Skip to main content
Legal

Privacy Policy

Last updated: 12 August 2026 · Effective for Guby beta 1.0

Guby (“we”, “us”) is a gentle Android app that helps children hold their devices at a healthy viewing distance. Guby is operated by Plavaga Software Solutions Pvt Ltd (“Plavaga”), an Indian company with its registered office at #1203, Tower 4, Salarpuria Cadenza, Kudlu Gate, Hosur Road, Bengaluru, Karnataka 560068, India. This policy explains what data Guby processes, what we transmit, and your choices. We built Guby to need as little data as possible.

The short version: Guby estimates face-to-screen distance on your device. It does not record photos or video, and it does not identify your child. We do transmit anonymous numeric summaries (for your weekly email recap), anonymous feature-usage events (so we know what to improve), and crash reports (so we can fix bugs). No images. No identity. Ever.

1. Who this applies to

Guby is set up and controlled by a parent or legal guardian (“you”). Because a child may use the device, you provide consent as the device owner under Section 9 of India's Digital Personal Data Protection Act, 2023 (DPDPA). We treat all in-session data as device telemetry processed under your consent.

2. What Guby processes

  • Camera frames (transient, on-device only): While an active session is running, Guby uses the front camera solely to estimate viewing distance. Frames are processed in memory and discarded immediately. They are never written to storage and never leave the device.
  • Anonymous usage summaries (uploaded to our servers): Aggregate, non-identifying figures - session length, number of distance reminders, healthy-distance rate, time of day. These are used to generate your weekly email recap. They contain no images, no audio, and no information that identifies your child.
  • Anonymous feature usage (uploaded): Which Guby features are opened or toggled, attributed to a random per-install token (not to you or your child). Used to prioritise product improvements.
  • Crash diagnostics (uploaded when a crash occurs): Stack trace, device model, OS version, and Guby version. No content from the screen and no personal data.
  • Setup details: Your email address (required - it's how we send your weekly recap and identify your account) and your chosen settings (chosen apps, quiet hours, PIN, recap day). Your email is stored on our servers; the rest stays on the device unless required for the recap.

3. What Guby does not do

  • No photos, video, or audio are recorded or uploaded - only anonymous numeric summaries.
  • No facial recognition, biometric identification, or profiling of the child.
  • No tracking of the content your child views, the messages they send, or the apps they open beyond the list you choose.
  • No advertising inside the app, no profiling of your child for ads, and no sale or sharing of personal data with marketers or data brokers. (This website can measure whether an ad brought someone here - but only if you allow it, and it never involves app or child data. See section 6.)

4. Referral programme

Parents can share Guby with other parents. When someone installs Guby through a link you shared, we record a connection between your account and theirs so we can credit the invitation. This is parent-to-parent data only - it involves no child data whatsoever.

  • What we collect: your unique referral code (a short, randomly generated string - not derived from your name, email, or phone number), the install-referrer string received from the Google Play Store, and the date the referred account was created and first became active.
  • Why we collect it: to attribute organic invitations to the parent who shared Guby, and to understand how families are discovering the app.
  • Who can see it: only the Guby team, for internal analytics. We share aggregated, non-identifying counts (for example, “X families joined via referral this month”) with our analytics provider, PostHog. We never share individual inviter-invitee pairs externally.
  • How long we keep it: the link between the inviting and invited accounts is retained only while both accounts remain active. If either account is deleted, the link is removed.
  • Your rights: under the DPDPA you may request deletion of your account - and therefore this link - at any time via Settings → Delete my account in Guby, or by emailing hello@guby.app.

5. Where data lives, and for how long

Live distance estimation is fully on the device. Your email address and the anonymous numeric summaries that build your weekly recap are stored on our servers in India - hosted on Amazon Web Services (Mumbai region), with email delivered via Amazon SES (also Mumbai). All transfers are over TLS.

Cross-border processing. Two streams of anonymous, non-identifying data are processed by providers located in the United States: anonymous feature-usage events (via PostHog and Umami Cloud) and crash diagnostics (via Sentry). These contain no images, no audio, and nothing that identifies you or your child. Your personal data - your email address - never leaves India.

Separately, if you consent to analytics or advertising cookies on this website, Google also receives website-usage data in the United States (see section 6). That stream is website-only: it never contains app data, session data, or anything about your child.

How long we keep things:

  • Aggregate usage counts: 12 months - enough for multi-month trends in your recap.
  • Anonymous feature-usage events: 90 days, then deleted.
  • Crash diagnostics: 90 days.
  • Website analytics, only if you consented: retained by Google Analytics for 14 months, then deleted. Your cookie choice itself is remembered for 12 months, after which we ask again.
  • Your email address: kept until you delete your Guby account. On deletion it is erased immediately and irreversibly from our live systems; any residual copies in routine encrypted backups are purged within 30 days. Uninstalling the app removes all on-device data.

