Privacy Policy

Last updated: November 11, 2026

Who we are

Planet Pooyah (the app and website) is run by Sam Kazemi ("we", "us"). We are responsible for the personal information described in this policy. If you have a question or request, contact us:

This policy explains what we collect, why, who we share it with, how long we keep it, and the choices and rights you have. It applies to the Planet Pooyah apps for iPhone and Android, the website, and our emails. Please also read our Terms of Use.

Children and parents

Planet Pooyah teaches the Persian alphabet and Iranian heritage to children, mainly ages 5 to 14. Only a parent or legal guardian aged 18 or older may create an account. When signing up, they confirm that they are the parent or guardian of the child who will use the app. Children use Planet Pooyah through that grown-up's account and cannot make their own.

With Planet Pooyah+, the grown-up can add up to 3 more learners to their account, for 4 in all. Only the grown-up can add or remove a learner, after a grown-ups check. An added learner has no email address or password: it can only be opened on a device where the grown-up is signed in.

We don't ask children for personal information. The app has no place where a child can type their name, write messages, post anything others can see, or upload pictures. If we learn that we have collected personal information from a child in a way this policy doesn't describe, we will delete it.

What we collect

From the parent or guardian, when you create an account

• Email address, to sign in, confirm the account, reset a forgotten password and send account messages.
• Password. We store only a secure, one-way scrambled form (a hash), never the password itself.
• If you sign in with Google or Apple: your email address and an account number from Google or Apple. We never see your Google or Apple password. Apple may give us a private relay address instead of your real email.
• Your confirmation that you are the parent or guardian, and when you gave it.

About the learner, when the grown-up sets up the app

• An age range (5–7, 8–10, 11–14 or 15+), not a birth date.
• How much Persian they already know, and how familiar they are with Iranian culture, picked from a few choices.
• Why they're learning (for example “Connect with family” or “Just for fun”) and a daily goal of 1, 2 or 3 lessons, picked from a few choices.

We use these only to shape the app for the learner: where they start, the daily goal they see, the wording of reminders, and bigger lesson text for ages 5–7. We never ask for a child's name, birth date, photo, school or address.

While the child learns

• Learning progress: lessons finished, points, streak days, hearts used, the energy and shop items earned and used, which quiz questions were missed (to build “Fix my mistakes” practice), and which lessons were completed in Legendary.
• A made-up username built from two words on our list plus a number (for example "GoldenCheetah27"). It is never the child's real name, and nobody else can see it.
• Avatar choices made from the app's ready-made options.

This is saved to the parent's account so progress follows the family from one device to another. If the account has more than one learner, we keep the information in this section and the one above separately for each learner, and nothing more.

If you subscribe to Planet Pooyah+

Payments are handled by Stripe. You enter your card on Stripe's secure page, and we never see or store your full card number. We keep your Stripe customer number, your plan, whether the subscription is active, trial and renewal dates, and the card type and last four digits if Stripe shares them with us.

Settings

Whether you want our announcement emails (off unless you turn them on), whether you want the weekly progress report (Planet Pooyah+ only; on unless you turn it off), and whether you have confirmed your email address.

The weekly progress report (Planet Pooyah+)

Each Sunday we email the grown-up a short report on each learner in the account. For each one it shows their made-up username and, for the past week, how many days they practiced and how many lessons and practice sessions they finished, plus their current streak, total points, Legendary crowns and how many questions they have to review. It is built only from the learning progress above; we collect nothing new for it. It goes only to the account's email address. Turn it off in Settings or with the link in any report.

Collected automatically

• A sign-in token: a random code that keeps a device signed in. It is used only to run the app, never to track anyone or show ads.
• Crash reports when something breaks: the error message, technical details about where in the code it happened, which screen it was on, the kind of device (web, Android or iPhone) and the app version. Crash reports are not linked to any account, and we don't store an IP address with them.
• Basic connection information. Like every internet service, our servers receive the device's IP address and basic browser or device details with each request. We use them to deliver the app and keep it secure, for example to block too many sign-in attempts.
• Links in our emails. When you open a link from one of our emails (to confirm your address or unsubscribe), your browser gets a cookie that the page needs to work. We store a short-lived record of the visit, with the IP address and browser type, which is deleted automatically when it expires. We use no other cookies.

Kept only on your device

The app saves some things on the device itself (in the browser's storage on the website): the sign-in token (and, while an added learner is open, that learner's own sign-in token), a copy of the open learner's progress, the light or dark theme, reminder settings and which announcements have been shown. Daily practice reminders are set up on the device by the phone's own notification system; we don't send them from our servers. Signing out removes the account's data from the device.

What we never collect

No precise location, contacts, photos, camera or microphone recordings. No chat, messaging or public profiles. No third-party analytics, advertising trackers or advertising IDs.

