Effective date: 2026-06-23 (update to your actual publish date)
This privacy policy applies to the Pidgin Dictionary app for mobile devices, together with any related services operated by Okisse Global (collectively, the "Application"). Okisse Global is hereby referred to as the "Service Provider."
Registered Address: Okisse Global Flat 12, Floor 3, Building 163, Street 207, Block 2, Mahboula, Kuwait
[WORTH CONFIRMING] I don't have any record of "Okisse Global" being a formally registered business entity from our conversation — if it's an individual/sole-proprietor operation rather than an incorporated company, some jurisdictions (notably under GDPR) may still expect the policy to disclose that distinction, or to name the actual responsible individual alongside the trading name. Worth a quick check with whoever handles your business registration, if anyone does.
The Application collects information when you download and use it. This may include:
Your device's Internet Protocol (IP) address
The pages/screens of the Application that you visit, the time and date of your visit, and the time spent on those pages
The time spent using the Application overall
Your mobile operating system and device type
If you create an account, the Application also collects:
Your email address
Your first name and family name (and middle name, if you choose to provide one)
Your password (stored securely; the Service Provider does not store passwords in plain text)
If you enable two-factor authentication via SMS, your phone number
If you submit a word or proverb contribution, the Application may also collect:
The text content you submit (words, proverbs, meanings, example sentences)
Voice audio recordings you choose to provide for pronunciation purposes
If you subscribe to a paid plan, payment processing is handled entirely by our third-party payment processor (see "Third Party Access" below) — the Service Provider does not directly collect or store your full payment card details.
The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.
You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at info@pidgindictionary.com.
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at info@pidgindictionary.com.
The Service Provider may use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.
The Application relies on the following third-party services to operate. Each processes certain personal data on the Service Provider's behalf, subject to their own privacy policies:
Supabase — backend infrastructure, including account authentication, user profiles, contribution data, and database storage.
Stripe — payment processing and subscription billing. Stripe handles your payment card details directly; the Service Provider does not receive or store full card numbers.
Resend — delivery of transactional emails (such as password reset codes, email verification, and subscription notifications).
Twilio — delivery of SMS messages, if you choose to enable SMS-based two-factor authentication.
Google Play Services — required platform services for Android devices.
Apple App Store Services — required platform services for iOS devices.
Only aggregated, anonymized data is periodically transmitted to other external services to aid the Service Provider in improving the Application. The Service Provider may share your information with third parties in the ways described in this privacy statement.
The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms, including:
Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions or other legally recognized transfer mechanisms
Your consent, where required and legally permitted
Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.
The Service Provider may disclose User Provided and Automatically Collected Information:
as required by law, such as to comply with a subpoena or similar legal process;
when the Service Provider believes in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
with trusted service providers who work on the Service Provider's behalf, do not have an independent use of the information disclosed to them, and have agreed to adhere to the rules set forth in this privacy statement.
You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.
To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at info@pidgindictionary.com.
User details are used for the duration of your use of the Application. Cancelling your subscription ends recurring billing and reverts your account to free-tier access — it does not delete your account or your data.
If you want your account and personal data deleted entirely, you may request this separately at any time, whether or not you have an active subscription, by contacting info@pidgindictionary.com. The Service Provider will personally review and complete such deletion requests within 30 days.
Aggregated and Anonymized Data: Retained indefinitely, as it no longer identifies you.
Data required for legal compliance: Retained as long as required by applicable law.
[CONFIRM THE TIMEFRAME] "Within 30 days" is a default I've kept from the previous version — a reasonable, commonly used commitment, but change it if you want something faster or slower. Whatever number is here should be one you can realistically keep, since an unenforced promise is its own compliance risk.
[OPERATIONAL REALITY CHECK] This is a manual process, so it depends on you actually receiving and acting on deletion requests sent to info@pidgindictionary.com — there's no code today that tracks or reminds you of a pending request's 30-day clock. If you want, I can build a simple way to log incoming deletion requests with their due date, so this doesn't rely purely on memory.
[STILL OPEN] One question from before remains, now scoped specifically to actual account-deletion requests rather than cancellations: should a deleted user's past dictionary contributions (approved words/proverbs other users may currently be viewing) be deleted with them, anonymized, or left in place? Worth deciding explicitly before you process your first real deletion request.
Age requirements for using the Application without parental or guardian consent vary by country. The Service Provider applies the following thresholds based on current law in key markets, and the higher applicable age requirement for your country of residence:
Nigeria (Nigeria Data Protection Act, 2023): A "child" is defined as a person under 18 years of age. Parental or guardian consent is generally required for the processing of personal data of anyone under 18, subject to specific rules the Nigeria Data Protection Commission may issue for users aged 13 to 17 who directly request online information or services.
United States (Children's Online Privacy Protection Act — COPPA): Parental consent is required to collect personal data from children under 13 years of age.
United Kingdom (UK GDPR / Data Protection Act 2018): The threshold for a child's own consent to data processing is 13 years of age; parental consent is required below that age.
European Union (GDPR, Article 8): The default age is 16, though individual EU member states may set their own threshold between 13 and 16. The applicable age depends on which EU country you reside in.
All other jurisdictions: The Application is not intended for use by anyone below the minimum age required under applicable local law, whichever is higher.
[CONFIRM BEFORE PUBLISHING] I've grounded the figures above in current law for Nigeria, the US, UK, and EU specifically, since those are the most likely jurisdictions relevant to this app. This list is not exhaustive — if you expect meaningful numbers of users in other specific countries (e.g., elsewhere in Africa, Asia, or Latin America), have someone confirm the correct threshold for those markets too before publishing. Given this is an educational language-learning app that could plausibly attract school-age users (e.g., through classroom use in Nigeria), I'd treat this entire section as one worth a real legal review rather than relying solely on this summary.
The Service Provider does not knowingly solicit data from children below the applicable age threshold or market the Application to them. The Service Provider does not knowingly collect personally identifiable information from such children in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information without the required consent, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider at info@pidgindictionary.com so that the necessary action can be taken.
The Service Provider is concerned about safeguarding the confidentiality of your information and provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.
The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.
Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at info@pidgindictionary.com.
Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.
If you have any questions regarding privacy while using the Application, or have questions about these practices, please contact the Service Provider via email at info@pidgindictionary.com.