KuliMuli: SensoryPlay Privacy Policy
Last updated: September 1, 2026
This Privacy Policy explains how Gražina Mikalauskienė, operating as an individual under an individual activity certificate in Lithuania ("KuliMuli", "we", "us" or "our"), collects, uses, stores and protects personal data in connection with the KuliMuli: SensoryPlay mobile application (the "App" or "Service").
KuliMuli: SensoryPlay is designed for parents and caregivers aged 18 or older. The activities available through the App are intended for children, but children are not intended to create or manage accounts or use the Service independently.
For privacy-related questions or requests, you can contact us at:
Email: info@kulimuli.net
Website: app.kulimuli.net
Location: Vilnius, Lithuania
1. Who the App Is For
KuliMuli: SensoryPlay is intended for adult parents and caregivers.
Children are not intended to create accounts, provide information directly to us or manage profiles themselves.
An adult account holder may voluntarily create a profile for a child in order to use the App's activity, planning, tracking and developmental features.
By adding information about a child, the account holder confirms that they are the child's parent, legal guardian, caregiver, or otherwise have the authority to provide and manage that information.
2. Information We Collect
We collect only information that is reasonably necessary to provide and operate the Service.
2.1 Account and Authentication Information
To create and access an account, we may process:
Email address
Account identifier
Authentication information
Login provider information
Users may create or access an account using:
Email and password
Sign in with Google
Sign in with Apple
Email and password authentication is handled through Supabase.
Google authentication is provided through Google OAuth and Supabase.
Sign in with Apple is provided through Apple's authentication services. Depending on the user's choice, Apple may provide KuliMuli with the user's actual email address or an Apple private relay email address.
We do not have access to a user's Apple or Google account password.
3. Child Profile Information
An adult user may create one or more child profiles.
Information associated with a child profile may include:
Child's name or nickname
Age in months
Gender
Optional profile photo
Developmental skills or progress
Favourite activities
Sensory preferences
Completed activities
Notes written by the parent or caregiver
Activity-related history
This information is provided and managed by the adult account holder.
Child Profile Photos
Uploading a child's photograph is completely optional.
Users may choose a predefined profile image instead of uploading a photograph.
If a user chooses to upload a child profile photo, the image is stored using our Supabase infrastructure and associated with the relevant child profile.
The App requests photo access only for functionality related to selecting or uploading the profile image.
4. Notes and Custom Activities
Users may enter their own information into the App, including:
Notes relating to activities or development
Custom activity titles or descriptions
Activity-related observations
This information is stored as part of the user's account data.
Please Do Not Store Medical Information
KuliMuli: SensoryPlay is an activity and developmental play application. It is not a medical service, health record system or diagnostic tool.
Free-text fields are intended for ordinary activity and developmental observations.
Please do not enter medical records, medical diagnoses, detailed health information or other sensitive information that is not necessary for using the App.
5. Activity and Usage Information
As users interact with the App, we may store information necessary to provide its features, including:
Favourite activities
Completed activities
Activity history
Developmental progress selected or recorded in the App
Sensory preferences
Custom activities
Notes
Subscription status
This information is linked to the user's account where necessary to provide the Service.
6. How We Use Personal Data
We use personal data to:
Create and maintain user accounts
Authenticate users
Provide access to the App
Create and manage child profiles
Save favourites, activities, notes and progress
Store and synchronize user information
Provide activity-related and profile-related functionality
Manage Premium access and subscription status
Process account deletion requests
Send password reset emails
Maintain the security and reliability of the Service
Respond to support or privacy requests
Comply with applicable legal obligations
We do not use child profile information for advertising.
7. Legal Bases for Processing
Where the General Data Protection Regulation ("GDPR") or similar laws apply, we process personal data on one or more of the following legal bases.
Performance of a Contract
We process information necessary to provide the Service requested by the user, including account management, authentication, profiles, activity history, notes, favourites and subscription functionality.
Consent
Where appropriate, we rely on the user's choice or consent for optional processing.
