Privacy policy
Updated 23 October 2026
Lele & Friends is made by iPaha Ltd. We designed it to collect as little data as possible, especially about children. This policy explains what we collect, why, where it is kept and your rights.
What we collect
Parents: a phone number (to text you a sign-in code), and an email address if you choose to sign in by email.
Activated books: the activation code you enter (stored only as a one-way hash), the book and its access period.
Children (when child profiles launch): only a nickname, a chosen avatar, an age band and learning progress. We never collect a child’s real name, photo, voice or location.
Security: IP addresses are stored only as a keyed hash, to prevent abuse and limit repeated attempts.
Why we use it
To sign you in, activate books, give your family access to what you bought, help you when you contact us and keep the service safe.
We show no advertising, sell no data and never use children’s data for marketing.
Cookies
We only use necessary cookies: your sign-in session and, during the preview period, the preview-password cookie. No advertising cookies.
Service providers
Google Cloud (Singapore): servers and database. Vercel: website hosting. Upstash (Singapore): attempt limits. Cloudflare: domain and bot protection. eSMS (Vietnam): sign-in text messages.
They process data only on our instructions, to run the service.
Keeping and deleting data
We keep account data while your account is active. You can ask to see, correct or delete your data at any time; we act within 30 days.
Your rights
You have the right to be informed, to access, correct and delete your data, to withdraw consent and to complain, under Vietnam’s personal data protection law. Parents decide for their children.
Contact
For any privacy question, email info@leleandfriends.com. If this policy changes we will update the date above and tell you in your account.