Play Play Play!
Effective Date: 19 May 2026
Last Updated: 19 May 2026

1. Who We Are

Play Play Play! (“we”, “us”, “our”) is an application that enables parents to coordinate supervised playground meet-ups for children aged 4–9.

Data Controller:
The Lights Below
Van Gentstraat 6, 1055 PE, Amsterdam
Netherlands
Email: contact@playplayplay.nl

We process personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

2. Who May Use the App

Play Play Play! is intended for parents or legal guardians aged 18 years or older.

Accounts may only be created by adults.
Children do not create accounts themselves.

Parents are solely responsible for the child profiles they create and manage.

3. Our Data Minimisation Approach

We apply the principle of data minimisation under Article 5 GDPR.

We only collect personal data that is necessary to provide the core functionality of coordinating playground meet-ups.

We do not collect GPS tracking data or real-time location data.

4. Personal Data We Collect

A. Parent Data

We collect:

    • Email address

    • Password (encrypted)

Purpose:

    • Account creation

    • Authentication

    • Essential service communication

Legal basis:

    • Performance of a contract (Art. 6(1)(b) GDPR)

B. Child Data (Provided by Parents)

Parents may create a child profile including:

    • First name

    • Year of birth

    • City

    • Postal code (used to centre the playground map)

    • Profile picture/avatar (optional)

Purpose:

    • Enabling friend-based notifications
    • Displaying map and check-in status
    • Improving and adapting the service experience for different age groups

    Legal basis:

      • Parental consent (Art. 6(1)(a) GDPR)

    By creating a child profile, the parent confirms they are the legal guardian and consent to the processing of the child’s personal data.

    5. Playground Check-Ins & Visibility

    When a parent checks in at a playground:

      • The child’s first name and picture, and check-in information is visible to other parents whose children have been added as “friends”.

      • Connected “friends” may receive notifications (push and/or email).

      • Check-in information is self-declared by parents.

      • We do not verify physical presence.

    We recommend that parents only connect with families they know personally.

    6. Visibility & Friend Connections

    Play Play Play! operates within a closed environment accessible only to registered parent users.

    Child profiles are never publicly searchable or accessible outside the app.

    A. Friend Connections

    When a parent accepts a friendship request:

      • The connected parents may receive notifications (push and/or email) when the other child checks in at a playground.

      • The child’s first name, profile photo, and selected playground may be visible to the connected parent.

    Parents may remove friendships at any time.

    B. Playground Check-In Visibility

    When a parent checks in at a playground:

      • The child’s first name and profile information may be visible to other parents who have selected the same playground.

      • Check-ins are self-declared.

      • We do not verify physical presence.

    D. Parental Responsibility

    Parents are responsible for:

      • Managing their child’s profile information

      • Approving friendships

      • Supervising their child at all times

    We recommend that parents only connect with families they know personally.

    7. What We Do Not Do

    We do not:

      • Track GPS location

      • Monitor real-time movements

      • Conduct background checks

      • Verify user identity

      • Sell personal data

      • Use children’s data for marketing

      • Profile children for automated decision-making

    8. Hosting & Data Processing

    We use Supabase as our cloud infrastructure and database provider.

      • Our data is hosted on servers located within the European Union.

      • Supabase processes personal data on our behalf under a Data Processing Agreement (Article 28 GDPR).

      • Appropriate safeguards are in place to ensure GDPR compliance.

    9. Data Retention

    We retain personal data for as long as the parent account remains active.

    When an account is deleted:

      • Parent data and associated child profiles will be permanently deleted within 30 days, unless legally required otherwise.

    10. Your GDPR Rights

    Parents have the right to:

      • Access their own and their child’s data

      • Correct inaccuracies

      • Request deletion

      • Restrict processing

      • Object to processing

      • Request data portability

      • Withdraw consent at any time

    Contact us to contact@playplayplay.nl with your request, mentioning “GDPR” in the title of the email.

    You may lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

    11. Security

    We implement appropriate technical and organisational safeguards including:

      • Encrypted passwords

      • Secure EU-based hosting

      • Access control restrictions

      • Data minimisation principles

    However, no system can guarantee absolute security.

    12. Parental Responsibility & Safety Disclaimer

    Play Play Play! facilitates coordination only.

    We do not:

      • Supervise playground interactions

      • Guarantee attendance

      • Verify identities

    Children must be supervised by their parents at all times.

    Parents assume full responsibility for their child’s safety and interactions.

    13. Changes to This Policy

    We may update this Privacy Policy periodically. Updated versions will be made available within the app.

    14. Contact

    The Lights Below
    Van gentstraat 6, 1055 PE, Amsterdam
    Netherlands
    Email: contact@playplayplay.nl