Last updated: September 25, 2026
This Privacy Policy for Avner Avigad (doing business as Learn Imla) (“we”, “us”, or “our”) describes how and why we collect, store, use, and share (“process”) your personal information when you:
Questions or concerns? We are responsible for deciding how your personal information is processed. If you do not agree with this policy, please do not use Learn Imla. Contact us at learnbygame100@gmail.com.
We collect personal information that you provide when you register, when you add a child or a class, when you use the app, or when you contact us. Depending on your role (parent, Solo learner, teacher, or school administrator) this may include:
Sensitive information. We process student data — learning records such as answers, scores, stars, homework, and progress — to provide the service. See section 12.
Payment data. Payments are made on the website only, through Paddle, which acts as Merchant of Record. Paddle collects and stores your card details; we never see or store them. We receive only the subscription status, plan, and billing dates. Children cannot make purchases. Paddle’s privacy notice: paddle.com/legal/privacy.
Phone number and SMS verification. If you sign in with a phone number, we send a one-time verification code by SMS through Firebase Authentication (Google). We use your number only to verify you and sign you in, never for marketing, and it is deleted with your account. Standard message and data rates may apply.
When you use Learn Imla we automatically collect:
This information is used to keep the service secure and working, to fix problems, and for internal analytics. We collect no analytics and no crash reports while a child is signed in. From adult sessions, analytics use a randomly generated ID, never your name; you can switch analytics and crash reports off for your own account in Settings → “Help improve the app”. Advertising ID collection and ad-personalisation signals are switched off in the app.
If you allow notifications, we store a device notification token (Firebase Cloud Messaging; Apple Push Notification service on iOS), your time zone, and your chosen reminder time. We use them for practice reminders, service messages (for example “your child completed an exam” or “homework is due tomorrow”), and cheers or feedback from a parent or teacher. Marketing notifications (new content) are sent only if you opt in, and you can turn them off in Account Settings → Notifications. Scheduled notifications are sent only between 08:00 and 20:00 your local time; urgent billing notices may arrive outside those hours. Turning notifications off in your device settings stops them; the token is deleted with your account.
We do not obtain information from data brokers, marketing partners, or social media, and we do not use any information for targeted advertising.
We process your personal information to:
We process your information for other purposes only with your prior consent.
If you are in the EU or UK, we rely on:
If you are in Canada, we process your information with your express or implied consent, which you can withdraw at any time, or where the law permits processing without consent (for example, fraud prevention or compliance with a court order).
We share personal information only with service providers that run Learn Imla on our behalf, under contracts that allow them to use it only on our instructions:
| Purpose | Provider |
|---|---|
| Database, file storage, hosting, sign-in and SMS codes, push notifications | Google Firebase (Cloud Firestore, Cloud Storage, Hosting, Authentication, Cloud Messaging) on Google Cloud Platform |
| Server | Railway |
| Account and consent emails | Resend |
| Payments and invoicing | Paddle |
| Usage analytics | Google Analytics for Firebase |
| Crash reporting | Firebase Crashlytics |
| Beta testing | Apple TestFlight, Google Play Console |
| Cartoon avatar pictures | DiceBear — receives only the appearance options picked (hair, eyes, mouth) and a fixed seed, never a name or account detail |
We may also share information:
We do not sell personal information, and we do not share it for advertising.
On our website we use cookies and browser storage that are needed to keep you signed in and to protect the site (Firebase App Check with Google reCAPTCHA), and Google Analytics to understand how the site is used. We do not use advertising or social-media trackers, and we do not allow third parties to show ads on Learn Imla.
You can block or delete cookies in your browser; some features, such as staying signed in, may then stop working. To opt out of Google Analytics on the web, visit tools.google.com/dlpage/gaoptout. For Google’s privacy practices, see policies.google.com/privacy.
We operate from Israel. Our database is hosted by Google Cloud in Belgium (EU), and other providers process data in the United States, Ireland, and the United Kingdom. Israel is recognised by the European Commission as providing adequate data protection. For transfers to the United States and other countries, our providers use the European Commission’s Standard Contractual Clauses (and, where applicable, the EU–US Data Privacy Framework). Details are available on request.
We keep your personal information while your account exists, and delete it within one month after the account is deleted — unless the law requires us to keep it longer (for example, Paddle keeps invoice records for tax purposes).
We use technical and organisational measures to protect your information, including encrypted connections (HTTPS), access rules that limit each user to their own data, Firebase App Check to block unauthorised apps, and hashed storage of PINs and sign-in codes. No system is 100% secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you and the relevant authorities as the law requires.
