Privacy Policy

Guby (“we”, “us”) is a gentle Android app that helps children hold their devices at a healthy viewing distance. Guby is operated by Plavaga Software Solutions Pvt Ltd (“Plavaga”), an Indian company with its registered office at #1203, Tower 4, Salarpuria Cadenza, Kudlu Gate, Hosur Road, Bengaluru, Karnataka 560068, India. This policy explains what data Guby processes, what we transmit, and your choices. We built Guby to need as little data as possible.

1. Who this applies to

Guby is set up and controlled by a parent or legal guardian (“you”). Because a child may use the device, you provide consent as the device owner under Section 9 of India's Digital Personal Data Protection Act, 2023 (DPDPA). We treat all in-session data as device telemetry processed under your consent.

2. What Guby processes

• Camera frames (transient, on-device only): While an active session is running, Guby uses the front camera solely to estimate viewing distance. Frames are processed in memory and discarded immediately. They are never written to storage and never leave the device.
• Anonymous usage summaries (uploaded to our servers): Aggregate, non-identifying figures — session length, number of distance reminders, average distance, time of day. These are used to generate your weekly email recap. They contain no images, no audio, and no information that identifies your child.
• Anonymous feature usage (uploaded): Which Guby features are opened or toggled, attributed to a random per-install token (not to you or your child). Used to prioritise product improvements.
• Crash diagnostics (uploaded when a crash occurs): Stack trace, device model, OS version, and Guby version. No content from the screen and no personal data.
• Setup details: Your email address (to send the weekly recap) and your chosen settings (watched apps, quiet hours, PIN, recap day). Your email is stored on our servers; the rest stays on the device unless required for the recap.

3. What Guby does not do

• No photos, video, or audio are recorded or uploaded — only anonymous numeric summaries.
• No facial recognition, biometric identification, or profiling of the child.
• No tracking of the content your child views, the messages they send, or the apps they open beyond the list you choose.
• No advertising, and no sale or sharing of personal data with marketers or data brokers.

4. Where data lives, and for how long

Live distance estimation is fully on the device. Anonymous numeric summaries, anonymous feature-usage events, and crash diagnostics are transmitted over TLS to our servers (operated by Plavaga, hosted in India on Amazon Web Services Mumbai region). Your email address is stored to deliver the weekly recap.

Retention (proposed, pending legal sign-off):

• Aggregate usage counts: 24 months — long enough for multi-month trends in your recap. (proposed)
• Anonymous feature-usage events: 12 months, then aggregated and originals deleted. (proposed)
• Crash diagnostics: 90 days. (proposed)
• Your email address: kept until you delete your Guby account or uninstall the app. Removed within 30 days of deletion request. (proposed)

Final retention windows will be confirmed in docs/legal-followup.md before public launch.

5. Permissions we request

• Camera — to estimate viewing distance during active sessions only.
• Display over other apps — to show the gentle reminder on top of other apps.
• Notifications — to show the required foreground-service indicator so you can see Guby is active.
• Internet — to upload anonymous summaries, send crash diagnostics, and deliver the weekly recap.
• Battery optimisation exception (optional) — to keep Guby reliably running on some devices.
• Usage access (optional) — required only if you enable App Filter Mode, so Guby can detect which app is currently in the foreground and start/stop accordingly.

6. Your choices & rights

You can pause Guby, change or revoke permissions in your device settings, or uninstall the app at any time. Under the DPDPA you have rights of access, correction, and erasure with respect to personal data we hold.

To delete your server-side data, email hello@guby.app or use the planned “Delete my account” option inside Guby's settings. Uninstalling the app removes all on-device data; we will remove server-side data within 30 days of your email request.

7. Service providers

Guby is built and operated by Plavaga Software Solutions Pvt Ltd (plavaga.com). Server hosting is provided by Amazon Web Services in the Mumbai region. We do not share your data with marketers or data brokers.

Additional service providers — for analytics, crash reporting, and email delivery — will be named here once selection is finalised. (Currently tracked in docs/legal-followup.md.)

8. Children's data

Guby is intended to be operated by a parent or guardian on behalf of a child. We minimise data collection by design: we never collect a child's photo, voice, identity, or content. We never use children's data for advertising, and never sell it. Processing relies on your verified consent as guardian.

9. Changes to this policy

We may update this policy as Guby evolves. Material changes will be reflected here with an updated effective date and, where required, a notice in the app.

10. Contact

Privacy questions: hello@guby.app.

Postal address: Plavaga Software Solutions Pvt Ltd, #1203, Tower 4, Salarpuria Cadenza, Kudlu Gate, Hosur Road, Bengaluru, Karnataka 560068, India.

Grievance Officer (DPDPA s.13): A dedicated officer and response SLA will be appointed before public launch. (Tracked in docs/legal-followup.md.)