Last updated: 15 May 2026
Elphi Kids is a learning app for children aged 3–10. We collect only what is needed to make the app work. We never sell your data. We do not show ads. We do not track or profile children. A parent or guardian must sign in and set up the child's profile. You can delete all data at any time by emailing us.
Elphi Kids ("we", "us", "our") is operated by Elphi Kids, India. Our app is available on Google Play under the package name com.elphikids.app.
For any privacy questions, contact us at:
Email: officialelphikids@gmail.com
Website: elphikids.com
Elphi Kids is designed for children. We take this responsibility seriously and comply with applicable children's privacy laws, including:
Key principle: Children never interact with the app unsupervised during account setup. A parent or legal guardian must authenticate via Google Sign-In and create the child's profile before the child uses the app.
We collect only the minimum data required for the app to function. Here is exactly what we collect, why, and where it is stored:
| Data | Purpose | Storage |
|---|---|---|
| Parent's Google account (email, name) | Authentication and account recovery | Supabase (cloud) |
| Child's first name | Personalised greetings in the app | Device + Supabase |
| Child's age | Age-appropriate content and difficulty | Device + Supabase |
| Child's gender | Personalised voice prompts | Device + Supabase |
| Parent phone/email (optional) | Account recovery, if voluntarily provided | Supabase |
| School code (optional) | Linking to school programme, if applicable | Supabase |
| Referral code (optional) | Referral programme tracking | Supabase |
| Data | Purpose | Storage |
|---|---|---|
| Learning progress (stars, scores, correct answers) | Track child's learning journey | Device (SQLite) + Supabase |
| Session logs (duration, questions played) | Usage insights for parents | Device (SQLite) + Supabase |
| Device ID | Device binding (max 2 devices per account) | Supabase |
The "Play with Color" feature uses the device camera to detect colours in the child's environment. Camera images are processed entirely on the device in real time. No photos or camera data are stored, uploaded, or transmitted anywhere.
We do not collect: location data of any kind (no GPS, no IP-based geolocation, no city, state, or country), contact lists, call logs, SMS, microphone audio, browsing history, advertising identifiers, biometric data, or any data beyond what is listed above. We do not use cookies or web-based tracking technologies in the app.
When you tap "Contact Support" on a payment validation failure, we create a support ticket containing: a unique ticket ID (format EK-XXXXXX), your account ID, the timestamp, the subscription product attempted, and a short technical summary of what went wrong (e.g. "validation failed: subscription state expired"). Camera images, child name, child age, and child gender are not included in support tickets. Tickets are reviewed by our team and resolved through the in-app Try Again button. We retain support tickets for as long as your account is active. You can request deletion of all support history along with your account (Section 9).
We use the collected data exclusively for these purposes:
We never: sell, rent, or trade any personal data. We never use data for targeted advertising. We never profile children for marketing. We never share data with advertisers. We do not show any advertisements in the app.
We use a limited number of third-party services, each chosen for its privacy standards:
| Service | Purpose | Data shared |
|---|---|---|
| Google Sign-In | Parent authentication | Google account email and name |
| Supabase (hosted in Mumbai, India) | Secure cloud database and authentication | Profile, progress, and session data as listed above |
| Supabase Edge Functions | Server-side support ticket creation, closure, and subscription receipt validation | Ticket data as listed in 3e; Google Play purchase token (validation only) |
We do not use any analytics SDKs, advertising networks, social media trackers, or third-party data brokers. We do not integrate any SDK that is not approved for use in child-directed services.
All cloud data is stored on Supabase servers in the South Asia (Mumbai) ap-south-1 region. Data is encrypted in transit using TLS/SSL. Supabase enforces Row-Level Security (RLS) policies, ensuring each parent can only access their own family's data.
On the device, learning progress is stored in a local SQLite database and synced to the cloud when connectivity is available. Device-side data is accessible only to the Elphi Kids app through standard Android sandboxing.
Admin access to our backend systems is restricted to authorised personnel only, protected by hashed PIN authentication and email-gated access controls.
Elphi Kids requires a parent or legal guardian to authenticate via Google Sign-In before any child data is collected. The child does not create an account independently. By signing in and setting up a child profile, the parent provides verifiable consent for the data collection described in this policy.
Under India's DPDP Act, the parent or legal guardian acts as the consenting data principal for any child under 18. Under COPPA, the parent provides consent for children under 13.
Parents can withdraw consent at any time by requesting account and data deletion (see Section 9 below).
We retain your data only as long as your account is active and the app is in use. Specifically:
When you request account deletion, all data (profile, progress, sessions, device bindings) is permanently deleted from both the device and our cloud servers within 30 days.
As a parent or guardian, you have the following rights regarding your child's data:
To exercise any of these rights, email us at officialelphikids@gmail.com. We will respond within 30 days.
For Indian users: Under the DPDP Act, you may raise a grievance with us at the email above. If you are unsatisfied with our response, you may approach the Data Protection Board of India once it is fully operational.
Elphi Kids does not display advertisements of any kind. We do not use behavioural tracking, cross-app tracking, or any form of profiling. We do not serve targeted content based on data collection. The app's content adaptation (difficulty level, question types) is based solely on the child's age as provided by the parent, and on in-session performance — not on any tracking or profiling mechanism.
Elphi Kids operates on a freemium model. The free tier provides access to selected learning categories. The premium tier is available as auto-renewing subscriptions of 3 months, 6 months, or 1 year (prices set in Google Play and visible at purchase time). All payment processing is handled through Google Play Billing. We do not directly collect, store, or process any payment card information, bank details, or financial data. Google's own privacy policy governs payment data.
You can cancel your Elphi Kids subscription at any time via your Google Play account settings. After cancellation, you will retain access to premium content until the end of your current paid billing period — no proration refund is issued for unused time. If your payment fails, Google Play will retry charges for up to 7 days during which you keep full access (grace period). After 7 days of failed payments, your subscription will be put on hold and access suspended for up to 30 days while Google retries; if payment is not recovered in that window, the subscription expires. For refund requests outside this policy (purchase failures, billing errors, technical issues), contact us via the in-app Support button — we will review case-by-case.
When you complete a subscription purchase, our server verifies the purchase by calling the Google Play Developer API with the purchase token Google provides. Only the purchase token is sent to Google for verification. No additional personal data is shared with Google during this verification step.
We may update this privacy policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes to data practices, we will notify users through the app or via the email associated with their account.
We encourage you to review this page periodically. Continued use of the app after changes constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests about this privacy policy or your child's data, please contact us: