Privacy Policy
Last updated: October 6, 2026
1. Introduction
Welcome to DojoBrains, an educational platform designed for children and students. We are committed to protecting your privacy and the privacy of children who use our Service. This Privacy Policy explains how we collect, use, share, and protect personal information in connection with our mobile apps and websites, in compliance with applicable laws including COPPA, GDPR, and India's DPDP Act where applicable.
Children's Privacy: We take special care to protect the privacy of children under 13. Our Service complies with the Children's Online Privacy Protection Act (COPPA) and other applicable privacy laws.
2. Information We Collect
We collect different types of information to provide and improve our educational services:
Account and identity information
- Account information: Email address, username/display name, age (for age verification), authentication provider identifiers
- Parental information: Parent email address and consent status (for users under 13)
- Guest account data: Device identifier, age/child status, and learning progress tied to a guest session on a device
- Profile and preferences: Learning preferences and settings you choose in the app
Educational and product data
- Learning progress: Quiz scores, course/chapter completion, flash card progress, study time, streaks, XP/achievements
- Performance analytics: Strengths, weak areas, and practice history used to personalize revision
- Custom course content: Courses and questions associated with your account, including content generated from your uploads
Uploads, camera/photos, and AI processing data
- Study images: Photos or images you choose to upload (for example worksheets or textbook pages) to create practice questions
- Extracted text / OCR output: Text derived from uploaded images
- Generated practice content: Questions and related AI outputs created from your materials
- Audio: Text-to-speech audio files generated for playback of learning content (we do not require microphone access to record your voice for core study features)
Uploading study images typically requires camera or photo-library permission on your device. You control whether to grant those permissions in your device settings.
Purchases, credits, hearts, and ads
- Purchase data: Product identifiers, transaction/receipt tokens, entitlement status (subscription/credits), and validation results from Apple or Google
- Credit usage: Credit balances (including promotional credits), consumption for AI features, and related timestamps
- Hearts / access mechanics: Hearts or similar balances used to access quizzes
- Ad interaction metadata: When you watch a rewarded ad, we may receive confirmation/metadata needed to grant rewards (for example ad network/unit identifiers and completion status)
Device, app, and technical data
- Device information: Device type, operating system, app version, platform
- Push notification tokens: Device tokens used to send learning reminders and service updates (with permission)
- Diagnostics: Crash reports, performance metrics, and error logs
- IP address: Collected in limited cases for security, abuse prevention, and service operation (for example certain guest/auth flows)
- Location: We do not collect precise GPS location
Website-specific data
- Browser information: Browser type, version, and basic settings
- Website analytics: Page views, session duration, and interactions
- Cookies: Essential cookies for functionality, plus analytics/preference cookies as described in our Cookie Policy
- Referral data: How you found our website (when available)
3. How We Use Your Information
We use your information to:
- Provide the Service: Accounts, courses, quizzes, flash cards, progress, streaks, and related features
- Process uploads and AI features: OCR, question generation, content safety checks, storage, and audio playback
- Manage entitlements: Validate purchases, grant subscriptions/credits, expire promotional credits, and operate hearts/ad rewards
- Personalize practice: Highlight weak areas and recommend revision
- Communicate: Service notices, parental consent emails, support responses, and optional push reminders
- Secure and improve: Fraud prevention, debugging, analytics, and product improvement
- Comply with law: Meet legal, tax, accounting, and regulatory requirements
4. AI, OCR, and Content Processing
When you use features that create practice from study materials:
- Images you upload may be stored on our cloud storage and processed by OCR and AI services to extract text and generate practice questions
- We may use automated content-safety checks on uploads where enabled
- Generated questions and related outputs are stored with your account so you can practise repeatedly and track progress
- AI outputs can be imperfect; they are provided for educational practice, not as official exam content
Please do not upload: sensitive personal documents, photos of people (especially children) that are not needed for study, or materials you are not allowed to use.
5. Children's Privacy (COPPA Compliance)
Special protection for children under 13:
- Parental consent required: We obtain verifiable parental consent before collecting personal information from children under 13 beyond what is needed to seek that consent
- Email verification: Parents receive email verification to confirm consent
- Limited collection: We aim to collect only what is needed to provide the educational Service
- Parental rights: Parents can review, modify, or delete their child's information
- No behavioral advertising: We do not use children's personal information for behavioral advertising or profiling for marketing
- Restricted experiences: Child accounts may have restricted social/sharing features and age-appropriate ad treatment where ads are shown
6. Parental Rights and Controls
Parents have the following rights regarding their child's information:
- Access: View information associated with the child's account
- Modification: Update account information where available in the app
- Deletion: Delete the child's account and associated personal data
- Consent withdrawal: Withdraw consent for further collection/use where applicable
- Data export: Request an export of the child's data
How to exercise these rights: Many actions can be performed in the app profile where available. For parental support, contact parents@dojobrains.com.
