Privacy Policy

Atarrodo Inc. Privacy Policy

Effective Date: 11/19/2025

Last Updated: 11/19/2025

Contact: contact@atarrodo.com

Website: https://atarrodo.com/

Table of Contents

• Introduction
• Scope
• Key Definitions
• Information We Collect
• How We Collect Information
• How We Use Information
• Legal Bases for Processing (EU/EEA/UK)
• Children’s Privacy and COPPA Compliance
• Cookies, Tracking & Targeted Advertising
• Third Parties and Sharing of Information
• International Data Transfers
• Data Security
• Data Retention
• Your Rights (GDPR, CCPA/CPRA & Other Consumer Privacy Laws)
• How to Exercise Your Rights
• Data Protection Officer & Contact Details
• California, Colorado, Connecticut, Utah, Virginia & Other U.S. State Privacy Notices
• Changes to This Privacy Policy
• Additional Disclosures & Legal Notices
• How to File a Complaint

1. Introduction

Atarrodo Inc. ("Atarrodo," "we," "our," or "us") provides an online learning platform and services that make African languages and cultural content accessible and enjoyable for learners worldwide (the "Services"). We respect your privacy and are committed to protecting the personal information we collect about you. This Privacy Policy explains what information we collect, why we collect it, how we use it, with whom we share it, your choices, and how we protect it.

This Privacy Policy applies to individuals who visit https://atarrodo.com/ and use our Services, whether as guests or registered users, including learners, parents or legal guardians, teachers, administrators, and visitors.

By using our Services, you accept the practices described in this Privacy Policy. If you do not agree, do not use our Services.

2. Scope

This policy covers all personal data collected by Atarrodo through our website, mobile apps, APIs, widgets, social media pages, emails and other online or offline interactions. It applies regardless of where you live (we serve a global audience) and explains how we comply with relevant laws, including but not limited to the EU GDPR, UK GDPR, U.S. COPPA, Canada’s PIPEDA, South Africa’s POPIA, Nigeria’s NDPR, and U.S. state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA).

3. Key Definitions

• Personal Data / Personal Information: Any information that identifies, relates to, describes, or is capable of being associated with an identified or identifiable natural person.
• Sensitive Personal Data: Special categories of personal data that may require additional protections (e.g., health data, racial or ethnic origin). We do not intentionally collect sensitive personal data except where explicitly disclosed and with appropriate consent.
• Processor: A third party that processes personal information on our behalf.
• Controller: The entity that determines the purposes and means of processing personal information (Atarrodo, in most cases).
• Parent / Guardian: For users who are children under the age of 13 (or the age set by local law), this is the person authorized to provide consent on behalf of the child.

4. Information We Collect

We collect information needed to deliver and improve our Services. The categories below summarize the types of personal information we may collect.

1. A. Account & Identity Data
   • Name, username, display name
   • Email address
   • Date of birth (to verify age)
   • Gender (optional)
2. B. Contact Data
   • Billing and postal address (if you make purchases)
   • Phone number (if provided)
3. C. Payment & Transaction Data
   • Payment card or instrument information (collected and processed by third-party payment processors), billing information, purchase history, invoices
4. D. Profile & User Content
   • Profile photos, avatars, bio, language preferences, learning progress, uploaded files, recordings, messages, assignments, comments and other content you choose to provide
5. E. Usage, Technical & Device Data
   • IP address, device identifiers, browser type/version, operating system, app version, device model, unique device identifiers, crash logs
   • Usage data such as pages visited, features used, session length, interactions with content, quiz results, progress metrics
6. F. Location Data
   • Approximate geographic location inferred from IP address and self-reported location (we do not collect precise GPS location unless you explicitly grant permission in the product and we disclose why)
7. G. Cookies, Tracking & Advertising Identifiers
   • Cookies, pixels, tags, advertising IDs, and similar technologies (see Section 9)
8. H. Communications Data
   • Correspondence and messages between you and Atarrodo (email, chat logs, support tickets)
9. I. Children’s Information
   • For child accounts, we may collect the child’s name, date of birth, and username. Where required by law (for example COPPA in the U.S.), we collect parental contact information and obtain verifiable parental consent before collecting, using, or disclosing personal information from children under the age of 13.
10. J. Other Information
    • Any other information you provide when you contact us, complete forms, participate in surveys, contests, promotions, or provide content to the Services.

