Privacy Policy

LevelUp is a free learning and quiz app published by Super Sheldon / Sheldon Labs Pvt. Ltd. (“we”, “us”, “our”). We build tools to help students practice, track progress, and enjoy learning through gamified quizzes.

If you have any questions about this policy, you can contact:

We deliberately collect as little personal data as possible to run the app. Depending on how you use LevelUp, we may collect:

• Email address — to create your account, let you sign in, and send important account messages (for example, password resets or security alerts).
• Phone number — to verify that it is really you using one-time passwords (OTPs) and to help recover your account if you lose access.
• Learning activity — quiz attempts, scores, XP, streaks, levels, and where you stopped in your practice so that we can show your progress and keep your learning history.
• Basic technical information — such as device model, app version, and crash reports to fix bugs and keep the app working reliably.

We do not collect payment details, precise GPS location, contacts, SMS messages, photos, microphone audio, advertising IDs, browsing history, or school records beyond what is needed to show your practice progress.

We use your email, phone number, and in‑app activity only for these purposes:

• To create, maintain, and secure your account.
• To let you sign in and verify your identity using OTP or similar methods.
• To save your learning progress and display XP, streaks, and levels to you.
• To send essential service messages, such as password resets, security alerts, or important changes to this Privacy Policy or the Terms of Service.
• To improve app stability and performance using anonymous diagnostics and crash reports.
• To comply with the laws and regulations that apply to us, including Indian data protection laws.

We do not use your data for advertising, behavioural tracking, or any third‑party marketing.

We do not sell, rent, or trade your personal data. We share a limited amount of information only when strictly necessary:

• Hosting and authentication provider (Google Firebase / Google Cloud): stores your account and runs the backend services under our instructions and contracts; they are not allowed to use your data for their own purposes.
• Legal requirements: if we are required to do so by law, a valid court order, or a request from authorities.
• Business transfer: if our company or assets are ever acquired or merged, your data may be transferred as part of that transaction, and the new owner must respect this Privacy Policy.

There are no advertising networks, data brokers, or analytics partners profiling you.

LevelUp is an educational app and some users are children. We treat children’s privacy with special care:

• If a user is considered a child under the laws of their country (for example, under 13 in the US, under 16 in the EEA, under 18 in India), we require a parent or guardian to provide consent before the child uses the app, where legally required.
• We do not show advertising to children.
• We do not build marketing profiles about children.
• We do not share children’s data with third parties except as necessary to run the app (for example, hosting and authentication).
• A parent or guardian can contact us at support@supersheldon.com at any time to review, correct, or delete their child’s information, or to withdraw consent.

We do not knowingly collect personal data from children without appropriate consent where the law requires it.

We use technical and organisational safeguards to protect your information:

• All traffic between the app and our servers is encrypted using TLS (HTTPS).
• Data is stored with encryption at rest on secure Google Cloud servers.
• Passwords (if used) are stored using one‑way hashing, not in plain text.
• Only authorised staff with a business need can access account data, following least‑privilege principles.
• We keep our software updated and monitor for suspicious activity.

No system can ever be 100% secure, but we work hard to protect your data. If we become aware of a data breach that is likely to affect you, we will notify you and, where required, the relevant authority without undue delay.

We keep your data only for as long as needed to run the service or as required by law:

• Account data (email, phone, learning progress): kept while your account is active.
• After you delete your account: removed from our active systems within about 30 days; remaining copies in encrypted backups are deleted through normal backup rotation.
• Crash and diagnostic logs: kept for around 90 days to help us debug issues.

When we no longer need data, we either delete it or irreversibly anonymise it.

Depending on where you live, you (or your parent/guardian for a child account) may have the right to:

• Access the personal data we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your account and associated personal data, subject to legal retention obligations.
• Withdraw consent for certain processing, such as notifications or other optional features.
• Complain to a data protection authority (for example, the Data Protection Board of India, or the relevant authority in your country).

To exercise any of these rights, please email us at support@supersheldon.com. We aim to respond within 30 days.

• The mobile app may store authentication tokens and a device identifier in secure storage to keep you signed in and sync your progress.
• We do not use advertising cookies or cross‑site tracking cookies.
• The app typically needs the Internet permission to load quizzes and sync your data and may request Notifications permission to send reminders and updates; you can turn notifications off in your device settings.
• We do not request access to your location, contacts, SMS, camera, microphone, or photo gallery for LevelUp.

Your data is hosted on Google Cloud servers, primarily in regions selected to provide reliable service (for example, Asia‑South1 — Mumbai, or other supported regions as needed). For technical reasons, some data may be processed in other regions (for example, for authentication or push notifications), using lawful transfer mechanisms where required.

We aim to comply with applicable data protection laws, including:

• The Digital Personal Data Protection Act, 2023 (India) and the Information Technology Act, 2000
• COPPA for users under 13 in the United States
• GDPR‑style requirements in regions such as the UK and EEA, where applicable
• Google Play and similar app store user data policies for apps used by children and families

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last Updated” date at the top and notify active users in the app or by email before the changes take effect.

If you continue using the app after the new version becomes effective, it means you accept the updated Privacy Policy.

If you have questions, concerns, or requests about your data or this Privacy Policy, you can contact us at: