Privacy Policy

KayyRith Solutions (202603157374 / CA0422931-P) ("we", "us", "our") builds educational software for children, so we hold ourselves to a higher bar than the law requires. This policy explains what we collect, why, and the choices you have. It covers this website (kayyrith.com) and our mobile applications, including BimaBear (together, the "Services"), and is written to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and the children's privacy requirements of the Apple App Store and Google Play.

The short version

• BimaBear works without an account. Learning progress, profiles, and settings are stored locally on your device, not on our servers.
• We do not show ads, sell data, or allow third-party behavioural tracking in our apps.
• Children cannot enter free-form personal information in BimaBear, and parent-facing areas sit behind a PIN.
• This website does not use advertising cookies.

Data we collect: website

If you email us, we receive your email address and whatever you choose to write. We use it only to reply and keep a record of the correspondence. Our hosting provider (Vercel) collects standard, privacy-preserving aggregate analytics (page views, country, device class); these are not tied to your identity and we do not run advertising or cross-site tracking cookies.

Data we collect: BimaBear app

BimaBear is designed to minimise data collection from the ground up:

• Child profiles (a first name or nickname, age band, and avatar choice) are stored only on your device.
• Learning progress (stars, streaks, completed lessons) is stored only on your device.
• The voice-interaction games process audio on the device to detect letter sounds; recordings are not stored and are never transmitted to us.
• If you purchase a subscription, payment is handled entirely by Apple or Google. We receive an anonymised transaction record to activate your subscription, never your card details.

Because progress lives on your device, deleting the app deletes that data. We cannot recover it, and we cannot read it while it's there.

Children's privacy

BimaBear is made for children aged 3–7 used together with their parents. We do not knowingly collect personal data from children. The app contains no advertising, no open chat, no social features, no external links reachable from the child experience, and no free-text fields in child-facing screens. Areas intended for parents (settings, subscriptions, the progress dashboard) are gated behind a parent-set PIN. If you believe a child has provided us personal data through some other channel, contact us and we will delete it promptly.

Your rights under the PDPA

Under the Personal Data Protection Act 2010 you may request access to or correction of personal data we hold about you (for most users, this is only email correspondence), withdraw consent, or ask us to delete it. Write to hello@kayyrith.com and we will respond within 21 days.

Data security and retention

Email correspondence is retained only as long as needed to handle your enquiry and meet legal obligations. App data never reaches us, so there is nothing for us to retain or breach. Where we use service providers (hosting, email), we choose providers with strong security practices and limit what they can access.

Changes to this policy

If we change how the Services handle data (for example, if a future version of BimaBear adds optional cloud backup), we will update this policy first, change the date above, and, for material changes affecting the app, notify parents in the parent dashboard before the change takes effect.

Contact

KayyRith Solutions (202603157374 / CA0422931-P)
Ipoh, Perak, Malaysia
hello@kayyrith.com