Yagu ("we", "our", "us") is a children's educational app that helps kids ages 3–12 learn by scanning real-world objects with their device camera. Children scan everyday items — food, toys, plants, household objects — and Yagu responds with age-appropriate facts, spelling challenges, voice conversations, and stories.
We are committed to protecting the privacy of children and their families. This policy explains what information we collect, how we use it, and the choices available to parents and guardians.
🛡️ Yagu is designed so that children never see or interact with account creation, login, payment, or data management screens. All of these are behind a parent gate.
📋 1. Information We Collect
Information provided by parents
- Parent email address — for account creation, password reset (via 6-digit OTP sent by email), and communication
- Child profile information — first name, age or birthday, avatar selection, and content language preference (English, Hindi, or Gujarati). Parents can create up to 3 child profiles per account (1 on the Free tier).
Information collected from app usage
- Camera images: Photos taken within the app are sent to our AI model for object identification. For authenticated users, images are stored in our cloud database to allow children and parents to revisit past scans in the journal. Parents can manually delete any scan image at any time from the parent dashboard.
- Learning activity data: Objects scanned, facts delivered, spelling attempts, voice conversation transcripts, stories generated, badges earned, mission progress, and streak data — used solely to personalise the learning experience.
- On-device voice input: When a child uses the "Speak with it" feature, their speech is transcribed on-device. The transcribed text (not audio) is sent to our AI model to generate a response. No audio recordings are stored.
- Device token: For push notifications to the parent's device (with parental consent) via Firebase Cloud Messaging.
- Anonymous error reports: Crash logs and error data containing no personally identifiable information about the child.
Information we do NOT collect
- Precise geolocation
- Contacts or address book
- Audio recordings of children's voices
- Advertising identifiers
- Data from other apps on the device
👤 2. Anonymous Use
Yagu can be used without creating an account. Anonymous users can scan objects and use all child-facing features for up to 7 days. During anonymous use:
- All data (journal, badges, progress, scan images) is stored on our servers and linked to the anonymous session.
- If the app is uninstalled, all stored data associated with the anonymous session will be automatically deleted after 30 days.
- When a parent creates an account, all anonymous session data is linked to the newly created parent account. Parents are shown exactly what data is being linked and can dismiss this at any time.
⚙️ 3. How We Use Information
- Provide and personalise the learning experience for each child based on their age, scan history, and learning progress
- Generate age-appropriate educational content (facts, spelling challenges, experiments, stories) via AI
- Track learning progress across different domains — visible only to parents
- Manage subscriptions and scan quota balances
- Send push notifications to the parent's device — streak reminders, quota warnings, and milestone alerts. Notifications are never sent directly to children.
- Improve app stability and fix bugs via anonymous crash reports
🧒 4. Children's Privacy (COPPA Compliance)
We comply with the Children's Online Privacy Protection Act (COPPA) and take the following measures:
- We do not collect personal information from children without parental involvement. Account creation requires a parent or guardian.
- We collect only the minimum data necessary to provide the learning experience.
- We do not sell, trade, or share children's personal information with third parties for marketing or advertising purposes.
- We do not serve behavioural advertising to children. Yagu contains no ads of any kind.
- We do not allow children to make purchases. All payment screens are behind a parent gate (a math challenge that must be solved to access parent-only areas).
- Children cannot publicly share personal information through the app. There are no social features, friend lists, or public profiles.
- Pricing, subscription management, and data settings are never visible on the child-facing surface of the app.
- Numeric progress metrics are strictly parent-only. Children see only stars, badges, and encouraging feedback.
🔒 The child surface and parent surface are strictly separated. A child will never accidentally encounter a paywall, purchase screen, or data management interface.
🤖 5. AI and Third-Party Services
Yagu uses AI to identify scanned objects and generate educational content. We use the following third-party services:
- AI Model — Object identification and educational content generation from camera images. Images are sent for processing and are not retained beyond the API call. This is the only third-party service that receives camera images.
- Supabase — Authentication (email + password), PostgreSQL database, and image storage with row-level security ensuring each family's data is private.
- RevenueCat — Subscription and in-app purchase management. Handles receipt validation and entitlement state. Does not receive child profile data.
- Firebase Cloud Messaging — Push notifications to parent devices only.
- Google Cloud Platform (Cloud Run) — Backend API hosting.
- Resend — Transactional email delivery (password reset OTPs and account confirmation).
None of these services receive personally identifiable information about children beyond what is strictly necessary for their function.
🔐 6. Data Storage and Security
- All data is transmitted over encrypted connections (HTTPS/TLS).
- User data is stored in Supabase PostgreSQL with row-level security policies ensuring each parent account can only access their own family's data.
- Scan images are stored in a private Supabase Storage bucket with access restricted to the owning parent account (
auth.uid() = parent_id). No images are shared between users.
- All API keys and secrets are stored in a secret manager, not in plain text.
- Speech-to-text processing for voice conversations happens entirely on-device. No audio is transmitted or stored.
- Text-to-speech (Yagu's voice) is generated entirely on-device. No cloud dependency.
🖼️ 7. Image Retention
Scan images are handled differently based on account status:
- Anonymous users: Images are stored on our servers and linked to the anonymous session. If the app is uninstalled, images are automatically deleted after 30 days.
- Free-tier authenticated users: Images and all associated data (facts, spelling history, journal entries) are retained indefinitely for as long as the account is active.
- Paid-tier users: Images and all associated data are retained indefinitely for as long as the account is active.
Parents can manually delete individual scan images at any time from the Scan History screen in the parent dashboard. Deletion is permanent and immediate.
👨👩👧 8. Parental Rights
Parents and guardians have the right to:
- Review all personal information we have collected about their child, including scan history, learning progress, spelling data, and voice conversation transcripts
- Delete individual scans and their associated photos from the parent dashboard at any time
- Request full data deletion — all child profiles, scan history, journal data, badges, and images permanently removed
- Refuse further collection of their child's information
- Manage notifications — toggle streak reminders, quota warnings, and milestone alerts individually from the parent settings
- Manage child profiles — add, edit, or remove child profiles from the parent settings
To exercise any of these rights, use the Privacy & Data section in Settings (behind the parent gate), or contact us at support@askyagu.ai.
🗑️ 9. Data Retention and Deletion
We retain user data for as long as the account is active. When a parent requests account deletion via Settings → Privacy & Data → Delete Account:
- The account is marked for deletion and a 90-day grace period begins
- If the parent logs in or uses the app during this 90-day period, the deletion request is cancelled and the account remains active
- If there is no further login or usage within 90 days, all data is permanently deleted — including child profiles, scan images, journal entries, voice conversation transcripts, stories, spelling history, badges, and mission progress
⚠️ For anonymous users (no account created): if the app is uninstalled, all stored data associated with the anonymous session will be automatically deleted after 30 days.
💳 10. In-App Purchases
Yagu offers optional subscription plans and scan packs. All purchases are processed through Apple App Store or Google Play Store via RevenueCat. Important safeguards:
- All pricing and purchase screens are behind the parent gate — children cannot access them
- No pricing, upsells, or subscription prompts are ever shown on the child-facing surface
- We do not use loot boxes, gambling mechanics, or dark patterns
- Quota warnings are sent to the parent's device via push notification, never shown to the child
📝 11. Changes to This Policy
We may update this privacy policy from time to time. We will notify registered users via email of any material changes. The "Effective Date" at the top will be updated accordingly.
📬 12. Contact Us
If you have questions about this privacy policy or our data practices, please contact us:
Email: support@askyagu.ai
Website: askyagu.ai