Scarlett Panda Privacy Policy

Last updated: 3 August 2026

WHO WE ARE

Scarlett Panda is a trading name of Incremento Ltd, a company registered in England and Wales under company number 12997528. Our registered office is 128 City Road, London, United Kingdom, EC1V 2NX.

Incremento Ltd is the controller of personal data processed through Scarlett Panda websites, applications and services unless a checkout or third-party service states that another organisation is independently responsible for its own processing.

Privacy enquiries and requests: info@scarlettpanda.com

Corporate enquiries concerning Incremento Ltd: info@incremen.to

SCOPE

This policy explains how we collect, use, disclose and protect personal data when adults visit our websites, create or manage accounts, purchase or use Scarlett Panda services, contact us, or provide details to create personalised stories, meditations, audio or other content.

Scarlett Panda is intended to be selected, purchased and managed by an adult. If an adult provides information about a child, the adult must be the child’s parent or legal guardian or have their permission, and must provide only information reasonably needed for the requested feature.

PERSONAL DATA WE COLLECT

We may collect:

Account and contact data, such as an adult user’s name, email address, login details, country, communication preferences and support messages.

Profile and personalisation data, such as a child’s first name or nickname, age range, interests, story preferences and other information an adult chooses to provide for personalisation.

Content inputs, such as prompts, text, images, recordings or other material an adult chooses to upload or submit, together with the content generated in response.

Transaction data, such as subscription plan, purchase date, renewal status, currency, tax location, transaction identifier and limited billing information supplied by our payment providers. We do not receive or store full payment-card numbers when a payment provider handles checkout.

Technical and usage data, such as IP address, device and browser information, identifiers, log data, pages or features used, approximate location derived from IP address, crash data and security events.

Cookie and preference data, including choices made through our cookie controls and information collected by cookies or similar technologies.

We collect data directly from adult users, automatically from devices and services, and from providers involved in authentication, hosting, analytics, communications, payment, fraud prevention and customer support.

HOW WE USE PERSONAL DATA

We use personal data to:

Provide, personalise and maintain the Service; create requested stories and other content; authenticate users; manage accounts, trials, subscriptions and purchases; provide support; send service and security messages; detect abuse, fraud and technical problems; understand and improve performance and usability; comply with law and enforce our terms; and send marketing where permitted and subject to opt-out rights.

LEGAL BASES

Under UK data-protection law, we rely on one or more of the following bases depending on the activity:

Contract, where processing is needed to provide a requested service, administer an account or take steps before entering a contract.

Legitimate interests, where processing is reasonably necessary to operate, secure, support and improve the Service, understand use, prevent misuse and protect our rights, provided those interests are not overridden by the rights of the individual.

Consent, where required for optional cookies, direct marketing or other optional processing. Consent can be withdrawn at any time without affecting processing already carried out.

Legal obligation, where processing is needed for tax, accounting, consumer-protection, safeguarding, law-enforcement or other legal requirements.

Legal claims and vital interests, where applicable to protect people, establish or defend legal rights, or respond to an urgent safety issue.

CHILDREN’S DATA

We design the Service so that an adult controls the account and chooses what child information to provide. We do not ask a child to purchase a service or independently create a paid account.

Adults should use a nickname where practical and should not submit a child’s address, school, precise location, government identifier, health information or other sensitive information unless a feature clearly requires it and the adult has a lawful reason to provide it.

If you believe a child provided personal data to us without appropriate adult involvement, email info@scarlettpanda.com so we can investigate and take appropriate action.

AI AND CONTENT GENERATION

When an adult asks us to generate personalised content, the information in the request is processed automatically by our systems and relevant service providers to produce the requested output, operate safety controls, prevent misuse and troubleshoot the feature.

Generated-content processing does not by itself make a decision that has legal or similarly significant effects on an individual. Adults should review generated content before sharing it with a child.

PAYMENTS

For purchases processed by Paddle, Paddle acts as merchant of record and independently processes payment and buyer information under its own privacy terms. We receive limited transaction and subscription information needed to provide access, support customers, reconcile payments, prevent fraud and comply with law.

SHARING PERSONAL DATA

We may share personal data with carefully selected providers that help us host data and software, authenticate users, generate content, deliver email or audio, process payments, provide analytics, prevent fraud, monitor security and performance, and support customers.

We may also disclose data to professional advisers, auditors, insurers, regulators, courts, law-enforcement bodies or other parties where reasonably necessary to comply with law, protect users or defend legal rights.

If Incremento Ltd is involved in a merger, financing, reorganisation or sale of all or part of the business, relevant data may be disclosed subject to appropriate confidentiality and legal safeguards.

Service providers may process data only for authorised purposes under contractual and security obligations. Some third parties, including payment providers, may act as independent controllers for their own activities.

We do not sell personal data for money. If applicable law treats certain cookie or advertising disclosures as a sale or sharing, you may exercise the rights provided by that law through our cookie controls or by contacting us.

INTERNATIONAL TRANSFERS

Some providers may process data outside the United Kingdom or the country where the user lives. Where UK law requires a transfer safeguard, we use an approved mechanism such as an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses, or another lawful safeguard. You may contact us for more information about safeguards relevant to your data.

RETENTION

We keep personal data only for as long as reasonably needed for the purposes described in this policy. Retention depends on the type of data, whether an account or subscription remains active, support and security needs, user deletion choices, limitation periods, and tax, accounting or other legal requirements.

When data is no longer required, we delete or anonymise it where reasonably practicable. Backup copies may remain for a limited period before being overwritten. We may retain transaction, consent, fraud-prevention and legal records after account deletion where required or reasonably necessary.

SECURITY

We use technical and organisational measures designed to protect personal data, including access controls, provider reviews, security monitoring and encryption where appropriate. No online service is completely secure, so users should choose strong credentials, keep them confidential and tell us promptly about suspected unauthorised access.

YOUR RIGHTS

Depending on where you live, you may have rights to request access to personal data, correction, deletion, restriction, portability, objection to certain processing, withdrawal of consent and information about international-transfer safeguards.

You may also opt out of marketing communications using the unsubscribe link in an email or by contacting us. Service and security messages may still be sent when necessary.

To exercise a right, email info@scarlettpanda.com. We may need to verify identity and authority before completing a request. An authorised parent or guardian may make an appropriate request concerning a child’s data.

UK users may complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint. Users elsewhere may also have the right to contact their local data-protection authority. We encourage you to contact us first so we can try to resolve the issue.

COOKIES AND SIMILAR TECHNOLOGIES

We use necessary technologies to operate and secure the site and, where permitted, optional technologies for preferences, measurement or marketing. Where consent is required, optional cookies are used only after the relevant choice. You can change browser settings and use any cookie controls made available on the site. Blocking some technologies may affect functionality.

THIRD-PARTY LINKS

Our services may link to third-party websites or services. Their privacy practices are governed by their own notices, and we are not responsible for their content or processing.

CHANGES TO THIS POLICY

We may update this policy when our services, providers, practices or legal obligations change. We will update the date above and provide additional notice where required by law.

CONTACT

Privacy, child-data, support and rights enquiries: info@scarlettpanda.com

Corporate enquiries concerning Incremento Ltd: info@incremen.to

Incremento Ltd, registered in England and Wales under company number 12997528. Registered office: 128 City Road, London, United Kingdom, EC1V 2NX.