5. How We Collect Information

We collect information through several channels:

• Directly from you: When you register for an account, subscribe, contact support, upload content, complete forms, or otherwise interact with our Services.
• Automatically: When you use our Services — via cookies, log files, analytics, and other automated technologies.
• From third parties: Service providers (e.g., payment processors, identity verification providers), advertising partners, analytics providers, social networks, and other third-party platforms.

6. How We Use Information

We use personal information for the following primary purposes:

1. a) To Provide, Operate & Improve the Services
   • Create and manage your account
   • Personalize learning content and recommendations
   • Deliver features such as progress tracking, quizzes, and interactive lessons
   • Process purchases, subscriptions, refunds and provide customer support
   • Maintain and improve platform security and performance
2. b) Communication & Notifications
   • Send transactional messages (registration, account, billing, technical notices)
   • Respond to support inquiries and communications
   • Send product updates, newsletters and promotional messages where you have consented or where permitted by law
3. c) Safety & Legal Compliance
   • Verify age and parental consent for child accounts
   • Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service
   • Comply with legal obligations and law enforcement requests
4. d) Marketing & Advertising
   • Provide tailored and non-tailored advertising (subject to parental consent requirements for children and applicable law)
   • Measure and analyze ad effectiveness and campaign performance
5. e) Research & Analytics
   • Conduct analytics and aggregated research to improve content, curricula, and user experience

We only use your information for the purposes described at the time of collection or as otherwise permitted by law.

7. Legal Bases for Processing (EU/EEA/UK)

If you are located in the EU/EEA or UK, Atarrodo relies on these legal bases for processing your personal data:

• Performance of a contract: Processing necessary to provide the Services you request (e.g., account creation, subscription management).
• Legal obligation: Compliance with legal obligations (e.g., record-keeping, responding to lawful requests).
• Consent: Where we ask for and obtain your consent (e.g., marketing emails, cookies not strictly necessary for service operation).
• Legitimate interests: For certain internal business purposes such as fraud prevention, platform security, and improving the Services, where such interests are not overridden by your rights.

8. Children’s Privacy and COPPA Compliance

Atarrodo is a platform that serves a global audience and is directed to or may be used by children. We are committed to protecting the privacy of children and complying with applicable laws such as the U.S. Children’s Online Privacy Protection Act (COPPA) and other local child privacy laws.

1. A. Advertising to Children & Age-Appropriate Design

   We may advertise and provide age-appropriate content to children under the age of 13 in jurisdictions where we operate. However, we do not engage in behavioral profiling of children for targeted advertising without verifiable parental consent.

2. B. Parental Controls & Verifiable Parental Consent

   For users who are under the age of 13 (or the age specified by local law), we require verifiable parental consent before collecting personal information beyond what is considered "non-personal" under COPPA.

   Methods we may use to obtain verifiable parental consent include: sending a consent request to a parent’s email address, requiring a signed consent form, a credit card or other payment method transaction (only as a method of verification for consent and not for charging without authorization), phone call, or government ID verification. We will minimize the personal data we collect from children and only retain it for as long as necessary for the activity for which it was collected.

3. C. Parent Rights & Controls

   Parents may: (1) review their child’s personal information, (2) request deletion of their child’s personal information, (3) revoke consent and opt-out of future collection and use, and (4) refuse the collection or use of their child’s information.

   To exercise these rights, parents should contact us at contact@atarrodo.com and include proof of parent/guardian identity and relationship to the child. We will respond in accordance with applicable law.

4. D. Content & In-App Purchases for Children

   Any third-party advertising, offers, or in-app purchases presented to children will be clearly labeled and follow applicable legal requirements to obtain consent where necessary.

