Privacy Policy
Effective date: March 2026 · Last updated: March 2026
Glovoy ("we", "us", "our") is operated by TecEnc, a sole proprietorship registered under the Udyam MSME scheme, India. This privacy policy explains what data we collect, why we collect it, and your rights regarding that data.
Glovoy is an educational app designed for parents to help their children (aged 6–9 years) prepare for Olympiad examinations. The parent or legal guardian creates the account. Children use the app under parental supervision.
1. What Data We Collect
Account Data (Parent)
- Email address — required for login via Firebase Authentication
- No name, phone number, or address required at sign-up
Children's Profile Data (entered by parent)
- Child's first name (display only, stored in your account)
- Grade level (1, 2, 3 or 4)
- No date of birth, photograph, or sensitive personal information
Learning & Usage Data
- Quiz answers and scores (per question, per session)
- Topic mastery progress (topics completed, at which levels)
- Streak data (consecutive days of usage)
- Quiz history (stored for 90 days, then automatically deleted)
Technical Data (automatic)
- Device type and operating system version
- App version
- Crash reports (if you opt in)
- Session timestamps
Payment Data
We do not process payments directly. Subscriptions are managed via RevenueCat and processed by Apple App Store (iOS) or Google Play Store (Android). We receive only the subscription status (active/inactive) — not your card details. For direct website purchases, Razorpay processes payments and we receive only order confirmation.
2. Why We Collect It
| Data type | Purpose | Legal basis |
|---|---|---|
| Email address | Authentication, account recovery | Contract (providing the service) |
| Child's name and grade | Display, grade-appropriate content | Contract (providing the service) |
| Quiz answers and scores | Mastery calculation, parent dashboard | Contract (providing the service) |
| Usage history | Identifying weak areas, personalisation | Legitimate interest |
| Device / technical data | Bug fixing, app improvement | Legitimate interest |
We do not:
- Sell your data to any third party
- Use your child's data for advertising
- Track behaviour across other apps or websites
- Use your data to train AI models
3. Children's Data — Special Provisions
India — Digital Personal Data Protection Act 2023 (DPDP Act)
Under India's DPDP Act 2023, we apply the following practices for all users:
- The account is created and controlled by the parent or legal guardian
- By creating an account, the parent provides consent for collection and processing described in this policy on behalf of their child
- We collect the minimum data necessary to provide the service
- Parents may request deletion of all data at any time (see Section 7)
- We do not knowingly collect data from children without parental involvement
If you are a parent and believe your child used this app without your knowledge, contact us immediately at privacy@glovoy.com and we will delete their data.
International Users — COPPA Notice
If you are accessing this app from the United States: our app is directed at children under 13, and we comply with the Children's Online Privacy Protection Act (COPPA). We do not collect more information from children than is necessary to provide the service. Parents may review, correct or delete their child's data by contacting us.
4. How We Store Your Data
- All data is stored in Google Firebase (Firestore), operated by Google LLC, on servers in India (asia-south1 region) where available, and the US/EU where India-region services are unavailable.
- Quiz history is automatically deleted after 90 days using Firestore's native TTL feature.
- Firebase Security Rules ensure users can only access their own data. No user can read another user's account data.
5. Third-Party Services
| Service | Purpose | Privacy policy |
|---|---|---|
| Firebase (Google) | Database, authentication, crash reporting | firebase.google.com/support/privacy |
| RevenueCat | Subscription management | revenuecat.com/privacy |
| Apple App Store | iOS payment processing | apple.com/legal/privacy |
| Google Play Store | Android payment processing | policies.google.com/privacy |
| Razorpay (website only) | Direct subscription payments | razorpay.com/privacy |
| Resend | Transactional email | resend.com/privacy |
6. Data Sharing
We do not share your personal data with any third parties except:
- The service providers listed in Section 5 (only to the extent needed to provide the service)
- If required by law, court order, or government authority in India or applicable jurisdictions
- In the event of a business acquisition — you will be notified and given the option to delete your data
7. Your Rights
Under the DPDP Act 2023 and applicable law, you have the right to:
- Access — request a copy of all data we hold about you and your child
- Correction — request correction of inaccurate data
- Deletion ("Right to Erasure") — request deletion of your account and all associated data; we will process this within 30 days
- Withdraw consent — at any time by deleting your account; withdrawal does not affect the lawfulness of processing before withdrawal
- Grievance redressal — file a complaint with the Data Protection Board of India if you believe your rights have been violated
To exercise any of these rights, email privacy@glovoy.com with subject line: Privacy Request — [your registered email]
8. Data Retention
| Data type | Retention period |
|---|---|
| Account data (email, children's profiles) | Until account deletion |
| Mastery progress data | Until account deletion |
| Quiz history | 90 days (automatic deletion) |
| Subscription records | 7 years (legal / tax requirement) |
| Crash reports | 90 days |
9. Security
- Firebase Authentication with secure token management
- Firestore Security Rules (users can only access their own data)
- All data transmitted over HTTPS / TLS
- No passwords stored by us (Firebase Auth manages credential storage)
10. Changes to This Policy
We will notify you of material changes by:
- Sending an email to your registered address
- Displaying a notice in the app on next launch
- Updating the "Last updated" date at the top of this page
Continued use of the app after changes constitutes acceptance.
11. Contact Us
- Data Controller: TecEnc
- Address: Navi Mumbai — 410210, Maharashtra, India
- Email: privacy@glovoy.com
- Grievance Officer (DPDP Act): grievance@glovoy.com