.

Your Rights

Under the Privacy Act 2020, you have the right to:

• Access your personal information
• Request correction of inaccurate information
• Request deletion of your information
• Complain to the Privacy Commissioner

Third-Party Services

The App uses the following third-party services:

• Firebase (Google): Authentication and notifications
• Stripe: Payment processing

These services have their own privacy policies governing their use of data.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the App. Continued use after changes constitutes acceptance.

Contact Us

For privacy inquiries or to exercise your rights:

Papercup Ltd
Email: hello@papercup.kids

For complaints, you may also contact the New Zealand Privacy Commissioner at privacy.org.nz.