For example, uploading a child's profile photograph is optional. Users may choose a predefined profile image instead and may remove or replace an uploaded photograph.
Where processing is based on consent, consent may be withdrawn at any time without affecting processing that was lawful before withdrawal.
Legitimate Interests
We may process limited information where necessary for legitimate interests such as:
Protecting account security
Preventing misuse
Maintaining the Service
Diagnosing operational problems
Protecting our legal rights
We do not rely on legitimate interests where those interests are overridden by the rights and interests of the individual concerned.
Legal Obligations
We may process or retain limited information where required to comply with applicable law, regulatory requirements, court orders or other legal obligations.
8. Analytics, Advertising and Tracking
As of the date of this Privacy Policy, KuliMuli: SensoryPlay does not use third-party analytics services for user behaviour analytics.
The App currently does not contain third-party advertising.
We do not use personal data for cross-app behavioural advertising or advertising tracking.
We do not sell personal data.
If we introduce advertising, analytics or additional tracking technologies in the future, this Privacy Policy and any applicable App Store or Google Play privacy disclosures will be updated before such processing is introduced. Where required by law, users will be provided with appropriate choices or consent mechanisms.
9. AI-Generated Content
Some activity reference images displayed in KuliMuli: SensoryPlay may have been created with the assistance of Google Gemini during the content creation process.
These images are generated by KuliMuli or its developer before being made available to users.
Gemini does not receive KuliMuli user account information or child profile information.
In particular, we do not send Gemini:
Child names
Child ages
Gender
Child photographs
Sensory preferences
Developmental progress
Parent notes
Favourite activities
Completed activity history
User email addresses
Gemini is therefore not used to analyse individual users or children through the App.
10. Subscriptions and Payments
KuliMuli may offer paid Premium features.
Subscriptions may be purchased through:
Apple App Store
Google Play
RevenueCat subscription infrastructure
Payments are processed by Apple or Google through their respective payment systems.
KuliMuli does not receive or store credit card or debit card numbers.
We receive only information necessary to determine and manage subscription access, such as subscription status and transaction-related information.
RevenueCat is used to help manage subscriptions and determine whether a user has access to Premium features.
Apple, Google and RevenueCat may process information independently in accordance with their own terms and privacy policies.
Deleting a KuliMuli account does not necessarily cancel an active Apple App Store or Google Play subscription. Users should manage or cancel subscriptions through their Apple or Google account where applicable.
11. Third-Party Service Providers
We use a limited number of external service providers to operate the App.
Supabase
Supabase provides infrastructure used for:
User authentication
User accounts
Database storage
Child profile information
User-created information
Profile image storage
Our primary Supabase project is hosted in the North EU (Stockholm, Sweden) region.
Apple
Apple may process information when users:
Use Sign in with Apple
Purchase or manage an App Store subscription
Google may process information when users:
Use Sign in with Google
Purchase or manage a Google Play subscription
RevenueCat
RevenueCat is used to manage subscription entitlements and subscription-related transaction information.
Airtable
Airtable is used to store the App's general activity catalogue and activity-related content.
We do not intentionally store user account data, child profiles or other user personal data in Airtable.
We only provide service providers with information necessary for the relevant service to function.
12. Sharing and Disclosure of Information
We do not sell or rent personal data.
We may disclose limited personal information:
To service providers that operate necessary parts of the App
Where the user specifically requests or authorises disclosure
Where required by applicable law, regulation, legal process or governmental request
Where reasonably necessary to protect the security, rights or integrity of KuliMuli, its users or others
Service providers process information according to their applicable agreements, privacy commitments and legal obligations.
13. International Data Transfers
KuliMuli is operated from Lithuania.
Our primary Supabase database is hosted in Stockholm, Sweden, within the European Union.
Some other service providers, including global technology and payment providers, may process information in countries outside Lithuania or outside the European Economic Area.
Where GDPR requirements apply to international transfers of personal data, appropriate safeguards are used where required, such as applicable adequacy decisions, contractual protections or Standard Contractual Clauses.
