Privacy
Last updated 28 September 2026
Tivumo holds no personal data about your child.
There is no sign-up, no account and no password. We do not ask for a name, an age, a school, an email address or a phone number, so there is nothing about a student for us to store, lose or share. Their progress is saved on their own device and never sent to us. There are no advertisements and no advertising trackers.
We do count what happens in the app — a game started, a game finished, a common mistake made — so that we can fix the lessons that are not working. Those counts are anonymous, are never used for advertising, and can be switched off in one tap under Progress. See Usage measurement below.
What is stored, and where
When a student plays, the app saves their progress in their own browser, on their own device, using standard browser storage. That record never leaves the device: we cannot read it, and neither can anyone else. The anonymous counts described under Usage measurement are separate, are not this record, and cannot be used to reconstruct it.
| What | Where it is kept |
|---|---|
| Which games have been played, and how they went | The student's own browser |
| Which skills are progressing toward mastery | The student's own browser |
| Which topic introductions have been seen | The student's own browser |
| Anonymous counts of games started, finished and mistaken | Google Analytics and Microsoft Clarity — switchable off under Progress |
| Only if a parent turns on the phone reminder: an anonymous delivery address, the chosen time, the time zone and when the next reminder is due | Our reminder server — see Daily reminder |
| Name, age, email, school, contacts, location | Never asked for, never stored |
Deleting your data
Progress on the device. Clearing the site data for
learn.tivumo.com in the browser's settings erases all of it, immediately and
completely. On Android, uninstall the Tivumo app and clear Chrome's site data for
learn.tivumo.com. Progress was never sent to us, so this is the whole of it.
Usage measurement. Set Usage measurement to Off under Progress and nothing further is sent. What was already counted holds no name or contact details, and Google Analytics deletes event-level data after its retention period. To ask for it to be deleted sooner, email [email protected] with the subject "Delete my data" and the approximate dates the app was used; we delete what can be matched and reply within 30 days.
Phone reminder. Turn off under Profile deletes the reminder's server record at once. Nothing else about the device is kept.
The practical trade-off worth knowing: the same act erases the student's progress, and it cannot be recovered. That is the direct cost of keeping nothing on a server.
Working offline
After the first visit, the app is stored on the device and works with no internet connection at all. Everything a student does — every question, every answer, all of their progress — is worked out on the device and stays there. There is no advertising network, no social network, and no fonts or scripts loaded from anywhere else. The two exceptions are the usage measurement described below, which can be switched off, and the phone reminder described below, which is off unless a parent turns it on; nothing else may load, and that is enforced by the app's content security policy rather than only by this promise.
Usage measurement
So that we can tell which lessons are working and which are confusing children, the app reports anonymous counts of what happens in it — a game was started, a game was finished, whether the answer was right, which common mistake was made, which topic introduction was opened. Two services receive these: Google Analytics, which counts them, and Microsoft Clarity, which records anonymised on-screen interactions so we can see where a screen is hard to use.
What is never sent: a name, an age, an email address, a school, a location, or any answer a student typed or dragged. No account exists, so nothing can be tied to a person. Advertising features and Google Signals are switched off, and this data is never used for advertising, never sold, and never combined with anything else.
It can be switched off. Open Progress and set Usage measurement to Off: from that moment nothing further is sent, and the next time the app opens the two services are not contacted at all. The app is fully functional either way — nothing is withheld, and you are never asked again. If the browser or phone sends a Do Not Track or Global Privacy Control signal, measurement stays off without anyone having to find this setting.
Daily reminder
Under Profile, a parent can set up a daily reminder. There are two kinds, and neither is on unless a parent chooses it.
A calendar reminder. The app makes a daily calendar entry on the device, and the parent adds it to Google Calendar or to the phone's own calendar. The app sends nothing anywhere to do this. To stop it, delete the event from the calendar.
A phone reminder. This is offered only in the installed app. The phone asks for permission to show notifications only after the parent taps to turn it on. Our reminder server then keeps one entry for that phone, holding exactly this: the anonymous delivery address the phone's browser gives us for notifications (it names no person and no account), the time the parent chose, the time zone, when the next reminder is due, and when the entry was made. At that time each day the server sends an empty signal, and the phone writes the words itself from what is already on it, such as the name of the next game. The server never learns the child's progress, answers, name or anything else.
The one thing the phone tells the server: on a day the daily goal is met, it moves the next reminder to tomorrow, so a child who has already practised is not reminded. That time is overwritten each time, never added to a list, so the server keeps no record of which days a child practised. If the phone is offline that day, the reminder still arrives, saying the goal is already done.
At most one reminder a day. It never mentions losing a streak and never shows the mascot. If five reminders in a row go untapped, the app turns them off by itself and says so in Profile. To turn it off at any time, open Profile and tap Turn off: the server entry is deleted and the phone stops accepting reminders. Blocking notifications for the app in the phone's settings also stops them.
The Android app
The Tivumo app on Google Play is this same app, opened in Chrome on the phone,
without the address bar. It reports the same anonymous usage counts to Google Analytics
as described under Usage measurement, and the same Off
setting under Progress stops them. Microsoft Clarity is never loaded inside the
Android app, so nothing on the screen is recorded there. Progress stays on the phone, stored by Chrome for learn.tivumo.com, exactly
as described above. To remove it, uninstall the app and clear Chrome's site data for
learn.tivumo.com; Android may offer to clear that data when the app is
uninstalled. If a parent turns on the phone reminder, it works as described under
Daily reminder and appears as the app's own notification.
Our hosting provider
The app's files are delivered by Cloudflare, a content delivery network. Like every web server, Cloudflare's servers record ordinary technical request information, which can include an IP address, when a file is downloaded. We use this for nothing: we run no analytics over it and we do not build profiles from it. It is a standard part of how any website reaches a device, and it applies to the files being downloaded — not to anything a student does inside the app, which never reaches the network at all.
Children
Tivumo is made for school students, and it is designed so that the question of children's data mostly does not arise: we hold no name, age, email, location or account for any child, so there is none to misuse and none that could be exposed. The usage measurement above counts what happens in the app, not who did it, and a parent can switch it off in one tap.
There is no behavioural advertising, no advertising profile and no tracking of a child across other websites or apps — neither we nor the two measurement services are permitted to use this data that way, and the advertising features of both are switched off. India's Digital Personal Data Protection Act 2023 requires verifiable parental consent before a child's personal data is processed; this version of the app holds none, and the one thing it does measure is anonymous, off-switchable and never used to profile or advertise to anybody.
If that ever changes
We plan to offer optional accounts in future, so that progress can be backed up and moved between devices. That is genuinely optional and does not exist in this version. If and when it ships:
- the account belongs to a parent, never to the child;
- a parent's verified consent will be required before anything syncs;
- playing will never require an account, or consent, or an internet connection;
- this notice will be updated before the feature is switched on, not after.
Schools
Because no student data is collected, there is nothing for a school to sign a data processing agreement about, and no records for us to hand over or be compelled to produce. A student can use the app with no account, on a shared device, without identifying themselves to anyone.
Changes to this notice
If this notice changes, the date at the top changes with it. Substantive changes — anything that alters what is collected — will be shown in the app itself rather than quietly published here.
Contact
Questions about privacy can go to [email protected].