7. Age Verification and Consent
- Age collection: We ask for age during guest setup or registration
- Under 13: Additional parental consent and verification required
- 13 and over: Standard privacy protections apply
- Parental consent: Email verification system for parental consent
8. Data Sharing and Third Parties
We do not sell your personal information. We share information only as needed to operate the Service:
- Cloud and infrastructure providers: Hosting, databases, storage, and related infrastructure (for example Microsoft Azure services)
- AI / OCR / speech processors: Providers that help extract text from images, generate practice questions, and synthesize audio (for example Azure OpenAI, Azure Vision, Google Cloud Vision for certain scripts, and Azure Speech)
- Authentication: Sign-in providers such as Firebase Authentication and supported identity providers (for example Google, Apple, Facebook) when you choose those methods
- App stores and billing: Apple and Google for purchase validation and subscription management
- Advertising partners: Ad networks (for example Google AdMob) when rewarded or other ads are shown, subject to platform and age rules
- Analytics and diagnostics: Tools that help us measure reliability and improve the Service (for example Azure Application Insights)
- Communications: Email/push delivery providers used to send consent, support, and service messages
- Legal / safety: When required by law or to protect users, rights, or the Service
- Business transfers: In a merger or acquisition, with appropriate notice where required
We do NOT: Sell, rent, or trade your personal information for marketing lists. We do not use children's personal information for behavioral advertising.
9. Advertising
The free experience may include ads, including rewarded ads that can grant limited in-app benefits (such as hearts or credits).
- Ad partners may receive device and ad-performance information needed to deliver and measure ads
- For children under 13, we configure child-directed / non-behavioral treatment consistent with applicable platform policies and COPPA
- Premium subscriptions may reduce or remove ads depending on the plan shown at purchase
10. Data Security
We implement security measures appropriate to the nature of the data, including:
- Encryption in transit (and encryption at rest where provided by our infrastructure)
- Access controls on a need-to-know basis
- Monitoring, logging, and operational safeguards
- Secure cloud storage for uploads and generated media
No method of transmission or storage is 100% secure. Please protect your device and account credentials.
11. Data Retention
- Active accounts: Data retained while your account is active
- Guest accounts: May be cleaned up after inactivity according to our retention practices
- Uploads and generated content: Retained to provide your courses and practice history until deleted or your account is removed
- Purchase / entitlement records: Retained as needed for accounting, fraud prevention, and store reconciliation
- Account deletion: Personal data is deleted or anonymized after a deletion request, subject to legal retention needs
- Children's data: Handled with heightened care and deleted upon valid parental/user deletion requests
12. Your Rights (GDPR / DPDP and similar laws)
Depending on your location, you may have rights to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export / portability of your data
- Object or restrict certain processing
- Withdraw consent where processing is consent-based
Self-service options: Where available, you can view, update, export, and delete data from the app profile. You can also contact privacy@dojobrains.com.
13. Platform-Specific Practices
Mobile app
- Permissions: We may request camera and/or photo-library access so you can upload study materials; notification permission for reminders; and network access to sync your data. We do not request precise location.
- Microphone: Core features play AI/text-to-speech audio; we do not require microphone recording for standard study use
- Local/offline cache: Some content may be cached on device for performance or offline use
- Push notifications: Optional learning and service reminders
Website
- Secure sessions and essential cookies for functionality
- Analytics cookies as described in our Cookie Policy
- Cross-device sync for registered accounts where available
14. Cookies and Tracking
On our website we use cookies and similar technologies for essential functionality, preferences, security, and analytics. See our Cookie Policy for details.
- Mobile analytics / crash reporting: We use first-party and infrastructure analytics to understand reliability and improve the app
- Advertising SDKs: If ads are shown, ad partners may use their own technologies subject to their policies and applicable child-directed settings
- No sale of personal data for marketing lists; no behavioral advertising using children's personal information
15. International Data Transfers
We may process and store information in India, the United States, and other countries where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated policy with a new "Last updated" date and, for material changes, provide additional notice where appropriate (for example in-app notice or email). Parents may be notified of material changes affecting children's accounts.