Effective date: 24 August 2026

This Privacy Policy explains how personal data is collected, used, stored and otherwise processed when you use the PlayroomNearby mobile application, the Playroom Nearby website and related services (together, the “Service”).

1. Data Controller

The Service is operated by:

Maria KuznetsovaStudentski trg 411000 BelgradeRepublic of Serbia

Email: info@playroom-kids.rs

Maria Kuznetsova is the data controller responsible for the processing of personal data described in this Privacy Policy.

Questions and requests concerning personal data may be sent to the email address above.

2. Scope of this Privacy Policy

This Privacy Policy applies to:

• the PlayroomNearby mobile application;
• the Playroom Nearby website at playroom-kids.rs;
• user accounts;
• Favourites, ratings and reviews;
• maps and location-based functionality;
• analytics;
• contact and partner communications;
• related functionality operated by PlayroomNearby.

3. Who the Service is for

PlayroomNearby is primarily intended for parents, guardians and other adults looking for playrooms, activities, classes, events, playgrounds and other family-friendly places and services.

You must be at least 18 years old to create a PlayroomNearby account.

The Service is not intended for children to create or manage accounts.

We do not require users to create profiles for their children and do not intentionally request a child's name, surname, date of birth, photograph, home address or other information intended to identify a particular child.

Using an age filter to find suitable activities does not create a profile of a child.

4. Personal Data We Process

4.1 Account and authentication data

To create a PlayroomNearby account, you provide:

• an email address;
• a password.

PlayroomNearby uses Supabase Auth to provide account authentication.

We also process technical information necessary to operate the account, including:

• an internal user identifier (UUID);
• email verification and authentication information;
• account creation and update timestamps;
• authentication and session information.

Passwords are handled by Supabase Auth and are stored in hashed form rather than as readable plain-text passwords.

We do not require your:

• name or surname;
• nickname;
• telephone number;
• date of birth;
• information identifying your child

to create a standard PlayroomNearby account.

PlayroomNearby does not use Google Sign-In or Sign in with Apple for standard user registration.

4.2 Favourites

Registered users may save playrooms, activities and other listings to Favourites.

To provide this functionality, we may process:

• your internal user ID;
• the identifier of the place or activity you saved;
• information necessary to add or remove a listing from Favourites.

This information may also be used to generate aggregated statistics about the popularity of listings.

Playrooms and activity organizers do not receive your email address or identity merely because you add their listing to Favourites.

4.3 Likes, dislikes, ratings and reviews

Registered users may be able to submit likes, dislikes, ratings and written reviews.

For this functionality, we may process:

• your internal user ID;
• the relevant place or activity;
• your rating or like/dislike choice;
• review text;
• date and time information;
• moderation status.

Reviews intended for public display are subject to pre-publication moderation.

A submitted review may be approved or rejected before publication.

Your email address will not be displayed publicly together with a review.

We may reject or remove reviews that violate our Terms of Use or moderation rules.

4.4 Precise location data

The PlayroomNearby mobile application may request permission from your device's operating system to access your precise location.

Location is used to provide location-based functionality, such as helping identify playrooms, activities and other places near you.

Location access is optional.

You may refuse location permission or disable it later through your device settings.

In the current implementation:

• precise device coordinates are not stored in the PlayroomNearby database;
• precise device coordinates are not added to your PlayroomNearby account;
• the application does not send your precise location to a separate geolocation service.

Location information is obtained from the device operating system for the purpose of providing location-based functionality.

If our handling of precise location changes materially in the future, this Privacy Policy will be updated before or when the new processing begins.

4.5 Mobile application analytics

PlayroomNearby uses Google Analytics for Firebase / Google Analytics 4 (“GA4”) on supported platforms to understand how the application is used and improve the Service.

At the effective date of this Privacy Policy, Firebase Analytics is enabled in the Android application and disabled in the current iOS configuration.

The Android application currently records analytics relating to functionality such as:

• navigation between application screens;
• use of the “Show on map” functionality;
• likes and dislikes;
• basic application usage and analytics information automatically generated by the analytics service.

PlayroomNearby does not intentionally send your email address to GA4.

Your PlayroomNearby/Supabase UUID is also not currently sent to GA4.

As a result, our current analytics implementation is not designed to associate your GA4 activity with your registered PlayroomNearby account.

If materially different analytics events or identification methods are introduced, we will update this Privacy Policy as appropriate.

4.6 Analytics consent

Where consent is required for analytics processing, PlayroomNearby requests the appropriate consent before carrying out such processing.

We may store a record of your analytics consent preference in order to remember and respect your choice.

Where consent is the legal basis for processing, you may withdraw it at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

4.7 Website analytics and cookies

The PlayroomNearby website uses Google Analytics 4 (“GA4”) to understand website usage and improve the Service.

GA4 may use cookies or similar browser technologies, including information such as:

• a Google Analytics Client ID used to distinguish browsers or devices;
• session or state information associated with the Analytics property;
• website pages viewed and related interaction information.

