Privacy Policy — Learn Imla
Last updated: May 2026
Who operates this app
Learn Imla is operated by Avner Avigad.
Contact: learnbygame100@gmail.com
What data we collect
- Display name or username entered at login
- Phone number — used for account verification only (see “Phone number & SMS verification” below)
- Learning progress: topics studied, scores, exam results
- Device notification token — only if you grant notification permission (see “Notifications” below)
We do not collect email addresses or payment details directly.
How we use your data
Data is used solely to provide the learning service — tracking progress, awarding stars, and displaying results to parents or guardians.
Data storage
Data is stored securely on Firebase (Google Cloud). Google’s privacy policy applies to infrastructure storage: firebase.google.com/support/privacy.
Data retention & deletion
Your data is kept for as long as your subscription is active.
When your subscription ends and is not renewed, all personal data associated with your account — including profiles, progress, and scores — is permanently deleted.
You may also request immediate deletion at any time by contacting us at learnbygame100@gmail.com.
Analytics
We collect anonymous usage analytics to improve the app. Only a randomly generated user ID is sent to analytics — never your name or any identifying information.
When your account is deleted, the link between the user ID and your identity is permanently removed. All remaining analytics data becomes fully anonymous and cannot be traced back to you.
This approach complies with GDPR pseudonymisation requirements (EU) and the Israeli Privacy Protection Law.
Phone number & SMS verification
We collect your phone number to verify your account and to log you in. When you sign up or log in, we send a one-time SMS verification code to your number.
- What we collect: the phone number you enter, plus a timestamp recording your consent to receive SMS verification codes.
- Why: to confirm you are the account holder and prevent unauthorised access.
- How SMS is sent: through Firebase Authentication (Google). Google’s privacy policy applies to message delivery. We do not use any other SMS provider.
- Sharing: your phone number is not shared with any third party for marketing or any other purpose.
- US users (TCPA): SMS verification is opt-in. You explicitly consent by ticking the consent checkbox at signup. Standard message and data rates may apply.
- How to remove: delete your account (or contact us at learnbygame100@gmail.com). Your phone number is permanently deleted along with all other account data.
Notifications
When you grant notification permission, we store a device-specific notification token (called an “FCM token”) that lets us deliver notifications to your device.
- What we collect: the FCM token, plus your timezone and chosen reminder time, so we can deliver practice reminders at the right local time.
- What we use it for: practice reminders at the time you choose; service messages such as “your child completed an exam”, “your homework is due tomorrow”, or “your subscription renews tomorrow”; and messages from your teacher or parent when they send a cheer or feedback through the app.
- Marketing: marketing notifications (announcements of new content or promotions) are sent only if you explicitly tick the opt-in checkbox on the subscription screen. You can turn marketing off at any time in your account settings.
- Quiet hours: scheduled notifications are sent only between 08:00 and 20:00 in your local time. Urgent billing notifications (such as a failed payment) may be delivered outside these hours.
- Sharing: the token is not shared with any third party for marketing. It is delivered to Apple Push Notification service (APNs) for iOS and Firebase Cloud Messaging (Google) for Android — the standard operating-system infrastructure required to deliver notifications.
- How to remove: disable notifications in your operating system settings at any time — we detect that the token no longer works and stop sending. The token is permanently deleted when your account is deleted.
Sharing with third parties
We do not sell, rent, or share personal data with third parties, except as required by applicable law.
Children’s privacy — COPPA compliance
Learn Imla is designed for children under parental supervision. The U.S. Children’s Online Privacy Protection Act (COPPA) and similar laws require extra care with data about children under 13. We comply as follows:
Account creation by parents only. Only a parent (a person 18 or older) can create an account. During sign-up, the parent confirms their age and explicitly consents to their child’s data being processed.
Child accounts have no email or phone. A child’s login is a username chosen by the parent. The child does not provide their own email address or phone number. All recovery emails and notifications are sent to the parent’s contact.
Minimal data collection. From a child profile we collect only what’s needed to teach grammar and track progress:
- Display name
- Date of birth (used only to suggest the right level)
- Gender (used only to render an avatar)
- Learning progress: topics studied, scores, stars earned
- Optional: a child email or phone if the parent enters one — used only as an additional login identifier
We do not collect: location, contacts, photos, audio, microphone, behavioural-advertising profiles, or any data unrelated to learning grammar.
No advertising. We do not show ads of any kind to children, and we never share child data with third parties for marketing or profiling.
Parental access and deletion. The parent has full access to the child’s data inside the app and can delete the child’s profile (or their entire account) at any time:
- In-app: Settings → “Delete my account and all children’s data”
- By email: learnbygame100@gmail.com — we will delete the data within 30 days.
Verifiable parental consent. We do not knowingly collect personal information from a child under 13 without verifiable parental consent. If we discover that we have, we delete the information immediately. If you believe a child has used Learn Imla without their parent’s consent, please contact us.
Your rights
You have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Delete your account and all data at any time, either in-app (Settings → “Delete my account and all data”) or by emailing learnbygame100@gmail.com
- Export your data in a machine-readable format (JSON), via the in-app “Export my data” button or by emailing us. This satisfies GDPR Art. 20 (data portability)
- Object to data processing (EU residents — GDPR Art. 21)
- Withdraw consent at any time (EU residents — GDPR Art. 7)
Contact us at learnbygame100@gmail.com to exercise any of these rights.
Changes to this policy
We may update this policy. Continued use of the app after changes constitutes acceptance of the updated policy.