Z-Kids Privacy Policy
What the Z-Kids games collect, what they never collect, why, how long it is kept and how a parent can have it all deleted.
Stricter than the law, because the players are children.
Six rules shape every decision about data in a Z-Kids game. They are commitments, not aspirations.
Collect the minimum
If a game runs without a piece of data, the game does not ask for it.
No behavioural advertising
No ad networks that profile children, and no device advertising identifier.
Never sold
No one pays us for access to a child's data, in any form, ever.
Parents in control
A parent can see it, correct it, or have all of it deleted — within 30 days, free.
No real identity
No real name, address, school or phone number. A nickname is not an identity.
Protected properly
Encryption in transit, least privilege, MFA on every administrative account.
In brief: Z-Kids is made for children, so we collect as little as a game can run on. We never sell personal data, we never show behavioural advertising, we never ask a child for their real name or address, and a parent can have everything we hold deleted by writing to us.
Last updated: 4 August 2026
Who this policy covers
This policy explains how Z-SOFT CO., LTD (“Z-SOFT”, “we”, “us”) handles personal data in Z-Kids — the games and apps we publish under the Z-Kids name, and the Z-Kids pages of this website. Z-Kids is under active development; this policy describes the platform as it is being built and is updated as features ship.
Throughout this policy, “parent” means a parent or legal guardian, and “child” means the person playing the game. Z-SOFT's general website privacy policy covers the rest of this site; for Z-Kids, this page prevails wherever the two differ.
What we collect
| Source | Data | Why it exists |
|---|---|---|
| Playing a game | Progress, level reached, scores, in-game settings, and the avatar and nickname chosen in the game. | Without it a game cannot resume where the child left off. |
| The device | Device model, operating-system version, language and country setting, and a random identifier the app generates for itself. | It is what tells us a crash affects one device model and not the game. |
| Diagnostics | Crash reports, error messages, and coarse counts of which screens and features are used. | Bugs a child cannot describe have to be visible in a log instead. |
| Purchases, where a game offers them | The app store's confirmation that a purchase happened, which item it was and when. Never the card number, and never the payer's bank details. | It is how a purchase is delivered and how a refund can be checked. |
| An optional account | A parent's email address, used to secure the account and to recover progress on a new device. | Provided by a parent, and only where a game offers an account at all. |
| Writing to us | The name, email address and message a parent sends to support. | You send it to us so we can reply. |
What we never collect
- Precise location. Z-Kids does not ask for location permission.
- Contacts, the photo library, the microphone or the camera.
- The device advertising identifier (IDFA on iOS, Advertising ID on Android). We do not use it, so we do not request it.
- Sensitive personal data — health, biometric identifiers, religious or political views.
- A child's real name, home address, school, phone number or date of birth. Where a game needs to know an age bracket, it asks for a year of birth or nothing at all.
Nicknames are shown inside the game, so please choose one that is not the child's real name. We may change a nickname that discloses personal information.
What we never do
- We do not sell, rent or trade personal data. There is no arrangement under which anyone pays us for access to it.
- We do not show behavioural advertising and we do not embed advertising networks that profile children.
- We do not use children's data to train public AI models.
- We do not open a child to contact from strangers. If a Z-Kids game ever introduces messaging or any other social feature, it will be described here, and behind a parental gate, before it ships.
Why we use what we collect
- To run the game and keep a child's progress, settings and purchases where they left them.
- To keep the game working: reproducing crashes, fixing bugs and measuring whether an update made performance better or worse.
- To deliver a purchase, and to check a purchase when a parent asks about one.
- To keep the platform safe — detecting abuse, cheating and fraudulent purchases.
- To answer a parent's request and to meet the accounting, tax and legal obligations that apply to us.
The basis we rely on, and parental consent
We process the essentials — progress, device and diagnostic data — because without them the game cannot be provided or kept safe, which is the service a parent asked us for. Anything beyond the essentials is optional and asks first.
Where the law requires a parent's consent before a child's data is processed — Vietnam's Decree 13/2023/ND-CP for children under 16, the Children's Online Privacy Protection Act in the United States for children under 13, and Article 8 of the GDPR in the European Economic Area — Z-Kids asks for it through a parental gate before that feature is enabled, and a parent can withdraw it at any time.
Who we share it with
We use a small number of service providers. Each one acts on our instructions under a written contract, may use the data only to provide its service to us, and may not use it for its own purposes.
| Who | What they do | What they see |
|---|---|---|
| App stores (Apple App Store, Google Play) | Distribute the app and take every payment. | Their own account and payment data, under their own privacy policies. We receive only a purchase confirmation. |
| Cloud infrastructure | Runs the servers that store accounts and progress. | Whatever is stored, encrypted in transit and at rest where the platform supports it. |
| Crash and diagnostics tooling | Collects crash reports and error traces. | Device model, OS version, the app's own random identifier and the technical state at the moment of the crash. |
| Email and support | Carries correspondence with parents. | Only what a parent writes to us. |
We also disclose data where the law requires it — a valid order from a competent authority — and we tell the parent unless we are legally barred from doing so. If Z-SOFT is ever part of a merger or acquisition, this policy travels with the data and any change is announced here first.
Where it is stored
Z-Kids data is stored on servers in Vietnam and, for some services, in Singapore. Where a provider processes data outside Vietnam, it is bound by contractual safeguards equivalent to the protection described here.
How long we keep it
| Data | Kept for |
|---|---|
| Progress stored only on the device | Until the app is uninstalled or the device's app data is cleared. |
| An account and the progress attached to it | While the account is in use, and for 12 months after it goes inactive. A deletion request removes it sooner. |
| Crash and diagnostic records | 12 months. |
| Purchase records | As long as accounting and tax law requires us to keep them — currently 10 years in Vietnam. |
| Support correspondence | 24 months from the last message. |
How we protect it
- Encryption in transit with TLS, and at rest where the platform supports it.
- Least privilege: only the few people who need access to run the service have it.
- Multi-factor authentication on every administrative account.
- Backups, kept encrypted, and restore procedures that are tested rather than assumed.
- Dependency scanning and security review as release gates, not afterthoughts.
No system is perfectly secure. If a breach ever affects a child's data, we notify the parents and the competent authority as the law requires, and we say plainly what happened.
A parent's rights, and how to use them
- Ask what we hold about your child, and get a copy of it.
- Have it corrected if it is wrong.
- Have it deleted, including the account and its progress.
- Ask us to stop or limit a particular use.
- Withdraw a consent you gave, without affecting what was lawful before you withdrew it.
- Complain to a supervisory authority — in Vietnam, the Department of Cybersecurity and Hi-tech Crime Prevention (A05) of the Ministry of Public Security.
Write to contact@z-soft.com.vn with the game's name and the account email or the nickname shown in the game, so we can find the right records. We answer within 30 days and we do not charge for it. We may ask a question or two to confirm you are the parent of that account — deleting a child's progress for whoever asks would be its own kind of failure.
Uninstalling the app removes what was stored on the device. Data held on our servers is removed when you ask us for it.
Changes to this policy
We may update this policy as Z-Kids grows; the date at the top shows when we last did. A change that materially affects a child's data is announced in the app before it takes effect, and where the law requires consent, we ask again rather than assume it.
Contact
Z-SOFT CO., LTD — 58B, Da Ban 8 Street, Hoa Xuan Ward, Cam Le District, Da Nang City, Vietnam.
Privacy questions about Z-Kids: contact@z-soft.com.vn.
Want it all deleted? Just ask.
Write to contact@z-soft.com.vn with the game's name and the account email or nickname. We answer within 30 days and never charge for it.