Privacy Policy

1. Introduction

Finly ('we', 'our', 'us') is committed to protecting the privacy of our users. Finly is open to learners of all ages, but creating an account requires being at least 13 years old — we do not knowingly collect personal information from children under 13. This Privacy Policy explains what information we collect, how we use it, what we do not collect, and what choices you have.

2. Information We Collect

We collect only the minimum personal information necessary to provide the service:

• Email address (used for one-time-code login and account verification — this is the only contact information we require)
• Display name (chosen by you, shown on leaderboards)
• Profile picture (optional, uploaded by you and shown on your profile)
• Grade and school (optional, provided by you)
• Usage data such as games played, lessons completed, quiz scores, and coins earned

3. Information We Do Not Collect

To be explicit about what stays off our servers:

• No precise or coarse location data
• No financial information, bank account numbers, or payment details
• No contacts, photos library, or device identifiers beyond what you upload
• No advertising identifiers (IDFA, AAID) and no third-party advertising trackers
• No microphone, camera, or sensor data (except a profile photo if you choose to upload one)
• No browsing history outside the app

4. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and operate the Finly platform
• To track your learning progress and achievements
• To display leaderboards and rankings (your display name and avatar are visible to other users on leaderboards)
• To send local reminders on your device (these never leave your device unless you opt in)
• To improve the platform and develop new features

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your data to train artificial intelligence systems.

5. How We Protect Your Information

Your information is stored on secure servers with encryption in transit (HTTPS/TLS) and at rest. Access to user data is limited to authorized personnel who need it to operate the service. We collect only the minimum data necessary to provide the platform.

6. Age Requirement for Accounts (13+)

Finly's content is suitable for all ages, but creating an account requires being at least 13 years old. Before an account can be created, every user must check a box on the sign-in screen confirming they are at least 13 years of age. The "Send code" button remains disabled until this confirmation is provided. This age threshold is required because account creation involves collecting personal information (an email address), and U.S. law restricts that for children under 13.

We do not knowingly collect, use, or disclose personal information from children under the age of 13, in compliance with the U.S. Children's Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13, we will delete that information as quickly as possible.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at admin@finlyofficial.com and we will promptly delete it.

7. Data Retention and Deletion

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time through your profile settings (Profile → Delete account) or by emailing admin@finlyofficial.com. Account deletion permanently removes your email, display name, profile picture, school, grade, progress history, coin balance, and trophies. Deletion requests are processed within 30 days. One-time-code emails are sent through SendGrid and may persist in their delivery logs for a limited retention period set by SendGrid.

8. Third-Party Services

Finly relies on the following service providers to operate the platform. Each has its own privacy policy:

• Back4App — backend infrastructure (database, cloud functions, file storage)
• SendGrid — email delivery for one-time login codes
• Cloudflare — content delivery network for finlyofficial.com
• Apple App Store and Google Play — distribute the app and provide their own crash and install reporting (governed by Apple's and Google's privacy policies)

We do not use Firebase, Google Analytics, advertising networks, or any other third-party analytics or tracking services in the Finly app.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information through your profile settings
• Delete your account and all associated data
• Export your data on request
• Opt out of local notifications at any time through your device settings

California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, to delete that information, to correct inaccurate information, and to opt out of any sale or sharing of personal information. Finly does not sell or share personal information for cross-context behavioral advertising.

To exercise any of these rights, contact us at admin@finlyofficial.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will post the updated policy on this page and update the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at admin@finlyofficial.com.