Privacy policy

Who is responsible?

Pandaly is a KoaLab product. KoaLab is a sole proprietorship based in Québec, Canada, registered under Québec enterprise number 2282514399. This policy covers the Pandaly app and pandaly.app website.

To contact KoaLab’s person responsible for the protection of personal information, email support@pandaly.app with the subject “Privacy”.

Information we process

• Account and profile: email address, account identifier, authentication information, chosen name and preferences you provide, including language, form of address and time zone.
• Sessions: selected need, duration, voice, text and media, listening history, progress, favourites, lists, shares and audio settings. Some choices may reveal information about your well-being.
• Privacy choices: acceptance and withdrawal decisions, dates, the wording shown and the link to your account. This history does not retain extra copies of your name, email address or IP address.
• Feedback and reports: optional private vote, session reference, optional listening position and any comment you submit in a content report. Private feedback is not automatically posted to an app store.
• Purchases, when offered: product, subscription status and dates, matching identifier and token needed to verify a purchase. Pandaly does not receive your payment card number.
• Operation and support: errors, app version, technical connection and usage information, emails, messages and attachments you choose to send to support.
• On your device: secure login information, preferences, playback files and locally scheduled reminders. You may choose to keep a deletion receipt there.

Do not send a diagnosis, medical record or other sensitive information that is unnecessary for your request.

Purposes and choices

We use this information to provide your account and requested sessions, remember preferences, support playback and sharing, manage subscription access, respond to support requests, handle reports and resolve errors. We do not sell your information or use it for targeted advertising.

Optional information and reminders remain your choice. Using your name in spoken greetings requires a specific choice that you can withdraw in the app. New sessions then use generic greetings; withdrawing this choice does not delete previously saved sessions. You can delete those separately.

Text, voices and the shared cache

Sessions are assembled from prepared content. OpenAI and Google may be used to produce editorial text or visuals; user profiles and listening histories are not needed for that production.

When audio needs to be synthesized, Fish Audio receives the text to be spoken and voice settings. This text may include the name you authorized in a greeting or closing phrase. The session’s topic may be apparent from the spoken text.

To avoid producing the same audio repeatedly, greetings and closing phrases are reused in a cache shared by people using the same settings, including the same name. This cache is restricted to the server and is not a public directory. Withdrawing name personalization or deleting an account does not remove a shared item still used by another retained session.

Fish Audio applies its own processing and retention terms, which may allow content to be used to improve its models. The retention periods stated for data managed by Pandaly do not automatically apply to this provider. See its privacy policy and terms.

Service providers and recipients

Depending on the features you use, necessary recipients include:

• Supabase: authentication, database and storage of media and private logs.
• Fly.io: server hosting and operation.
• Fish Audio: speech synthesis; OpenAI and Google: the editorial production tools described above.
• Resend: account email delivery when configured for authentication.
• Google, Apple or Facebook: authentication only when the corresponding sign-in option is available and you choose it. The provider returns authorized attributes, such as an identifier, name or email address.
• Google Play or Apple: purchases and subscriptions offered through their store.
• Sentry, if enabled: app error diagnostics. Screenshots, view recording and profiling are not part of our intended configuration. Technical incidents may also be sent directly to Pandaly’s server.
• Telegram, if configured: technical alerts and deletion-request notifications to the operator. The latter contain an internal tracking reference and the request date, without a name, email address or session content.
• Cloudflare: website hosting and protection, the contact form and spam prevention; Google Workspace: receiving and handling support correspondence.

Access within KoaLab is limited to operational and request-handling needs. Disclosure may also be necessary to comply with a legal obligation or protect people’s rights and safety.

The website and cookies

The website does not use advertising cookies, remote fonts or advertising tracking scripts. The contact form collects your email address, subject, message and language to send your request to support. It does not create a message database or log message contents.