How we use information

• To provide Planet Pooyah: sign-in, lessons, saving and syncing progress, and starting at the right level.
• To run Planet Pooyah+ subscriptions and free trials.
• To send account emails you need, such as confirming your email address and resetting your password, and announcement emails only if you turn them on.
• To send Planet Pooyah+ parents the weekly progress report, unless they turn it off.
• To find and fix bugs, using crash reports.
• To keep the service secure and prevent abuse.
• To meet legal obligations.

We do not use children's information to build profiles, for targeted or behavioral advertising, or to make automated decisions with legal or similarly significant effects.

Sponsor messages

The free version may show a card labeled "Sponsored" after some lessons. Everyone sees the same sponsor messages, chosen without using any information about the child. Sponsor pictures come from our own servers, so sponsors receive no information when their message is shown. We count only the total number of times each message is shown and tapped, never who saw or tapped it. A sponsor's website opens only after a grown-ups check that young children can't easily answer. Planet Pooyah+ has no sponsor messages.

Who we share information with

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We never give children's information to anyone for their own purposes. We share information only:

• With service providers that run Planet Pooyah for us: our hosting and database provider and our email delivery provider. They may use it only to provide their service to us, under contracts that require them to protect it.
• With Stripe, if you subscribe, to process payments. Stripe also uses payment information as described in Stripe's privacy policy, for example to prevent fraud and meet financial laws.
• With Google or Apple, only if you choose to sign in with them. Their own privacy policies cover what they do.
• When the law requires it, or to protect the safety and rights of children, families, Planet Pooyah or others.
• If Planet Pooyah is sold or merged with another business. We would tell you before your information moved, and this policy would still protect it. You could delete your account instead.

How long we keep information

• Account and learning progress: for as long as the account exists. When you delete the account in Settings, we remove the account, every learner in it, their progress, their sign-ins and the subscription records from our systems right away, and any Planet Pooyah+ subscription is canceled at once so you are never charged again.
• Added learners: removing a learner in Settings deletes that learner and their progress right away. If Planet Pooyah+ ends, added learners can't be opened, but we keep their progress so it's there if you subscribe again, until you remove them or one of the rules here deletes them.
• Unused accounts: if nobody signs in to or uses an account for 2 years and it has no active Planet Pooyah+ subscription, we delete it automatically, with everything above. An account is kept while any learner in it is still being used, and an added learner nobody has used for 2 years is deleted on its own.
• Crash reports: deleted 90 days after the crash last happened.
• Password reset links stop working after 60 minutes and are deleted with the account.
• Our server error logs are kept for up to 14 days.
• Payment records: Stripe keeps records of payments for as long as financial laws require, under Stripe's privacy policy.
• Backups: if our hosting keeps backup copies, deleted information disappears from them when they are replaced, within 30 days.

Your choices and rights as a parent

• See the information: the Profile and Settings screens show what we keep. Email us for a full copy.
• Correct it: change the username and avatar in the app, or email us.
• Delete it: Settings › Delete account, or email us. This deletes every child's information too. To delete just one added learner, use Settings › Family › Remove.
• Stop further collection: delete the account. Because progress is the app, we can't run an account without it.
• Emails and reminders: turn announcement emails, the weekly progress report and practice reminders on or off in Settings. Every announcement email and weekly report also has a one-click unsubscribe link.

We will never require a child to give more information than the app needs to work. To protect your family, we answer requests sent from the account's email address, or after confirming you hold the account.

If you are in the European Union or the United Kingdom

Sam Kazemi is the controller of your personal data. We rely on these legal bases: contract (to provide the account, lessons and any subscription you ask for, including the extra learners and the weekly progress report that come with Planet Pooyah+), legitimate interests (security, fixing bugs, and showing the same non-personalized sponsor messages to everyone), consent (announcement emails and practice reminders, which you can withdraw at any time in Settings), and legal obligation.

You have the right to access, correct, delete, restrict or object to the use of your data, to receive it in a portable format, and to withdraw consent. You can also complain to your local data protection authority (in the UK, the Information Commissioner's Office). We answer requests within one month.

Our servers and service providers may be in the United States. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses for these transfers.

If you live in California or another US state with privacy laws

You can ask to know what personal information we have about you and your child, ask us to correct or delete it, and you will not be treated differently for using these rights. We do not sell or share personal information for targeted advertising, and we do not use sensitive personal information to infer anything about you. In the past 12 months we collected identifiers (email address, account numbers, IP addresses), subscription information, and app activity (learning progress), for the purposes described above. We answer requests within 45 days.

Do Not Track: we don't track people across other websites or apps, so we have nothing to change when a browser sends a Do Not Track signal. We don't share personal information with others for their direct marketing.

Security

We protect information with encrypted connections (HTTPS), scrambled passwords, limited access and limits on repeated attempts. No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

Changes to this policy

When we change this policy, we update the date at the top. If a change is important, we will email parents before it takes effect. If we ever want to collect or use children's information in a new way, we will ask for a parent's permission first.

Contact us