Privacy Policy

Developer: Brolly Software Solutions Pvt Ltd · Contact: brollysolutions.in@gmail.com · +91 81868 44555

Brolly ("we," "us," or "our") provides Brolly Wonder, a children's educational application. Inside the app the learning world is called WonderVerse; Brolly Wonder is the name of the application itself. This Privacy Policy explains what information the app handles, why it is used, how it is protected, and the choices available to parents and guardians.

1. Information handled by Brolly Wonder

Information stored on the device

Brolly Wonder lets a user enter a player display name and choose an avatar. The app also records learning and gameplay information, including:

• player display name and selected avatar;
• lesson and quiz results;
• learning progress, skill statistics, and activity history;
• time spent on learning activities;
• streaks, levels, stars, coins, badges, and rewards;
• saved mini-game levels and high scores; and
• virtual-pet selections and progress.

This information is used to provide the app's learning experience, show progress in the parent dashboard, and preserve progress between sessions.

By default this information is stored only on the device. Children do not have accounts, are never asked for an email address or a telephone number, and nothing about a child leaves the device unless a parent or guardian chooses to turn on cloud backup, described next.

Parents and guardians should encourage children to use a nickname rather than a full legal name. Brolly Wonder does not ask a child for an email address, telephone number, precise location, photograph, contacts, microphone recording, or camera access. The only telephone number the app ever collects is a parent's or guardian's own mobile number, and only if they choose to turn on cloud backup, described next.

Optional cloud backup (off by default)

A parent or guardian can optionally turn on cloud backup from the Parent Dashboard, which sits behind an adults-only question. It is off until they do, and it can be turned off again at any time.

How it is enabled. The parent enters their own mobile number and receives an automated telephone call that reads out a 6-digit code, which they type back into the app. The child never enters a mobile number and never has an account. The parent's mobile number is used to sign in and to identify the backup, and it is the only personal information about an adult that the app collects. There is no password, and the app does not send marketing calls or messages to that number.

What is stored when it is on. A copy of the same on-device information listed above — display name, avatar, lesson and quiz results, progress and skill statistics, time on task, streaks, currencies, badges, saved mini-game levels and high scores, and virtual-pet state. It is stored in our database, hosted by Supabase, in a row that only that parent's signed-in account can read or write. No advertising information is stored there.

The device stays in charge. The backup is used only when it is more recent than what is on the device, such as on a new or reinstalled device. It cannot overwrite newer progress made offline, and the app remains fully playable with no network at all.

Turning it off and deleting it. Signing out stops the backup and leaves the child's progress on the device untouched. The Parent Dashboard also offers Delete cloud data, which removes the stored copy from our database and signs the parent out; progress on the device is deliberately kept. This describes what the app does technically and is not a statement about any particular legal right or standard. Full instructions are on the Delete Your Account page.

Advertising and automatically processed information

Brolly Wonder includes the Google Mobile Ads SDK to display banner, interstitial, and rewarded advertisements. It does not include a separate analytics, attribution, or crash-reporting service. Google and its advertising technology may automatically collect or process information such as:

• the device's IP address, which may be used to estimate general location;
• interactions with the app and advertisements, such as app launches, taps, and video views;
• diagnostic and performance information; and
• an app set ID, where permitted — a developer-scoped identifier that is reset when the developer's apps are removed from the device.

Advertising identifier. Brolly Wonder does not request the Android advertising ID. The permissions that would let the app read a resettable advertising identifier — com.google.android.gms.permission.AD_ID and android.permission.ACCESS_ADSERVICES_AD_ID — are removed from the app when it is built, so the installed app cannot request one.

How advertisements are configured. Every ad request made by Brolly Wonder is configured for a child audience:

• requests are tagged as child-directed;
• requests are tagged as directed to users below the age of consent;
• the maximum ad content rating is set to "General"; and
• only non-personalised advertisements are requested, so advertisements are not selected using a profile of the user's interests.

These are technical settings applied to every ad request. They describe how the application is configured; they are not a statement of compliance with any particular law, certification, or programme.

Google states that information collected by the Google Mobile Ads SDK is encrypted in transit. Google may use this information for advertising, measurement, and fraud prevention. Google's handling of information is governed by its own policies. More information is available at Google's Privacy Policy and Google's advertising information.

Brolly does not sell children's personal information.

2. How information is used

Information handled by the app is used to:

• operate lessons, quizzes, rewards, and virtual-pet features;
• save and display learning progress;
• provide parents or guardians with an on-device progress dashboard;
• maintain app reliability, security, and performance;
• display and measure advertisements; and
• prevent advertising fraud and abuse.

3. Children's privacy

Brolly Wonder is designed as an educational experience for children. We aim to minimize the information requested from children and do not require account registration. A player display name is stored on the device and may be a nickname.

Advertising providers may process device and usage information as described above. Brolly configures every advertising request for a child audience — child-directed, below the age of consent, "General" content rating, and non-personalised only — as set out in section 1.

Parents and guardians should supervise children's use of the app. If you believe a child has provided personal information inappropriately, contact us using the details below. We will review the request and take reasonable steps within our control.

4. Sharing of information

Brolly does not sell or rent personal information. Information may be processed by Google through the Google Mobile Ads SDK for advertising delivery, measurement, diagnostics, and fraud prevention. When a parent turns on cloud backup, the backed-up information and the parent's mobile number are stored with Supabase, which hosts our database and sign-in service on our behalf, and that mobile number is passed to MSG91, which places the automated verification call on our behalf. Information may also be disclosed when required by law, to protect users or the public, or in connection with a business reorganization where permitted by law.

5. Data retention and deletion

Locally stored player and learning information remains on the device until the app's data is cleared or the app is uninstalled.

Brolly Wonder excludes its data from Android's own cloud backup and from device-to-device transfer. A child's learning record is not copied to a Google account by the operating system, and it does not follow the user to a new device that way.

A parent or guardian can delete all locally stored Brolly Wonder data through the Android device settings by selecting the app and clearing its storage, or by uninstalling the app.

If cloud backup was turned on, a copy also exists in our database. That copy is removed by Parent Dashboard → Cloud backup → Delete cloud data, and deleting the parent's account removes it as well. Clearing the app's storage on the device does not by itself remove the cloud copy, and deleting the cloud copy does not remove the device copy — the two are deliberately separate so that neither action destroys data the parent did not ask to lose. See Delete Your Account for step-by-step instructions.

Advertising information processed by Google is subject to Google's retention controls and privacy policy.

6. Security

We use reasonable measures intended to protect information handled by the app. Player and learning information is stored in the app's private storage area on the device. When cloud backup is on, it is also sent over an encrypted HTTPS connection to our database, where access rules restrict each row to the signed-in parent account that owns it. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.

7. International processing

Third-party service providers such as Google may process information in countries other than the user's country. Their processing is governed by their privacy terms and applicable legal safeguards.

8. Changes to this policy

We may update this Privacy Policy when the app, its third-party services, or legal requirements change. We will update the effective date at the top of this policy. Material changes may also be communicated through the app or its store listing where appropriate.

9. Contact us

For questions, concerns, or requests concerning this Privacy Policy or Brolly Wonder, contact: