Legal
This is the StudyLight privacy policy. It is the same document shown inside the app under Settings → Privacy Policy.
This Privacy Policy explains how Voraky Retail LLP ("we", "us", "our") collects, uses, shares, stores and protects personal data when you use the StudyLight mobile application ("StudyLight" or "the app"), and the choices and rights you have. It is our privacy notice under India's Digital Personal Data Protection Act, 2023 and applies in every country where StudyLight is offered. It should be read with the StudyLight Terms of Service.
In this policy, "you" means the adult who installs, sets up or manages StudyLight, and "child" means a child who uses StudyLight under that adult's supervision.
StudyLight is published by Voraky Retail LLP (LLPIN AAP-1854), a limited liability partnership registered in India, trading as Caliberix. We decide how and why your personal data is processed, and we are responsible for it — the "Data Fiduciary" under Indian law, and the "operator" or "controller" under other laws.
Registered office: Flat No. 402, Sai Nilayam, H. No. 2-99/2, Plot No. 4-1-76-1-113 & 114, next to the Gram Panchayat Office, Nizampet, Hyderabad, Rangareddy, Telangana 500090, India.
Operating office, and the address on our Google Play listing: Ground Floor, Plot No. 942/1780 and 457/1781, Ward No. 17, Banka Bihari Nagar, Gate Bazar, Brahmapur, Ganjam, Odisha 760001, India.
Email: support@caliberix.com · Telephone: +91 88959 69259 (privacy and data requests are handled by e-mail)
Grievance Officer and privacy contact: M.B. Dalai, Designated Partner — support@caliberix.com
4.1 Data that stays on your phone. Scans and scores, room profiles and room names, child profiles (a first name or nickname, and an age band), session logs and streaks, everything in StudyTools, your Colour Blind Check answers, calibration values and preferences are stored in the app's private storage on your phone. We do not collect this data and have no access to it, except where you choose to sync scans to your account (4.3) or to share or export something yourself. The app excludes this data from Android device backups.
4.2 Account data. If you create an account or sign in, we process a user identifier, your email address or Google account identifier, how you signed in, and your subscription status. Before creating or signing in to an account, the app asks for a date of birth to confirm that the account holder is an adult; the app keeps only the age bracket the answer falls in (under 13, 13 to 17, or 18 and over) and when it was given, never the date itself.
4.3 Cloud scan history. If you have Pro, are signed in, and the scan-history setting is on, each scan is also stored under your account so that your history can be restored on a new phone. A stored scan contains: its date and time; the room name you gave it; the light level, colour temperature, melanopic light estimate, reading distance and daylight readings; the Study Score, its component scores and band; the age band used to calculate it; a random identifier for the child profile; and your phone model and screen density. It never contains the child's name or any image.
4.4 Purchases. Pro is bought through Google Play, which processes your payment. We never receive your card, bank or UPI details. Google Play and our subscription provider, RevenueCat, give us what we need to confirm and manage your subscription: a purchase token, the product, purchase and renewal dates, subscription status, and the country of purchase.
4.5 Analytics and crash reports (optional). Both are off until you switch them on in Settings → Privacy & consent, and you can switch either off at any time.
If you switch on analytics, Google Analytics for Firebase records eight events: a completed scan, with its Study Score and the factor that most needs attention; a reading-distance alert; the start and end of a study session; a win celebration, with its score; a tap on share, with the kind of card shared; a completed quiz; and a completed Colour Blind Check (whether it was completed, not your answers). Firebase also records a few standard events of its own, such as when the app is first opened, when each use of the app starts, how long it is used, and when the app or the operating system is updated. With each event, Firebase records a random app-instance identifier that it generates, your phone model, operating-system and app version, language, and an approximate country or region derived from your IP address. Events are not linked to your name, email address or account.
If you switch on crash reporting, Firebase Crashlytics receives a report when the app crashes or meets a serious error: the technical state of the app at that moment, your phone model and operating-system version, and a random installation identifier.
