Privacy Policy

Effective date: May 1, 2026  ·  Last updated: May 3, 2026

Plain-English summary (for kids & parents)

Discovery Academy is a learning app for kids ages 8–16. We do not show ads, we do not track you across the internet, and we do not sell your data. We use Google Sign-In so you can save your progress, and we save your XP and trophies in a secure database run by Google Firebase. That's it.

1. Who we are

Discovery Academy ("we", "us", "our") is the publisher of the Discovery Academy mobile app (iOS and Android) and this website. If you have privacy questions, email us at privacy@discoveryacademy.app.

2. The app is directed to children

Discovery Academy is designed for learners aged 8–16. We comply with the U.S. Children's Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation including GDPR-K (data of minors), the UK Age Appropriate Design Code, and equivalent laws in other regions where the app is available.

3. What data we collect

• Account info via Google Sign-In: your name, email address, and profile photo, as provided by Google's standard OAuth flow. We use Google Sign-In so we never see or store your password.
• Learning progress: which topics you have completed, your XP total, your daily streak, and which subject you chose as your free subject. This is what makes the app feel personal — without it, you would lose all your progress every time you opened the app.
• Quiz results: for each topic, the score you got and when you completed it. We store this so the app can show you how you are doing and unlock your next topic.
• Purchase status: whether you have unlocked all 7 subjects via the one-time in-app purchase. We do not store your credit card; that is handled entirely by Apple or Google.

We do not collect: location data, contacts, photos, microphone or camera input, browsing history, advertising identifiers, or biometric data.

4. How we use your data

We use the data above only to:

• Run your account and remember your progress between sessions.
• Show your trophies, XP, and unlocked subjects.
• Restore your purchase if you reinstall the app or switch devices.
• Reply to your support emails when you contact us.

We do not use your data for advertising, profiling, behavioural targeting, or marketing emails.

5. Where your data is stored

We use Google Firebase (Authentication and Cloud Firestore) as our infrastructure provider. Your data is stored on Google's secure servers, encrypted at rest and in transit. The Firebase region is set to a multi-region location that may include data centres in the United States and the European Union.

6. Who we share data with

We share data only with the sub-processors strictly required to run the app:

• Google Firebase — authentication and database hosting.
• Apple App Store  and  Google Play — purchase processing (we never see your payment details).

We do not share data with advertisers, analytics companies that profile users, data brokers, or any third party for marketing purposes.

7. Your rights — and your child's rights

Wherever you live, you (or, if you are a parent or guardian, your child) have the right to:

• Access the data we hold about you — email privacy@discoveryacademy.app and we will send you a copy.
• Correct data that is wrong.
• Delete your account and all associated data — email us with the subject line "Delete my account". We will action requests within 30 days.
• Withdraw consent at any time by deleting the app and your account.
• Lodge a complaint with your local data protection authority (e.g. the ICO in the UK, the FTC in the US, or your country's equivalent).

8. Parental controls and consent

If you are under 13 (in the U.S.) or under your country's "digital age of consent" (typically 13–16 in the EU/UK), we ask that a parent or guardian help you sign in. The Google account you use to sign in is itself governed by Google's age-appropriate policies — we rely on Google to verify that the account is appropriate for the user's age.

Parents who wish to review, modify, or delete their child's data can email privacy@discoveryacademy.app and we will verify the request and respond within 30 days.

9. How long we keep your data

We keep your account data for as long as your account is active. If you delete your account, we delete your data within 30 days, except for minimal records we may need to keep for legal or audit reasons (such as proof of a refund).

10. Security

We use industry-standard security: HTTPS for all network traffic, encryption at rest in Cloud Firestore, and strict access rules so that only your own account can read your data. No system is perfect, but we work hard to protect what you trust us with.

11. Cookies and analytics

The Discovery Academy app does not use advertising or analytics SDKs. The Discovery Academy website (this page) does not set any tracking cookies; if we ever add basic, privacy-respecting visitor analytics in the future, we will update this policy first.

12. International transfers

Because Firebase operates globally, your data may be processed in countries outside your home country, including the United States. Where this involves transferring personal data of EU/UK residents, we rely on Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner.

13. Changes to this policy

If we change this policy in a way that affects your rights, we will update the "Last updated" date at the top and, where the change is material, notify you in the app on next sign-in. Continued use of the app after a change means you accept the updated policy.

14. Contact us

Privacy questions or requests: privacy@discoveryacademy.app
General support: support@discoveryacademy.app