9. Cookies, Tracking & Targeted Advertising

We and our partners use cookies and similar technologies to collect information about your device and usage patterns.

• A. Types of Cookies & Trackers
  • Strictly necessary cookies: Required for core platform functionality.
  • Performance & analytics cookies: Help us understand how our Services are used and measure performance.
  • Functionality cookies: Remember preferences and settings.
  • Advertising & targeting cookies: Used to deliver ads and measure campaign effectiveness.
• B. Managing Cookies

  You can control or disable cookies through your browser settings, device settings, or via our cookie consent manager (where present). Disabling some cookies may limit functionality.

• C. Advertising & Third-Party Partners

  We work with advertising networks and analytics providers to deliver and measure ads. For users in the EU/UK, we process non-essential cookies and trackers only with consent. For children under applicable age thresholds, we will not use behavioral targeting without parental consent.

10. Third Parties and Sharing of Information

We do not sell your personal information. We may share your information with the following categories of third parties for the purposes described below:

• A. Service Providers & Processors

  Payment processors, hosting providers, email providers, analytics and performance providers, customer support, identity verification, and other vendors who perform services on our behalf.

• B. Advertising & Analytics Partners

  Ad networks, data-management platforms, analytics providers, and measurement partners that help us deliver and measure advertising and understand usage.

• C. Legal & Safety Disclosures

  To comply with laws, lawful requests by public authorities, to protect the rights and safety of Atarrodo, our users, or others, or to detect or prevent fraud.

• D. Business Transfers

  If Atarrodo is involved in a merger, acquisition, asset sale, financing, or similar transaction, personal information may be transferred as part of that transaction. We will notify users of any material change in ownership or control of personal data.

• E. Aggregated & De-identified Data

  We may aggregate or de-identify data for research, analytics, or to improve the Services. Aggregated or truly de-identified data is not considered personal information and may be used freely.

• F. International Disclosures

  Because we operate globally, we may disclose personal information to third parties located in countries other than your own (see Section 11).

11. International Data Transfers

Atarrodo operates globally and may transfer personal information to countries whose data protection laws are different from those in your country. When we transfer personal information from the EEA or UK to countries not deemed adequate by the EU/UK, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs), Binding Corporate Rules (where applicable), and other lawful transfer mechanisms. A copy of our data transfer safeguards is available upon request.

12. Data Security

We implement reasonable administrative, technical, and physical security measures designed to protect the personal information we process. These measures include encryption in transit (TLS), access controls, regular security reviews, and industry-standard security practices.

While we strive to protect your information, no system is 100% secure. If a data breach occurs that creates a reasonable risk of harm to you, we will comply with applicable breach notification laws and inform affected users and authorities as required.

13. Data Retention

We retain personal information only for as long as necessary to provide our Services, fulfill the purposes for which we collected it, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods vary by data type and purpose; examples include:

• Account information and profile data: retained until the account is deleted plus any additional period required to comply with legal obligations or to resolve disputes.
• Transaction and billing records: retained for tax and accounting purposes in accordance with applicable laws.
• Support and communications: retained as long as needed to provide support and maintain records.

You may request deletion of your account and associated data (see Section 15). Where deletion is not possible due to legal requirements, we will restrict access to the data and disclose the reason for retention.

14. Your Rights (GDPR, CCPA/CPRA & Other Consumer Privacy Laws)

Depending on your location, you may have certain rights regarding your personal information, including:

EU/UK (GDPR)

• Right of access to the personal data we hold about you
• Right to rectification of inaccurate personal data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing, including profiling
• Right to withdraw consent where processing is based on consent

U.S. Residents (CCPA/CPRA and Similar Laws)

• Right to know the categories and specific pieces of personal information we collect, disclose, or sell
• Right to request deletion of personal information
• Right to opt-out of sale/sharing of personal information (we do not sell personal information as defined by CCPA/CPRA, but we may share data for advertising purposes; if you are in California you may opt-out as described in Section 15)
• Right to non-discrimination for exercising privacy rights

Other Jurisdictions

Residents of other jurisdictions may have rights under local laws (e.g., Brazil’s LGPD, Canada’s privacy laws, South Africa’s POPIA, Nigeria’s NDPR). We will honor applicable rights.