14. Data Retention
We retain account and profile information while an account remains active and while the information is necessary to provide the Service.
Users can delete information from the App where relevant and can delete their entire account.
When an account is deleted, personal data associated with the KuliMuli account is deleted from our active systems, including, as applicable:
Account information
Email address
Child profiles
Child profile photographs
Activity history
Completed activities
Favourites
Developmental progress
Sensory preferences
Notes
Custom activities
Other account-linked information
Limited residual copies may temporarily remain in routine system backups until those backups are overwritten or deleted.
Information may also be retained where required by law or where reasonably necessary to establish, exercise or defend legal claims.
Apple, Google, RevenueCat or other independent providers may retain subscription or transaction information according to their own legal obligations and retention policies.
15. Account Deletion
Users may delete their account directly inside the KuliMuli: SensoryPlay App using the Delete Account functionality.
Account deletion permanently removes the user's KuliMuli account and associated user and child-profile information from our active systems.
This action cannot normally be reversed.
Deleting an account does not necessarily cancel an App Store or Google Play subscription. Subscription cancellation should be managed separately through the relevant Apple or Google subscription settings.
Users may also contact us at info@kulimuli.net regarding privacy or deletion questions.
16. Your Privacy Rights
Depending on where you live, applicable privacy law may provide you with rights relating to your personal data.
Under the GDPR, these may include the right to:
Request access to personal data we hold about you
Request correction of inaccurate or incomplete information
Request deletion of personal data
Request restriction of certain processing
Object to certain processing
Receive certain information in a portable format
Withdraw consent where processing is based on consent
Obtain information about how personal data is processed
Because an adult account holder provides information relating to a child, the parent or other authorised person may also contact us regarding personal data associated with a child profile they manage.
Requests can be submitted to:
We may need to verify the identity or authority of the person making a request before fulfilling it.
Where GDPR applies, users also have the right to lodge a complaint with the relevant data protection supervisory authority, including the Lithuanian State Data Protection Inspectorate.
Residents of other jurisdictions may have additional rights under their applicable local privacy laws.
17. Children's Privacy
KuliMuli: SensoryPlay is designed for adult users aged 18 or older.
Children are not intended to:
Create KuliMuli accounts
Manage accounts
Submit information directly to KuliMuli
Purchase subscriptions
The App is designed so that an adult parent or caregiver manages any information relating to a child.
A parent or caregiver may voluntarily provide limited information about a child to use profile, activity and progress-related functionality.
Providing a child's photograph is optional and is never required to use a child profile because predefined profile images are available.
Parents and caregivers should provide only information that is reasonably necessary to use the App and should avoid entering sensitive medical or health information.
If we become aware that a child has created an account or directly submitted personal information without appropriate adult involvement, please contact us at info@kulimuli.net so that we can investigate and take appropriate action.
18. Data Security
We take reasonable technical and organisational measures designed to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.
These measures include the use of authenticated accounts, access controls and secure cloud infrastructure.
However, no online service, storage system or electronic transmission method can guarantee absolute security.
Users are responsible for protecting their account credentials and should not share their password with others.
19. Password Reset and Communications
KuliMuli does not currently use account information to send marketing emails or newsletters.
Email communications relating to the account are limited primarily to necessary service communications, such as password reset emails.
If marketing communications are introduced in the future, we will provide any consent and unsubscribe mechanisms required by applicable law.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, for example when:
New features are introduced
New service providers are added
Advertising or analytics functionality changes
Applicable legal requirements change
When the Policy is updated, the Last updated date at the top of this page will be changed.
Where required by law, we will provide additional notice or request consent before materially different processing begins.
Users are encouraged to review this Privacy Policy periodically.
21. Contact Us
The data controller responsible for KuliMuli: SensoryPlay is:
Gražina Mikalauskienė
Individual activity, Lithuania
Email: info@kulimuli.net
Website: app.kulimuli.net
Location: Vilnius, Lithuania
For questions about privacy, personal data, account deletion or exercising data protection rights, please contact:
