Privacy Policy

1. Who We Are

Bolbala is a product of Solve For Why Pte. Ltd., a company incorporated in Singapore. When this policy mentions "Bolbala," "we," "us," or "our," it refers to Solve For Why Pte. Ltd.

For any privacy-related inquiries, you can contact us at hello@solveforwhy.org.

2. Information We Collect

Information you provide directly:

When you subscribe, sign up for our newsletter, or contact us, we may collect your name, email address, and any message content you choose to share. If you subscribe to a paid plan, payment information is collected and processed directly by our payment processor (Stripe) — we do not store your credit card details on our servers.

Information collected automatically:

When you visit our website, we may automatically collect certain technical information such as your IP address (used for currency localisation and anonymised analytics), browser type and version, device type, operating system, pages visited and time spent, and referring website or source. We use this information to improve the service and understand how families use Bolbala.

Cookies and similar technologies:

We use essential cookies required for the website to function (such as maintaining your login session). For analytics, we use Plausible Analytics, a privacy-respecting analytics tool that does not use cookies, does not collect personal data, and is fully compliant with GDPR, CCPA, and COPPA. Plausible provides us with aggregate usage statistics (such as page views and referral sources) without tracking individual visitors. We do not use advertising or tracking cookies.

3. How We Use Your Information

We use the information we collect to provide and maintain the Bolbala service, process subscriptions and payments, send you important service updates (such as changes to our terms), respond to your inquiries and support requests, improve our content and user experience, detect and prevent fraud or abuse, and comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Children's Privacy

Bolbala is a content platform designed for children, but the subscription and account are managed by a parent or legal guardian. We do not knowingly collect personal information directly from children under the age of 13 (or the applicable age in your jurisdiction).

Children interact with Bolbala content (stories, games, videos) without creating their own accounts. All account management, payment, and communication happens through the parent's account.

If you believe we have inadvertently collected personal information from a child, please contact us at hello@solveforwhy.org and we will promptly delete it.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases:

Contract: Processing necessary to provide you with the Bolbala service and fulfil our subscription agreement with you.

Legitimate interest: Processing necessary for our legitimate interests, such as improving the service, preventing fraud, and understanding how families use Bolbala — provided these interests are not overridden by your rights.

Consent: Where we rely on your consent (e.g. for marketing emails), you may withdraw consent at any time by contacting us or using the unsubscribe link in our emails. Note: our analytics provider (Plausible) does not use cookies and does not require consent.

Legal obligation: Processing necessary to comply with applicable laws and regulations.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you. Correction: Request that we correct inaccurate or incomplete data. Deletion: Request that we delete your personal data (subject to legal retention requirements). Portability: Request your data in a structured, machine-readable format. Objection: Object to processing based on legitimate interests. Restriction: Request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, please contact us at hello@solveforwhy.org. We will respond within 30 days (or sooner where required by law).

For California residents (CCPA/CPRA):

You have the right to know what personal information we collect and how it is used, to request deletion of your personal information, to opt out of the sale of your personal information (we do not sell personal information), and to not be discriminated against for exercising your privacy rights.

For Singapore residents (PDPA):

Under Singapore's Personal Data Protection Act, you have the right to access and correct your personal data held by us. You may withdraw consent for the collection, use, or disclosure of your personal data at any time by contacting us.

7. Data Sharing and Third Parties

We share your data only with the following categories of service providers, and only as necessary to operate Bolbala:

Stripe — payment processing. Stripe's privacy policy: stripe.com/privacy.

Hosting and infrastructure providers — to serve the website and store data securely.

Plausible Analytics — privacy-respecting, cookie-free web analytics. Plausible does not collect personal data or track individual users. See plausible.io/data-policy.

We may also disclose your information if required by law, regulation, or legal process, or if necessary to protect our rights, property, or the safety of our users.

8. International Data Transfers

As a globally available service, your data may be transferred to and processed in countries other than your country of residence. Where we transfer data outside the EEA or UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the service. If you cancel your subscription and request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes.

Newsletter sign-up data is retained for as long as you remain subscribed, or for up to 24 months of inactivity, unless you request earlier deletion.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure payment processing via Stripe (PCI DSS compliant), access controls limiting who can access personal data, and regular review of our security practices.

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if you have an account) or by posting a notice on our website prior to the change becoming effective. Your continued use of Bolbala after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Solve For Why Pte. Ltd.
160 Robinson Road, #14-04, Singapore Business Federation Center, Singapore 068914
Email: hello@solveforwhy.org
General enquiries: hello@solveforwhy.org