6. Cookies on this website

This section is about guby.app, the website you are reading now - not the Guby app. The app sets no cookies at all.

Nothing that could identify you loads until you choose. On your first visit we ask; until you answer, no analytics or advertising cookies are set and nothing is sent to Google. You can change your answer whenever you like via Cookie settings at the bottom of any page.

  • Essential (always on): a single entry in your browser's local storage that remembers the choice you made. It is not a tracking cookie and it is never sent to our servers - without it we would have to ask you again on every page.
  • Analytics (only if you allow it): Google Analytics, so we can see which pages parents actually read and where they arrived from. Sets Google's _ga cookies in your browser.
  • Advertising (only if you allow it): measurement signals for Google Ads, so we can tell whether an ad led someone to Guby. We do not build advertising profiles, and we never advertise to children.

We also use Umami Cloud for basic page counts. Umami is cookieless - it stores nothing on your device and cannot follow you between sites - so it needs no consent and is not part of the choice above.

If you decline, the site behaves exactly the same. We will not ask again for 12 months.

7. Permissions we request

  • Camera - to estimate viewing distance during active sessions only.
  • Display over other apps - to show the gentle reminder on top of other apps.
  • Notifications - to show the required foreground-service indicator so you can see Guby is active.
  • Internet - to upload anonymous summaries, send crash diagnostics, and deliver the weekly recap.
  • Battery optimisation exception (optional) - to keep Guby reliably running on some devices.
  • Usage access (optional) - required only if you enable App Filter Mode, so Guby can detect which app is currently in the foreground and start/stop accordingly.

8. Your choices & rights

You can pause Guby, change or revoke permissions in your device settings, or uninstall the app at any time. Under the DPDPA you have the right to access and correct the personal data we hold, the right to erasure, the right to grievance redressal, and the right to nominate another person to exercise your rights in the event of death or incapacity (DPDPA s.14). If a concern is unresolved, you may also complain to the Data Protection Board of India.

Withdrawing consent. Because the entire service runs on your consent as guardian, withdrawing that consent means deleting your account - there is no separate step. Open Settings → Delete my account in Guby and confirm with the code we email you. Deletion is immediate and permanent: your account and server-side data are erased right away and cannot be recovered (residual backup copies purge within 30 days). Uninstalling the app removes all on-device data. You can also email hello@guby.app to request deletion.

9. Service providers

Guby is built and operated by Plavaga Software Solutions Pvt Ltd (plavaga.com). We rely on the following service providers (subprocessors):

  • Amazon Web Services - server hosting, Mumbai (India).
  • Amazon SES - weekly-recap email delivery, Mumbai (India).
  • PostHog and Umami Cloud - anonymous product analytics, United States.
  • Sentry - crash diagnostics, United States.
  • Google (Google Analytics, Google Ads) - website analytics and ad measurement, United States. Active on this website only if you consent, and never in the Guby app - see section 6.

The US providers handle only anonymous, non-identifying data (feature-usage events, crash reports, and - with your consent - website usage). We do not share your data with marketers or data brokers.

10. Children's data

Guby is intended to be operated by a parent or guardian on behalf of a child. We minimise data collection by design: we never collect a child's photo, voice, identity, or content. We never use children's data for advertising, and never sell it. Processing relies on the consent you provide as the child's parent or guardian, and on our minimising the data we process about the child.

11. Security

We apply reasonable technical and organisational safeguards appropriate to the limited data Guby handles. Data in transit is encrypted with TLS, access to our systems is restricted, and we minimise the personal data we hold by design. No method of transmission or storage is completely secure, but in the unlikely event of a personal-data breach likely to affect you, we will act in a responsible and timely manner - taking steps to contain it and notifying you and the Data Protection Board of India where required under the DPDPA.

12. Changes to this policy

We may update this policy as Guby evolves. Material changes will be reflected here with an updated effective date and, where required, a notice in the app.

13. Contact

Privacy questions: hello@guby.app.

Postal address: Plavaga Software Solutions Pvt Ltd, #1203, Tower 4, Salarpuria Cadenza, Kudlu Gate, Hosur Road, Bengaluru, Karnataka 560068, India.

Grievance Officer (DPDPA s.13): Rishi Choudhary - grievance@guby.app. We respond to grievances within 7 working days. If your concern remains unresolved, you may escalate to the Data Protection Board of India.