Effective date: October 1st, 2025
Who we are: Cambrian Labs B.V. (“we”, “us”, “our”).
Contact: support@cambrian-labs.com • The Netherlands

This Privacy Policy explains how we collect, use, disclose, and protect information when you use:

  • Our websites, landing pages, and forms (including pages hosted by partners such as Mailchimp)

  • Our mobile applications (the “Apps”)

  • Our email newsletters and other communications (together, the “Services”)

We include a dedicated Children’s Privacy Notice below for Apps directed to children.

1) Scope & Roles

  • For our website, landing pages, email lists, and most Apps, Cambrian :abs B.V. acts as the data controller (GDPR/UK GDPR) or business (CPRA).

  • Some vendors act as processors/service providers on our behalf (see Section 7).

2) What We Collect

We collect information in three broad categories:

A. Information you provide

  • Email address & preferences when you subscribe, request a download, or contact support

  • Support messages and any content you send us

  • App permissions you choose to allow (e.g., notifications). We do not activate optional permissions without your consent.

B. Information collected automatically

  • Device & usage data: IP address, device type, OS, app version, language, time zone, error/crash data, performance metrics, and general usage interactions

  • Web tracking: cookie or similar identifiers, pages viewed, referrers, UTM parameters (e.g., utm_source, utm_campaign), and approximate location derived from IP

  • Advertising events: de-identified data used to measure the effectiveness of our ads (e.g., Meta/FB pixel events, where permitted)

C. Information from partners

  • Email delivery & list management providers (e.g., Mailchimp)

  • Analytics/diagnostics providers (e.g., Google/Firebase Analytics, Crashlytics, and/or Flurry if enabled)

  • Advertising/measurement partners (e.g., Meta for ads measurement)

Note: We do not create profiles of children for marketing.

3) How We Use Information

We use information to:

  • Provide, maintain, and improve the Services (including fixing crashes and measuring performance)

  • Send you downloads you requested (e.g., the FREE bilingual kit) and optional newsletters

  • Communicate with you about updates or support requests

  • Measure and improve our advertising and discoverability

  • Comply with legal obligations and enforce our terms

Legal bases (GDPR/UK GDPR): consent, performance of a contract, legitimate interests (e.g., security, analytics, product improvement), and legal obligations.

4) Email & Marketing

  • We send marketing emails only with your consent (you can unsubscribe any time via the link in each email or by contacting us).

  • For child-directed Apps, marketing emails are sent to parents/caregivers only (never to children).

  • We do not combine newsletter email addresses with other data for profiling.

5) Cookies & Similar Technologies

We and our service providers use cookies, SDKs, and similar tools to operate our site and Apps, remember preferences, perform analytics, and measure ad performance.

Your choices:

  • Website cookies: manage via your browser settings and (where available) our cookie banner/preferences tool.

  • Mobile advertising IDs: reset or limit ad tracking in your device settings (iOS/Android).

  • Email tracking pixels: you can disable image loading in your email client.

6) Your Rights

Depending on where you live, you may have rights to:

  • Access, correct, or delete personal data

  • Object to or restrict certain processing

  • Withdraw consent (where processing is based on consent)

  • Data portability (copy of your data in a machine-readable format)

California (CCPA/CPRA): you may request to know, delete, or correct personal information, and to opt-out of “sharing” for cross-context behavioral advertising. We do not sell personal information. We do not “share” personal information of minors under 16.

To exercise rights, email support@cambrian-labs.com. We may need to verify your request.

7) Sharing Information

We do not sell personal information. We share limited data with service providers who process it on our behalf and under contract, such as:

  • Email & landing pages: Mailchimp (form hosting, email delivery, list management)

  • Analytics/diagnostics: Google/Firebase Analytics, Crashlytics, (optionally) Flurry

  • Advertising/measurement: Meta (for ad measurement and reach; not used for child-directed profiles)

  • Hosting & security: website/app hosting, cloud providers, fraud prevention

We may disclose information if required by law or to protect rights, safety, and security.

8) International Transfers

We may transfer information to countries outside of your own (e.g., to the United States). Where required, we use appropriate safeguards (such as Standard Contractual Clauses).

9) Retention

  • Email marketing data: until you unsubscribe or your address bounces, then archived for suppression/compliance

  • Support emails: as long as needed to resolve your request

  • App analytics/crash data: typically 14–26 months (provider defaults)

  • Ad measurement logs: per partner policy and legal requirements

We minimize and anonymize where feasible.

10) Security

We use administrative, technical, and physical safeguards to protect information. No method of transmission or storage is 100% secure.

11) Third-Party Links

Our Services may link to third-party sites or services. Their privacy practices govern their services; please review their notices.

12) Changes to This Policy

We may update this Policy from time to time. We will post the new effective date at the top and, where required, notify you.

13) Children’s Privacy Notice (COPPA)

This section applies to Apps directed to children (generally under age 13 in the U.S., under 16 in some regions).

What we collect in child-directed Apps

We design child-directed experiences to avoid collecting personal information from children. We do not require account creation. We do not collect names, precise locations, contact details, or persistent identifiers for behavioral advertising.

We may collect limited, anonymous device and app data strictly for internal operations such as:

  • crash reports and performance metrics (e.g., Crashlytics)

  • aggregated analytics (e.g., Firebase Analytics configured for child-directed use)

  • device type, OS version, language, time zone

  • non-precise location (country/region derived from IP)

These data are used to maintain and improve the App, ensure it works on different devices, and fix bugs.

No behavioral ads

We do not serve interest-based/behavioral advertising in child-directed Apps. We do not “sell” or “share” children’s personal information.

Parental contact only

If an email address is needed (for example, to deliver a requested download or newsletter), we collect the parent’s/caregiver’s email only. We use it for that purpose and you may unsubscribe at any time.

Support requests

If a child contacts us, we will use the information only to respond once, then delete it. If a parent contacts us, we may retain the message to resolve the request.

Parental rights

Parents may review or delete their child’s information and refuse further collection by contacting support@cambrian-labs.com. We may take reasonable steps to verify the requester is the child’s parent.

14) Region-Specific Disclosures

  • United States / COPPA: We comply with the Children’s Online Privacy Protection Act for child-directed Apps.

  • EEA/UK (GDPR/UK GDPR): You may contact us at support@cambrian-labs.com to exercise your rights. If you believe we have not addressed your request, you may lodge a complaint with your local supervisory authority.

  • California (CCPA/CPRA): We do not sell personal information. To opt-out of “sharing” for cross-context behavioral advertising on the website, contact us at support@cambrian-labs.com (and/or use our cookie settings where available).

15) Contact

Questions or requests about this Policy?
Email: support@cambrian-labs.com
Postal: Cambrian Labs B.V. – The Netherlands