Effective Date: 14-Nov-2025
Notice Version: 1.1

This privacy notice is designed for parents, guardians, and young users. It explains, in simple terms, how we handle children’s personal data worldwide.

Who We Are

Eunoia Accessible Transport LLC
P.O. Box 90046, Dubai, United Arab Emirates
Email: ea.ytilibomaionueobfsctd-20fe32@ycavirp

Scope and Definitions

• The terms “us”, “we”, and “our” refer to Eunoia Accessible Transport LLC, operating under the trade name Eunoia Mobility.
• “Child” means a user below the age set by the laws where the user lives.
• United States: under 13 years old (COPPA).
• European Union and the United Kingdom: generally, a child under 16 (Some countries set 13–16 as the age of consent.)
• Elsewhere: we make strong efforts to follow local rules. When we rely on consent, we use reasonable efforts to verify that the person giving consent is the child’s parent or guardian.

If we are unsure about a user’s age, we use age‑assurance measures based on risk.

What we collect

We collect only what we need to run the service. Examples:

• Account details (first name or username, parent/guardian name, and contact).
• Basic usage data (app or site events, time and date, simple device info).
• Location signals when needed for a feature (not precise GPS unless necessary and allowed).
• Support messages you or your parent/guardian send us.
• School-provided information when a school authorizes student use.

We do not intentionally collect sensitive data about children (such as health, biometrics, exact location, or government IDs) unless it is necessary for the feature, permitted by law, and approved by a parent/guardian.

How We Use Children’s Data

What We Will Not Do

• No sale or sharing of children’s data for advertising.
• No targeted or behavioral advertising.
• No manipulative “dark-pattern” features designed to prolong use.
• No unnecessary collection of precise geolocation or telemetry.

Cookies, SDKs, and Notifications

• Child accounts default to essential cookies and SDKs only.
• Push notifications that promote extended use are disabled for child accounts.
• Where consent is required for non-essential cookies or SDKs, we obtain it from the correct person (parent/guardian or child at/above legal age).

Parental or Guardian Consent & Age Assurance

Where consent is required, we make reasonable efforts to verify that the person giving consent is the child’s parent or guardian. Accepted methods may include:

• Small-value credit/debit card verification with notice.
• Government‑ID check with a face‑match or equivalent identity check.
• Signed consent form returned via email or secure upload.
• A brief live video call check.
• For strict educational use, written authorization from a school official acting as the parent’s agent, with direct notice to the parent.

We calibrate age assurance to the risks of the feature and avoid collecting more data than necessary for this purpose.

School-Provided Use (Education Only)

When a school authorizes student use for an educational purpose, the school may provide consent in the parent’s place for that purpose only. We provide direct notice to parents and give both the school and parents a way to access, review, and delete the student’s information.

Children’s rights and parent tools

• Access: parents/guardians can see the child’s information.
• Deletion: parents/guardians can ask us to delete the child’s information.
• Correction: parents/guardians can request a correction of inaccurate information.
• Withdrawal of Consent: parents/guardians may withdraw consent at any time. 

International Transfers and Security

• We may store or process data in countries other than where you live.
• When the law requires it, we use legally recognized data transfer tools.
• We use encryption in transit and at rest, role‑based access controls, audit logging, and other safeguards adapted for children’s data.
• If required, we notify parents/guardians and regulators about certain personal‑data incidents.
  

How Long We Keep Children’s Data

• We keep children’s personal data only as long as needed to provide the service.
• Unless the law requires longer, we delete or irreversibly de‑identify a child’s data within 30 days after a verified parental deletion request or account closure, or after 12 months of inactivity—whichever comes first.

Regional Notes

• United States (COPPA): under‑13 requires verifiable parental or school official consent.
• European Union and UK: child’s consent for information society services generally requires parental authorization until the local digital‑consent age (13–16).

• Brazil (LGPD): parental consent is needed for processing children’s data, and we apply the best‑interests principle.
• Canada (including Québec Law 25): we obtain parental/tutor consent where required (under 14 in Québec).
• Australia: consent is capacity‑based; we take a conservative approach and use parental consent when in doubt.
• United Arab Emirates and Saudi Arabia: we apply conservative safeguards and obtain parental or guardian consent consistent with local rules and guidance.

How to Contact Us

Questions or requests: ea.ytilibomaionueobfsctd-8d2b4a@ycavirp

Changes to this notice