Cloudflare and Turnstile process technical browser and connection signals, including IP addresses, to deliver and protect the website and limit automated submissions. Messages reach KoaLab’s Google Workspace mailbox. Your own email provider also processes messages you send.

Retention periods

• Account, profile and choice records: for the life of the account, then through the deletion process. Favourites remain while the account and favourite exist, unless deleted or the content needs to be withdrawn.
• Media from sessions that are not favourites: eligible for cleanup after 30 days without listening. Listening again renews this period. For a session never played, it starts at creation; older sessions with no reliable listening date receive a 30-day transition period when this tracking is introduced. Media cleanup does not necessarily remove the history entry or statistics linked to the account.
• Trash: deleted sessions become eligible for erasure processing after 30 days. This threshold does not mean every copy disappears at that moment.
• Shared greeting cache: eligible for cleanup after 90 days without reuse, provided no retained session depends on it.
• Technical logs managed by Pandaly: up to 30 days depending on their type; some are deleted sooner. Providers’ own logs follow their separate settings and obligations.
• Support and reports: during handling, then 6 months after closure. Reopening starts a new follow-up period from the next closure.
• Private feedback: linked to the session and account, and erased through their deletion process. Withdrawing a vote does not immediately remove every technical record of the change.
• Purchases: technical records support verification, access management and purchase issue handling. Records subject to a legal obligation are retained separately for the applicable period; this exception does not justify keeping all technical tokens indefinitely.
• After erasure: cost statistics without direct identifiers are retained for 24 months from erasure of their source records. The deletion receipt is retained for 24 months after the request is fully closed, after which it can no longer be viewed on the server. These periods do not delay processing of account deletion. Identity links in the deletion ledger are removed 35 days after the case is fully closed and its external review completed.

Cleanup runs periodically and may require a retry after an error. Information still needed for an open case, dispute or legal obligation receives limited, justified handling. Backups and external copies must be reviewed separately; their expiry is not treated as immediate account deletion.

Deleting an account and tracking the request

You can request deletion in the app or email support@pandaly.app. Reasonable identity checks may be necessary; never send a password by email.

A request accepted in the app blocks account access and provides a tracking receipt. It does not mean erasure is already complete. Processing covers account data, authentication, sessions and related files, followed by a review of external copies. The receipt distinguishes pending stages from completion.

Local cleanup is triggered on the device making the request. Another device that is offline cannot be remotely erased immediately. You can forget the receipt kept on your phone. Uninstalling the app does not delete your account; account deletion alone does not cancel a store-managed subscription.

See the deletion procedure. We explain remaining steps and applicable exceptions while handling your request.

Sharing and copies

A sharing link lets its recipient access or import a session. Share only content you agree to disclose, including personalized elements. Revoking a link does not remove imports already created. When a source session is erased, access to its dependent personal media is removed from copies managed by Pandaly. We cannot retrieve a file a recipient saved outside the service.

Security and transfers

We use encrypted connections, access controls and secure on-device login storage. No system guarantees absolute security. Backups support service continuity; restoring them must account for deletion requests already received.

Providers may process information outside Québec or Canada, including in the United States and Europe, where protections may differ. Such transfers must be assessed and governed according to KoaLab’s applicable obligations. Contact us for information about the providers and retention terms relevant to your request.

Your rights and recourse

Under applicable rules, you may request access, correction, a structured copy of computerized information you provided, withdrawal of consent and deletion of your information. We respond to access or correction requests within 30 days of receipt, subject to applicable rules. This response period is not a promise to erase every copy and backup within that time.

Email support@pandaly.app. You may also contact the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada. Rights and exceptions under applicable legislation remain in effect.

Age and changes

The Pandaly app is for people aged 18 and over only. Parental permission does not override this minimum age. We do not seek to collect information from people under 18 to provide them with the app. Report a relevant account to support@pandaly.app so we can review the situation and handle appropriate deletion.

The update date appears at the top of this page. Significant changes to purposes or consent will be brought to your attention before they take effect.