15. How to Exercise Your Rights

To exercise your rights, please contact us at contact@atarrodo.com with the subject line that indicates the request (e.g., "Data Access Request", "Request to Delete", "Do Not Sell/Share My Info"). Please provide sufficient details to allow us to verify your identity and locate the relevant information. We may request additional information to confirm identity.

For California residents: include "California Privacy Request" in the subject line. We provide two ways to submit verifiable requests: email address (contact@atarrodo.com) or toll-free number [Insert Toll-Free Number if applicable].

We will respond to verifiable requests in accordance with applicable law. Typical response times are within one (1) month for GDPR (may be extended by two months in complex cases) and 45 days for CCPA/CPRA (extensions allowed in certain situations).

16. Data Protection Officer & Contact Details

If you have questions about this Privacy Policy or how we handle your personal information, please contact us:

• By email: contact@atarrodo.com
• Postal address: [Insert Company Address]

If you are in the EU/EEA or UK and wish to contact our Data Protection Officer (if applicable), please contact us at contact@atarrodo.com and we will provide DPO contact information where required.

17. California, Colorado, Connecticut, Utah, Virginia & Other U.S. State Privacy Notices

To the extent required by state laws, this section provides additional notice to residents of certain U.S. states.

Categories of Personal Information Collected

In the last 12 months, we have collected the following categories of personal information: identifiers, contact information, account data, payment information, usage data, profile data, and inferences drawn from any of the above.

Sources of Collection

We collect information directly from you, automatically from your device, and from third parties.

Purposes of Collection

We collect personal information to provide, maintain and improve our Services, for security and fraud prevention, to communicate with you, and for our legitimate business interests as described in this policy.

Do Not Sell or Share My Personal Information

We do not sell personal information as defined under CCPA/CPRA. If you are a California resident and wish to opt out of sharing for targeted advertising, please contact us at contact@atarrodo.com with the subject line "Do Not Sell/Share My Personal Information" and we will honor your request.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or product offerings. When we make significant changes, we will post a prominent notice on our Services and update the "Last Updated" date above. Your continued use of the Services after such changes will constitute your consent to the revised policy.

19. Additional Disclosures & Legal Notices

• a) Third-Party Links

  Our Services may contain links to third-party websites and services whose privacy practices may differ from ours. We are not responsible for third-party practices; review their privacy policies before providing personal information.

• b) Data Processing Addendum (DPA)

  For organizations that require a Data Processing Addendum (for GDPR compliance), we offer a DPA that governs our processing of personal data on behalf of customers. To request a copy, contact us at contact@atarrodo.com.

• c) Subprocessors

  We may engage subprocessors to perform data processing activities on our behalf (e.g., hosting, analytics, payments). A list of subprocessors is available upon request by contacting contact@atarrodo.com.

20. How to File a Complaint

If you are unsatisfied with our response to a privacy-related request or believe we have not complied with applicable privacy law, you may:

• Contact us at contact@atarrodo.com with details of your complaint.
• File a complaint with a competent data protection authority in your jurisdiction (for example, a supervisory authority in the EU/EEA or the ICO in the UK).

Parental & Guardian Contact Procedure (Quick Reference)

If you are a parent or guardian and would like to exercise rights on behalf of your child (such as to review, delete, or withdraw consent), please email contact@atarrodo.com with:

• Child’s name and username
• Parent/guardian name and contact details
• Proof of identity for parent/guardian
• Description of the request

We will respond with steps for verification and action to comply with applicable law.

Closing Note

We take privacy seriously and aim to be transparent about our practices. If anything in this policy is unclear or if you need assistance exercising your rights, please reach out to us at contact@atarrodo.com.

Atarrodo Inc.