Analytics cookies are not necessary for the basic operation of the website.

Where prior consent is required, analytics cookies and similar non-essential technologies are activated only after you provide the relevant consent.

You may refuse or withdraw consent for non-essential analytics technologies through the cookie or consent controls provided on the website.

Refusing analytics cookies does not prevent you from using the basic PlayroomNearby website.

4.8 Contact and partner communications

If you contact PlayroomNearby through a website form, by email or through another contact channel, we process the information you provide.

Depending on the form or communication, this may include:

• your name;
• email address;
• subject;
• message;
• information you voluntarily provide.

Messages submitted through PlayroomNearby website forms may be transmitted to and stored in the project's email inbox.

We use this information to respond to your request and manage communications with users, playrooms, activity providers and potential partners.

4.9 Professional contact data relating to organizers

PlayroomNearby maintains information about playrooms, activity providers and other organizations listed in the Service.

We may process professional or business contact information relating to representatives of such organizations, including:

• professional or business names;
• business telephone numbers;
• professional email addresses;
• professional roles;
• publicly available business information.

This information may be obtained directly from the relevant organization or from lawful publicly available sources such as official websites or public business profiles.

We use this information to:

• create and maintain listings;
• verify and correct listing information;
• communicate with venues and organizers;
• manage PlayroomNearby's directory and partner relationships.

Where reasonably possible, we prefer general business contact information over unnecessary personal information concerning individual representatives.

5. Maps and External Map Resources

PlayroomNearby uses mapping technology including MapLibre and map data based on OpenStreetMap.

For the current Serbia implementation, map resources are hosted in infrastructure that includes Supabase Storage, including PlayroomNearby map files and related resources.

OpenMapTiles-related resources may also be used.

Certain web map resources may be loaded from third-party content-delivery infrastructure such as unpkg.com.

When your browser or device connects directly to an external provider to request a technical resource, that provider may receive standard network information associated with the request, such as an IP address and request information.

PlayroomNearby may also allow you to explicitly open directions in Google Maps.

Google Maps is not the embedded PlayroomNearby map provider. If you choose to open Google Maps, you leave the PlayroomNearby environment and your use of Google Maps is subject to Google's own privacy practices.

6. Why We Process Personal Data

We process personal data for the following purposes and legal bases.

6.1 Providing your account and requested functionality

We process account data, Favourites, ratings and reviews where necessary to provide the Service and functionality requested by you.

The legal basis is generally the performance of our agreement with you under the Terms of Use.

6.2 Location-based functionality

Where precise location is used, it is processed only after you choose to enable the relevant location functionality and grant the applicable device permission.

Where required by applicable law, the legal basis is your consent.

6.3 Analytics

We use analytics to understand how the Service is used, identify technical and usability issues and improve PlayroomNearby.

Where applicable law requires consent for such analytics processing, we rely on your consent.

6.4 Moderation and security

We process information where necessary to:

• moderate reviews;
• prevent spam and abuse;
• investigate violations of our Terms of Use;
• maintain the security and integrity of the Service;
• protect users and third parties.

The legal basis may include our legitimate interests in maintaining a safe, secure and reliable Service.

6.5 Communications

We process information submitted through contact channels to respond to you and manage communications.

Depending on the circumstances, the legal basis may be taking steps at your request, performance of an agreement, or our legitimate interest in responding to users and business contacts.

6.6 Maintaining the activity directory

We may process professional business contact information on the basis of our legitimate interest in maintaining an accurate and useful directory of family activities and communicating with relevant organizations.

6.7 Legal obligations and claims

We may process personal data where necessary to comply with applicable law or a valid legal request, or to establish, exercise or defend legal claims.

7. Service Providers and Recipients

We use third-party technology and infrastructure to operate PlayroomNearby.

7.1 Supabase

We use Supabase for functionality including:

• authentication;
• user accounts;
• database services;
• Favourites;
• likes, dislikes, ratings and reviews;
• storage;
• map-related files and resources;
• backend functionality relating to account deletion.

Our current Supabase project is hosted in the Central EU region in Frankfurt, Germany.

7.2 Google Analytics / Firebase

Google Analytics and Firebase Analytics are used for analytics as described in this Privacy Policy.

At the effective date:

• GA4 is used on the PlayroomNearby website;
• Firebase Analytics is enabled in the Android application;
• Firebase Analytics is disabled in the current iOS configuration.

7.3 Google-hosted email

Contact and partner communications sent through the Service may be received and stored in PlayroomNearby's Google-hosted project email account.

7.4 Google Fonts and technical resources

Some versions of the Service may load fonts or other technical resources from Google Fonts or other external resource providers.

When such resources are loaded directly, the relevant provider may receive ordinary network-request information.

7.5 Map-related infrastructure

The Service uses MapLibre/OpenStreetMap-based mapping technology and related map resources.