4.6 Location (optional). See section 6.
4.7 Camera and sensors. See section 7.
4.8 Security checks. To protect our servers from abuse, the app uses Firebase App Check with Google Play Integrity, which asks Google to confirm that a request comes from a genuine copy of StudyLight on a genuine Android device. Google processes device and app integrity information for this purpose. We do not use it to identify you.
4.9 Support. If you contact us, we process your email address and whatever you choose to tell us.
4.10 Connection data. Whenever the app connects to the internet, the services it reaches — including our providers — receive your device's IP address, which is necessary to deliver the connection. We do not use IP addresses to identify you and do not store them against your account.
We use personal data only for the purposes below, and on the basis stated.
The Study Score is calculated automatically on your phone. It is not used to make any decision about you or a child that has legal or similarly significant effects.
Location is optional. The app does not request location permission on its own; it asks only when you use a feature that needs it, and it never waits for it. Location is used for two things:
The daylight factor, one of the four factors in the Study Score. This is calculated entirely on your phone. Your coordinates are not sent anywhere for it.
The UV forecast on the home screen. For this, the app sends your coordinates, rounded to about one kilometre, to our own server, which requests the day's forecast from the Norwegian Meteorological Institute (MET Norway), a public weather service, and returns the UV information to the app. MET Norway receives only the rounded coordinates, from our server — not your device, your IP address or any identifier. Our server keeps the forecast for a rounded location for up to 6 hours, so that it does not have to request it again. The cached forecast carries no identifier and is not linked to you or your account.
If you decline location, everything except the daylight factor and the UV card continues to work.
During a reading, the camera is used for two things: estimating the colour of the light, and estimating reading distance. To estimate reading distance, StudyLight uses Google's ML Kit face-detection technology, on your phone, to locate a face in a still image. This is face detection, not face recognition: it does not identify anyone, and StudyLight does not create, store or transmit any facial template, face geometry or other biometric identifier.
Still images taken during a reading are held only in the app's private temporary storage on your phone and are deleted as soon as they have been analysed — normally within seconds. Any image left behind, for example if the app closes unexpectedly, is deleted the next time the app starts. No image or video is uploaded, shared or included in device backups, and no one — including us — can view it.
Room brightness comes from the phone's ambient-light sensor, not the camera. StudyLight does not use the microphone.
Notifications are sent only for the reminders and alerts listed in Settings → Notifications — such as study-session alerts, the eye-break timer, the streak reminder, exam reminders and the weekly digest — and only if you allow the app to send notifications. You can switch each of them off there. We do not send promotional notifications. A foreground service runs only while a study session you started is running, so that the session keeps measuring with the screen off; it shows a visible notification and stops when the session ends.
9.1 Adult-managed. StudyLight is designed to be set up and managed by an adult aged 18 or over — a parent, guardian or teacher. Accounts and subscriptions belong to the adult. We do not knowingly allow a child to create an account; if we learn that one has, we will delete it.
9.2 What we process about a child. A child profile — a first name or nickname and an age band, used to adjust the lighting thresholds for age — is stored only on the phone. If the adult switches on cloud scan history, scan records linked to a random child-profile identifier and the age band are stored under the adult's account (4.3); the child's name is never sent. If analytics or crash reporting is switched on for a phone a child uses, the data in 4.5 may relate to that use.
9.3 Consent. By creating a child profile and choosing the settings in Privacy & consent, the adult consents, on the child's behalf, to the processing described in this policy and confirms that they are the child's parent or lawful guardian. A teacher or other adult who uses StudyLight with a child must have the authority of that child's parent or lawful guardian to do so.
9.4 Persistent identifiers. The Firebase app-instance identifier and the Crashlytics installation identifier are used only to maintain, analyse and secure the app's functioning and to fix errors. They are never used for advertising, to build a profile of any person, or to contact anyone. We have switched off advertising personalisation and data sharing for advertising in our Firebase configuration.
9.5 What we never do. We do not show advertising of any kind, sell children's data, target advertising at children, track children across other apps or websites, build behavioural profiles of children, offer public profiles, chat or posting, or ask a child for more information than a feature needs.
