Privacy Policy

Yagu ("we", "our", "us") is a children's educational app that helps kids ages 3–12 learn by scanning real-world objects with a device camera. Children explore themed zones and missions, earn Sparks and trophies, build a personal Collection of finds, and can talk live with Kaya (and surprise object friends) in English, Hindi, or Gujarati.

We are committed to protecting the privacy of children and their families. This policy explains what information we collect, how we use it, and the choices available to parents and guardians.

📋 1. Information We Collect

• Parent email address — for account creation, password reset (via 6-digit OTP sent by email), and communication
• Child profile information — first name, age band or birthday, avatar selection, and content language preference (English, Hindi, or Gujarati). Seat limits depend on plan: 1 child on trial / free post-trial, up to 2 on Basic, up to 3 on Standard and Premium.

• Camera images: After a parent saves progress (email), photos taken in Scan are sent to our AI model for object identification and may be stored so the family can revisit finds in My Collection. Guests cannot take or upload scan photos. Parents can request deletion via Parent Zone / support.
• Learning activity data: Objects scanned, facts delivered, mission and zone progress, challenge attempts, Sparks and trophy events, practice history, and related learning signals — used to personalise the experience and show parents progress. These events go to Yagu’s own servers only. We do not use third-party product-analytics or advertising SDKs (no Mixpanel, Amplitude, Firebase Analytics, Google Analytics, or IDFA / tracking identifiers).
• Live voice (Talk / Kaya Call / Object Call): After Save Progress, when a child uses the microphone we record their voice and send that audio to Yagu's servers and to AI models (large language models) so the companion can hear and reply in real time. The child’s first name is included in that live-call prompt so the companion can greet them. We also send the device’s local date, time of day, and timezone so the companion can talk about “this morning” or “tonight” correctly. Guests cannot start a live call. We may keep a text transcript of the call for parent review in Parent Zone. We do not sell call audio for advertising.
• Device token: For push notifications to the parent's device, only after a parent opts in from Parent Zone, via Firebase Cloud Messaging.
• Crash logs: Technical error reports (via Sentry) so we can keep the app stable. These are not used for advertising. They may include diagnostic details such as error messages and request paths. We do not use them as a child profile.
• Subscription & credit data: Plan tier, credit balances, and purchase receipts via the App Store or Google Play (through RevenueCat) so we can grant credits and enforce family quotas.

• Precise geolocation
• Contacts or address book
• Advertising identifiers for ads or ad targeting
• Data from other apps on the device
• Social graph, friend lists, or public profiles

👤 2. Anonymous / guest use

Yagu can be tried without a full parent account. Guests may play missions and set up a child profile (name, birthday, buddy). They cannot take scan photos or start a live voice call until a parent saves progress with email. During guest use:

• Mission progress, profile, sparks, and related play data may be stored and linked to the anonymous session.
• Scan images and live voice are not collected from guests. After Save Progress, those features work and that data may be stored on the parent account.
• If the app is uninstalled or the session is abandoned, stored data associated with that session may be automatically deleted after a retention window (typically 30 days).
• When a parent saves progress / creates an account, anonymous session data can be linked to the new parent account so the child’s progress is preserved.

⚙️ 3. How We Use Information

• Provide and personalise learning for each child based on age band, scan history, mission progress, and language
• Generate age-appropriate educational content (facts, mission challenges, collection / Codex material) via AI
• Run live voice conversations with Kaya and unlocked object companions
• Show parents week summaries, lifetime tiles, credit usage, and call history in Parent Zone
• Manage subscriptions, credit grants, and consumption (1 credit ≈ 1 scan; about 10 credits ≈ 1 minute of live call)
• Send push notifications to the parent's device — streak risk, quota / credits, trophies, missions, weekly summary, and similar. Notifications are not designed as a child’s social inbox
• Improve stability and fix bugs via crash reports

🧒 4. Children's Privacy

We design Yagu for families with children. Creating a parent account sends a 6-digit code to the parent's email to confirm that address — that is account verification, not a legal parental-consent record. Guest / Get Started can try the app without an email. We take the following measures:

• We do not treat email login or Save Progress as a child’s play task. Those screens exist so a grown-up can confirm an email. Billing and account deletion stay behind Parent Zone (math challenge and optional PIN).
• We collect only the data needed to deliver learning, progress, safety, and family credits (including scan photos and, when Talk / Kaya is used, voice audio sent to our servers and Kaya).
• We do not sell, trade, or share children's personal information with third parties for marketing or advertising.
• We do not serve behavioural advertising to children. Yagu contains no ads of any kind.
• We do not allow children to make purchases. All payment screens are behind Parent Zone (a grown-up math check and a parent PIN set when the parent saves progress).
• Children cannot publicly share personal information. There are no social features, friend lists, or public profiles.
• Pricing, subscription management, and data settings are never shown on the child-facing surface.
• Children see play-oriented feedback (Sparks, trophies, warm recovery) — not grades, scores, or adult billing UI.