Some map files and resources are hosted through Supabase Storage.

Certain resources used by the web version may be delivered through third-party content-delivery services.

8. Information We Do Not Provide to Organizers

Merely interacting with a listing, adding it to Favourites, rating it or reviewing it does not give the relevant playroom or activity provider access to your:

• email address;
• password;
• Supabase UUID;
• identifiable analytics profile;
• precise device location;
• individual Favourites history.

PlayroomNearby may provide organizers with aggregated or non-identifying information, for example the total number of users who have added a listing to Favourites.

If you choose to contact an organizer directly using contact information displayed in PlayroomNearby, that communication takes place between you and the organizer.

9. No Sale of Personal Data

PlayroomNearby does not sell registered users' email addresses, account data, Favourites or identifiable analytics profiles to playrooms, activity organizers, advertisers or other partners.

A commercial relationship between PlayroomNearby and an organizer does not by itself give the organizer access to individual users' personal data.

10. International Processing

PlayroomNearby operates from Serbia and uses service providers that may process information internationally.

Our current Supabase project is hosted in Frankfurt, Germany.

Other technology providers may process information in countries in which they or their subprocessors operate.

Where applicable data-protection law requires safeguards for an international transfer of personal data, PlayroomNearby will use the applicable lawful transfer mechanism.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was processed, or for a longer period where required or permitted by applicable law.

In particular:

• account data is retained while your account remains active;
• Favourites and account-linked interactions are retained while necessary to provide the relevant functionality;
• reviews and moderation information are retained while necessary to operate and protect the review system;
• analytics data is retained according to the retention configuration of the relevant Analytics service;
• contact correspondence is retained for as long as reasonably necessary to deal with the relevant communication or relationship;
• information may be retained for a limited additional period where necessary for security, fraud prevention, dispute resolution, legal claims or compliance with law.

After the relevant retention purpose expires, personal data is deleted or anonymized.

Data may remain temporarily in technical backups until those backups are overwritten in the ordinary backup lifecycle.

12. Account Deletion

You may request deletion of your PlayroomNearby account.

PlayroomNearby provides a way to initiate account deletion from within the application and through a publicly accessible web resource.

Account deletion includes deletion or irreversible anonymization, as applicable, of personal data associated with the account that PlayroomNearby is not required or permitted to retain.

This includes, as applicable:

• your PlayroomNearby authentication account;
• email address associated with the account;
• internal account UUID;
• Favourites;
• likes and dislikes;
• ratings and reviews associated with the account.

Information may be retained where necessary to comply with law, resolve disputes, prevent fraud or abuse, establish or defend legal claims, or where temporarily contained in routine backups.

Contact correspondence that exists independently of your PlayroomNearby account may not automatically be deleted together with the account. You may separately exercise your applicable data-protection rights in relation to such correspondence.

We may take reasonable steps to verify that a deletion request was made by the relevant account holder.

13. Your Data Protection Rights

Subject to applicable law, you may have the right to:

• receive information about the processing of your personal data;
• obtain access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing based on legitimate interests;
• withdraw consent where processing is based on consent;
• request portability of data where applicable;
• lodge a complaint with a competent supervisory authority.

You may exercise your rights by contacting:

info@playroom-kids.rs

Users in Serbia may also lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (Poverenik).

14. Children's Privacy

PlayroomNearby helps adults discover places and activities for children but is not designed for children to create accounts.

Users under 18 must not create PlayroomNearby accounts.

Please do not include unnecessary identifying information about children in reviews, contact messages or other content submitted to PlayroomNearby.

If we become aware that identifying personal information about a child has been submitted inappropriately, we may remove it.

15. Security

We use reasonable technical and organizational measures intended to protect personal data against unauthorized access, disclosure, alteration, loss or destruction.

Account authentication is provided through Supabase Auth.

No method of electronic transmission or storage can guarantee absolute security.

You are responsible for keeping your password confidential and should contact us if you believe your account has been compromised.

16. Changes to PlayroomNearby

PlayroomNearby may introduce or modify functionality in the future.

If a change materially affects what personal data we collect, how it is used or with whom it is shared, we will update this Privacy Policy as appropriate.

This includes material changes to functionality such as new analytics practices, notification systems, payment functionality or different methods of processing location information.

17. Changes to the Data Controller

PlayroomNearby may in the future be operated through a registered company or another legal structure.

If responsibility for personal data is transferred to another data controller, this Privacy Policy will be updated and users will be informed where required by applicable law.

18. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to:

• the Service;
• our technology;
• service providers;
• data-processing practices;
• legal or regulatory requirements.

The current version will be available through the PlayroomNearby website and/or application.

Where required by law, we will provide appropriate notice of material changes.

19. Contact

For privacy questions, requests or complaints, contact:

Maria Kuznetsova
PlayroomNearby / Playroom Nearby
Studentski trg 4
11000 Belgrade
Republic of Serbia

Email: info@playroom-kids.rs