9.6 Parents' rights. A parent or guardian can at any time review the data held about their child (in the app, and by exporting it), delete it (by deleting the child profile or using Delete my data), and refuse further collection (by switching off the relevant settings or deleting the account). To exercise any of these through us, contact the Grievance Officer.
10.1 Service providers. These companies process personal data on our behalf, under contracts that allow them to use it only to provide their service to us:
10.2 Other recipients. These parties receive limited data and handle it under their own terms and privacy policies:
10.3 When you share. Share cards and exports go wherever you send them through your phone's share sheet. Once shared, they are outside our control.
10.4 Legal and protective disclosures. We may disclose personal data where required by law, court order or a lawful request from a public authority, or where reasonably necessary to enforce our Terms or to protect the rights, safety or property of our users, the public or us.
10.5 Business changes. If StudyLight, or the business that operates it, is reorganised, merged, sold or transferred, including to an affiliate or successor, personal data may pass to the new operator, which will be bound by this policy unless and until you are told otherwise.
10.6 No sale. We do not sell personal data, and we do not share it for cross-context behavioural advertising.
Cloud data held in our database — account records and cloud scan history — is stored in India (Google Cloud region asia-south1, Mumbai). Some of our providers process data in other countries, including the United States and member states of the European Union, and a transfer of personal data may therefore take place. We transfer personal data only as permitted by the Digital Personal Data Protection Act, 2023 and with contractual safeguards in place with our service providers.
StudyLight is not offered in the European Economic Area or the United Kingdom.
We keep personal data only for as long as it serves the purpose for which it was collected, and then we delete it.
When data is deleted, it is removed from our active systems straight away. Our providers may take a limited further period to erase residual copies under their standard deletion processes.
We use reasonable security safeguards suited to the nature of the data, including encryption in transit, encryption at rest in Google Cloud, database rules that confine each account's cloud data to that account, App Check, and restricted administrative access. Data on your phone is protected by Android's app sandbox; keep your phone locked to protect it. No method of transmission or storage is completely secure. If a personal-data breach affects you, we will inform you, and the relevant authorities, as the law requires.
Choices. Settings → Privacy & consent controls analytics, crash reporting and cloud scan history. Android settings control location, camera and notification permissions. You can sign out at any time.
Rights. Subject to applicable law, you have the right to:
Depending on where you live, you may have further rights — for example to object to or restrict processing, or to receive your data in a portable form. Contact us to use them.
Delete my data erases every child profile and its scans, all room profiles, everything in StudyTools, your preferences and calibration, session logs and streaks and — when you are signed in — the account record, its cloud scan history and its subscription record at RevenueCat. It is immediate and cannot be undone, and the app tells you if any part of it did not complete. A small record on your phone of the one-time welcome scans — that they were granted, and how many remain — is kept after deletion, so that the offer is not repeated.
Deleting your data or account does not cancel a subscription. Cancel it in Google Play → Subscriptions.
How we respond. You can exercise your rights in the app or by emailing support@caliberix.com. We may need to verify your identity, or your authority to act for a child, before acting. We respond within the time the applicable law requires, and in any case within 90 days. We may decline a request where the law permits, and will tell you why.
If you believe we have handled your personal data wrongly, please contact our Grievance Officer first (section 2). We will acknowledge your complaint promptly and respond within 90 days. In India, if you are not satisfied with our response, you may then complain to the Data Protection Board of India; the law requires the grievance to be raised with us first. Elsewhere, you may have the right to complain to your local data-protection authority.
Third-party services. Google Play, Google Sign-In and any destination you share to are governed by their own terms and privacy policies, and we are not responsible for their practices.
Do Not Track. StudyLight does not track users across third-party apps or websites, and does not respond to Do Not Track signals because there is no such tracking to stop.
Language. If this policy is translated, the English version prevails.
We may update this policy. The updated version will appear in the app and at caliberix.com/privacy with a new effective date before it takes effect. If a change is material, we will tell you in the app before it takes effect, and where the law requires your consent to the change, we will ask for it.
Voraky Retail LLP, trading as Caliberix — Grievance Officer: M.B. Dalai, Designated Partner · support@caliberix.com · addresses and telephone in section 2.