Skip to main content
Legal

Privacy Policy

Last updated: 2 June 2026 · Effective for Guby beta 1.0

Guby (“we”, “us”) is a gentle Android app that helps children hold their devices at a healthy viewing distance. Guby is operated by Plavaga Software Solutions Pvt Ltd (“Plavaga”), an Indian company with its registered office at #1203, Tower 4, Salarpuria Cadenza, Kudlu Gate, Hosur Road, Bengaluru, Karnataka 560068, India. This policy explains what data Guby processes, what we transmit, and your choices. We built Guby to need as little data as possible.

The short version: Guby estimates face-to-screen distance on your device. It does not record photos or video, and it does not identify your child. We do transmit anonymous numeric summaries (for your weekly email recap), anonymous feature-usage events (so we know what to improve), and crash reports (so we can fix bugs). No images. No identity. Ever.

1. Who this applies to

Guby is set up and controlled by a parent or legal guardian (“you”). Because a child may use the device, you provide consent as the device owner under Section 9 of India's Digital Personal Data Protection Act, 2023 (DPDPA). We treat all in-session data as device telemetry processed under your consent.

2. What Guby processes

  • Camera frames (transient, on-device only): While an active session is running, Guby uses the front camera solely to estimate viewing distance. Frames are processed in memory and discarded immediately. They are never written to storage and never leave the device.
  • Anonymous usage summaries (uploaded to our servers): Aggregate, non-identifying figures - session length, number of distance reminders, healthy-distance rate, time of day. These are used to generate your weekly email recap. They contain no images, no audio, and no information that identifies your child.
  • Anonymous feature usage (uploaded): Which Guby features are opened or toggled, attributed to a random per-install token (not to you or your child). Used to prioritise product improvements.
  • Crash diagnostics (uploaded when a crash occurs): Stack trace, device model, OS version, and Guby version. No content from the screen and no personal data.
  • Setup details: Your email address (required - it's how we send your weekly recap and identify your account) and your chosen settings (chosen apps, quiet hours, PIN, recap day). Your email is stored on our servers; the rest stays on the device unless required for the recap.

3. What Guby does not do

  • No photos, video, or audio are recorded or uploaded - only anonymous numeric summaries.
  • No facial recognition, biometric identification, or profiling of the child.
  • No tracking of the content your child views, the messages they send, or the apps they open beyond the list you choose.
  • No advertising, and no sale or sharing of personal data with marketers or data brokers.

4. Where data lives, and for how long

Live distance estimation is fully on the device. Your email address and the anonymous numeric summaries that build your weekly recap are stored on our servers in India - hosted on Amazon Web Services (Mumbai region), with email delivered via Amazon SES (also Mumbai). All transfers are over TLS.

Cross-border processing. Two streams of anonymous, non-identifying data are processed by providers located in the United States: anonymous feature-usage events (via PostHog and Umami Cloud) and crash diagnostics (via Sentry). These contain no images, no audio, and nothing that identifies you or your child. Your personal data - your email address - never leaves India.

How long we keep things:

  • Aggregate usage counts: 12 months - enough for multi-month trends in your recap.
  • Anonymous feature-usage events: 90 days, then deleted.
  • Crash diagnostics: 90 days.
  • Your email address: kept until you delete your Guby account. On deletion it is erased immediately and irreversibly from our live systems; any residual copies in routine encrypted backups are purged within 30 days. Uninstalling the app removes all on-device data.

5. Permissions we request

  • Camera - to estimate viewing distance during active sessions only.
  • Display over other apps - to show the gentle reminder on top of other apps.
  • Notifications - to show the required foreground-service indicator so you can see Guby is active.
  • Internet - to upload anonymous summaries, send crash diagnostics, and deliver the weekly recap.
  • Battery optimisation exception (optional) - to keep Guby reliably running on some devices.
  • Usage access (optional) - required only if you enable App Filter Mode, so Guby can detect which app is currently in the foreground and start/stop accordingly.

6. Your choices & rights

You can pause Guby, change or revoke permissions in your device settings, or uninstall the app at any time. Under the DPDPA you have the right to access and correct the personal data we hold, the right to erasure, the right to grievance redressal, and the right to nominate another person to exercise your rights in the event of death or incapacity (DPDPA s.14). If a concern is unresolved, you may also complain to the Data Protection Board of India.

Withdrawing consent. Because the entire service runs on your consent as guardian, withdrawing that consent means deleting your account - there is no separate step. Open Settings → Delete my account in Guby and confirm with the code we email you. Deletion is immediate and permanent: your account and server-side data are erased right away and cannot be recovered (residual backup copies purge within 30 days). Uninstalling the app removes all on-device data. You can also email hello@guby.app to request deletion.

7. Service providers

Guby is built and operated by Plavaga Software Solutions Pvt Ltd (plavaga.com). We rely on the following service providers (subprocessors):

  • Amazon Web Services - server hosting, Mumbai (India).
  • Amazon SES - weekly-recap email delivery, Mumbai (India).
  • PostHog and Umami Cloud - anonymous product analytics, United States.
  • Sentry - crash diagnostics, United States.

The US providers handle only anonymous, non-identifying data (feature-usage events and crash reports). We do not share your data with marketers or data brokers.

8. Children's data

Guby is intended to be operated by a parent or guardian on behalf of a child. We minimise data collection by design: we never collect a child's photo, voice, identity, or content. We never use children's data for advertising, and never sell it. Processing relies on the consent you provide as the child's parent or guardian, and on our minimising the data we process about the child.

9. Security

We apply reasonable technical and organisational safeguards appropriate to the limited data Guby handles. Data in transit is encrypted with TLS, access to our systems is restricted, and we minimise the personal data we hold by design. No method of transmission or storage is completely secure, but in the unlikely event of a personal-data breach likely to affect you, we will act in a responsible and timely manner - taking steps to contain it and notifying you and the Data Protection Board of India where required under the DPDPA.

10. Changes to this policy

We may update this policy as Guby evolves. Material changes will be reflected here with an updated effective date and, where required, a notice in the app.

11. Contact

Privacy questions: hello@guby.app.

Postal address: Plavaga Software Solutions Pvt Ltd, #1203, Tower 4, Salarpuria Cadenza, Kudlu Gate, Hosur Road, Bengaluru, Karnataka 560068, India.

Grievance Officer (DPDPA s.13): Rishi Choudhary - grievance@guby.app. We respond to grievances within 7 working days. If your concern remains unresolved, you may escalate to the Data Protection Board of India.