🤖 5. AI and Third-Party Services

Yagu uses AI to identify scanned objects, generate educational content, and power live voice. We use services such as:

• AI vision & content models — Object identification and educational content from camera images and app context. Images are sent for processing as needed to provide the feature.
• Live voice (Kaya) — Child microphone audio is sent to Yagu's servers and to AI models (large language models) so Kaya and object companions can converse in real time. The child’s first name is included in the live-call prompt so the companion can greet them. We also send the device’s local date, time of day, and timezone so the companion can talk about “this morning” or “tonight” correctly. Audio is processed to generate spoken replies; text transcripts may be retained for parents.
• Supabase — Authentication, PostgreSQL database, and image storage with access controls so each family's data stays private.
• RevenueCat — Subscription and in-app purchase management (receipt validation and entitlements). Does not need child profile content for marketing.
• Firebase Cloud Messaging — Push notifications primarily for parent / family devices.
• Google Cloud Platform (Cloud Run) — Backend API hosting.
• Sentry — Crash and error diagnostics so we can keep the app stable (error text, request paths, stack traces). Not used for advertising, marketing, or as a child profile. This is operational stability, not third-party product analytics.
• Email delivery — Transactional email (password reset OTPs and account messages).

These services receive only what is needed to operate the app. We do not include third-party advertising. We do not use third-party product-analytics SDKs. We do not use these providers to build advertising profiles of children.

🔐 6. Data Storage and Security

• All data is transmitted over encrypted connections (HTTPS/TLS).
• Yagu’s API is hosted on Google Cloud Run in asia-southeast1.
• User data is stored in PostgreSQL (Supabase) with policies intended so each parent account can only access their own family's data.
• Scan images are stored in private storage with access restricted to the owning family account.
• API keys and secrets are stored in a secret manager, not in plain text in the app.
• Live call audio is sent to Yagu's servers and to the voice provider for the duration of the call. Parent-visible history is based on session metadata and transcripts we store for Parent Zone.
• On-device text-to-speech may still be used for some non-call spoken feedback (for example short UI lines). That is separate from live Kaya calls, which are not on-device speech-to-text.

🖼️ 7. Image & collection retention

Scan images and collection data are handled based on account status:

• Guest / anonymous users: Profile and mission-play data may be linked to the session (no scan photos or live-call audio). That data may be deleted automatically after a retention window if never converted to a parent account.
• Authenticated users: Finds, mission progress, and related learning data are retained while the account is active so children can revisit Collection and parents can review progress.

Parents may request deletion of scans or full account data from Parent Zone (Privacy & Data / Account, behind the parent gate) or by emailing support@askyagu.ai.

👨‍👩‍👧 8. Parental Rights

Parents and guardians have the right to:

• Review personal information we have about their child, including scan / collection history, mission progress, and call transcripts available in Parent Zone
• Request deletion of individual content or full account data
• Refuse further collection of their child's information by stopping use and requesting deletion
• Manage notifications from parent settings where toggles are provided
• Manage child profiles — add, edit, or remove child profiles within plan seat limits
• Manage credits & subscription — plans and one-time credit packs only behind the parent gate (Restore and Manage are in Parent Zone → Account)

To exercise these rights, use Parent Zone (behind the parent gate), or contact us at support@askyagu.ai.

🗑️ 9. Data Retention and Deletion

We retain user data for as long as the account is active. When a parent requests account deletion via Parent Zone → Account → Delete account (behind the parent gate):

• The account is closed and can no longer be used for normal sign-in
• Child profiles, scan images, collection data, learning progress, and related content are retained for a short grace period (typically 30 days)
• After that period, that content is permanently deleted (including child profiles, scan images, collection entries, voice/call transcripts we store, badges earned by the child, and mission progress)
• Shared curriculum content (zones, missions, global icon banks, question pools) is never removed as part of account deletion

💳 10. In-App Purchases & credits

Yagu offers optional subscription plans and one-time credit packs. Purchases are processed through the Apple App Store or Google Play via RevenueCat, depending on the device. Safeguards:

• All pricing and purchase screens are behind the parent gate — children cannot access them
• No pricing, upsells, or subscription prompts are shown as storefront UI on the child surface
• Credits are a family resource: 1 credit = 1 scan; about 10 credits = 1 minute of live call
• New accounts may receive a 7-day trial with 50 total credits (one-time pool, no daily free refill). After trial, free accounts do not receive a free daily credit refill
• We do not use loot boxes, gambling mechanics, or dark-pattern child purchases
• Low-credit situations guide the child to a grown-up / Parent Zone path rather than a kid checkout

📝 11. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users via email of material changes when appropriate. The "Effective Date" at the top will be updated accordingly.

📬 12. Contact Us

If you have questions about this privacy policy or our data practices, please contact us:

Email: support@askyagu.ai
Website: askyagu.ai