Appendix A: Enhanced COPPA Compliance (Children Under 13)

We take extra steps to protect the privacy of children under 13. This section explains our practices in simple, parent-friendly language.

What Information We Collect From Children

• First name or nickname
• Parent or guardian email (for consent and communication)
• Learning progress, quiz scores, and activity logs
• Device information that helps the platform function (like IP address or browser type)

How We Use Children’s Information

• To personalize learning content
• To measure progress and provide rewards/badges
• To maintain safety and prevent misuse
• To notify parents about their child’s account or activities

Parental Rights

Parents may at any time:

• Review the personal information collected from their child
• Request that we delete the child’s data
• Withdraw consent and have the account deactivated

To exercise parental rights, contact contact@atarrodo.com.

How We Obtain Verifiable Parental Consent

Depending on your region, we may use:

• Email verification
• Credit card or ID-based verification
• Signed consent forms
• Parent login dashboards

Appendix B: GDPR & UK GDPR Regional Addendum

If you are located in the European Union or the United Kingdom, the following rights apply:

Legal Bases for Processing

We process your data under:

• Consent (e.g., newsletters, cookies)
• Contractual necessity (e.g., account creation)
• Legal obligations (e.g., safety or fraud prevention)
• Legitimate interest (e.g., improving platform functionality)

GDPR/UK GDPR Rights

You have the right to:

• Access your data
• Correct inaccurate information
• Request deletion ("Right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To request any of these, email contact@atarrodo.com.

EU/UK Data Transfers (SCC compliance)

If we transfer data outside the EU or UK, we rely on:

• Standard Contractual Clauses (SCCs) approved by the EU Commission
• UK International Data Transfer Agreements (IDTA)
• Additional technical safeguards such as encryption

Appendix C: Canadian PIPEDA Addendum

If you reside in Canada, your data rights under PIPEDA include:

• Knowledge and consent for collection and use
• Access to your personal data
• The right to challenge inaccuracies
• The right to withdraw consent

We do not share personal data with third parties without your permission unless legally required.

Appendix D: African Regional Data Protection Clauses

Nigeria (NDPR)

• Residents of Nigeria have:
• The right to data privacy
• The right to correction, deletion, and portability
• The right to be informed about third-party transfers

South Africa (POPIA)

• Residents have the right to:
• Access their personal information
• Correct or delete personal information
• Object to processing for direct marketing

We operate in compliance with POPIA principles of transparency, minimality, and security.

Appendix E: U.S. State Privacy Notices (CCPA, CPA, VCDPA, CTDPA, UTPA)

For residents of California, Colorado, Virginia, Connecticut, and Utah, these additional rights apply:

Your Rights

• Right to know what data we collect
• Right to request deletion
• Right to correct inaccuracies
• Right to opt out of data sharing or targeted advertising
• Right to access your personal information

California residents also have:

• The right to know categories of third parties we share data with
• Protection against discriminatory treatment for exercising privacy rights

How to Submit Requests

Email contact@atarrodo.com or submit a request through your account settings.

Verification

Before fulfilling a privacy request, we may need to verify your identity by:

• Email confirmation
• Device verification
• Account login verification

Parent & User-Friendly Summary (Easy Read Version)

We want parents and users of all ages to feel safe and confident using Atarrodo. Here’s a simple breakdown:

What We Collect

• Basic account details (name, email)
• Learning progress
• Device info that helps the app work smoothly

Why We Collect It

• To personalize your learning
• To keep your account safe
• To improve the platform

Who We Share It With

Only trusted partners who help us run Atarrodo, such as hosting providers. We never sell children's personal data.

Your Rights

You can ask us to:

• Show you the data we have
• Update or fix information
• Delete your data
• Remove your child’s account

Just email contact@atarrodo.com.

How to Stay Safe

• We encourage parents to:
• Participate in the learning experience
• Review progress and settings
• Contact us with any concerns

Your family’s safety is our highest priority.

If you have questions about this Privacy Policy or your rights, please contact us at:

Atarrodo Inc.

Email: contact@atarrodo.com

Website: https://atarrodo.com