Depending on where you live, you may have the right to:
How to use these rights: use “Manage my data” in the app, visit learnimla.com/delete-account, or email learnbygame100@gmail.com. We reply within 30 days and may ask you to confirm your identity.
Marketing notifications: turn them off in Account Settings → Notifications. We will still send service messages needed to run your account.
Complaints. Please contact us first. If you are not satisfied:
Some browsers offer a Do-Not-Track (DNT) setting. There is no agreed standard for responding to DNT signals, so we do not currently respond to them. Because we do not sell personal information or use it for advertising, this does not change what we collect.
If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the rights described below.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | name, email, phone, username, IP address, device IDs | Yes |
| B. California Customer Records information | name, contact details, education | Yes |
| C. Protected classification characteristics | age, date of birth, gender | Yes |
| D. Commercial information | subscription plan and purchase history | Yes |
| E. Biometric information | — | No |
| F. Internet or network activity | use of the app and website | Yes |
| G. Geolocation data | approximate location from IP address only | Yes |
| H. Audio, visual, or sensory data | — | No |
| I. Professional or employment information | — | No |
| J. Education information | student learning records | Yes |
| K. Inferences used to profile | — | No |
| L. Sensitive personal information | data from a known child; account login details | Yes |
We use sensitive personal information only to provide the service, and not to infer characteristics about you.
Retention: categories A, B, C, D, F, J, and L are kept while the account exists and up to one month after it is deleted. Category F analytics and category G (approximate location) are kept by Google Analytics for up to 2 months.
Sources: see section 1. Use and sharing: see sections 2 and 4.
We have not sold or shared personal information (including for targeted advertising) in the past 12 months. We disclosed categories A, B, C, D, F, G, J, and L to our service providers for business purposes.
You may have the right to know whether we process your data, to access it and get a copy, to correct it, to delete it, to obtain a list of the third parties we disclose it to, to limit the use of sensitive data, and not to be discriminated against for using these rights. We do not sell data, use it for targeted advertising, or profile you, so there is nothing to opt out of.
Visit learnimla.com/delete-account, email learnbygame100@gmail.com, or in the app use “Manage my data” or Account Settings → Help & Support. You may use an authorised agent, who must show written permission from you. We will verify your identity before acting on a request.
If we decline your request, you may appeal by emailing learnbygame100@gmail.com. We will reply in writing with our reasons. If your appeal is denied, you may complain to your state attorney general.
California residents may ask once a year, free of charge, which personal information we disclosed to third parties for their direct marketing. We do not disclose personal information for that purpose.
Learn Imla is designed for children. Children cannot create an account on their own: a child’s profile is created either by a parent from the parent’s own account, or by a teacher or school for a class. When a teacher or school adds a child, we email the parent and the child’s account is not activated until the parent confirms by clicking the link in that email. If the parent does not confirm, the link expires after 14 days and the details the school entered are deleted about two weeks after that. If no consent email can reach the parent (for example, no parent email was given), the details are deleted after 3 days. Learners aged 13 or older may register a Solo account themselves.
From children we collect only what the app needs to work: first name, username, date of birth, gender, sign-in details (a PIN or one-time code), and learning activity such as answers, scores, and progress. A child profile has no email address or phone number of its own, and no way to message anyone outside the child’s own class. We do not collect a child’s location, contacts, photos, or audio. We do not show ads to children, we do not sell or share their data for advertising, and children cannot make purchases.
A parent can at any time review the information we hold about their child, ask us to correct or delete it, or withdraw consent, by emailing learnbygame100@gmail.com or by using “Manage my data” in the app. We delete the child’s data within 30 days of the request.
If you believe a child has used Learn Imla without a parent’s consent, contact us and we will delete the information.
Learn Imla is operated from Israel by Avner Avigad, who is the owner of the database under the Israeli Protection of Privacy Law, 5741-1981. Israeli residents have the right to review the information we hold about them and to ask us to correct or delete it, by writing to learnbygame100@gmail.com. If you are not satisfied with our reply, you may complain to the Israeli Privacy Protection Authority.
We update this policy when our practices or the law change. The “Last updated” date at the top shows the latest version. If we make material changes, we will notify you in the app or by email.
Email: learnbygame100@gmail.com
Post: Avner Avigad Ezel 12 Kiryat Ono 5528012 Israel
You can review, export, update, or delete your personal information at any time. In the app, use “Manage my data”; or visit learnimla.com/delete-account; or email learnbygame100@gmail.com.