Privacy Policy
Last updated: 3 October 2026
Service: Plusy (the “Service”), available at https://plusy.app
Operated by: Importify Limited (“we”, “us”, “our”)
Registered address: Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong
Privacy contact: support@plusy.app
1. Overview
This Privacy Policy explains what information Plusy collects, how we use it, who we share it with, and the choices and rights you have. It applies to the Plusy website and web application. By using Plusy, you agree to this Policy. If you do not agree, please do not use the Service.
2. Information we collect
a) Information from Google Sign-In or email sign-up
An account is created by a parent or guardian, using Google Sign-In (Google OAuth) or an email address and password. When you choose to sign in with Google, we receive from your Google account:
- Your name
- Your email address
- Your Google profile picture (if available)
- A unique Google account identifier
We do not receive or store your Google password.
With email sign-up we hold your email address and a hashed password. If you ask for a sign-in code, we email a one-time code to that address.
b) Progress data
- Where the child is on the road: which times tables and levels are finished
- Practice results: for each round, how many facts were asked and answered correctly, and for each multiplication fact, how many times it was answered right and wrong
- Hearts, coins, XP, the daily goal and the streak of days played
Plusy does not ask for the child's name, age, photo, phone number or location.
c) Technical data
- Authentication and session cookies needed to keep you signed in
- Limited technical and log information (such as request metadata) used for security and reliability
- A small marker in your browser's session storage, used so the Back button does not return to the sign-in page
3. How we use your information
- To create, secure and manage your account and keep you signed in
- To provide the Service: to show the right level, save progress and carry it across devices
- To send the emails you ask for: the confirmation of your address, a sign-in code, or a password reset
- To maintain security, prevent abuse, and comply with legal obligations
- To respond to your support requests
We do not use your information for advertising, and we do not sell your personal information.
4. Google user data and Limited Use
Plusy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
- We only request the basic profile and email information needed to sign you in and create your account.
- We use Google user data solely to provide the Plusy features described in this Policy.
- We do not sell Google user data, and we do not use it for advertising.
- We do not transfer Google user data to others except as needed to provide the Service (see “Service providers” below), for security or legal reasons, or in connection with a merger or acquisition with appropriate notice.
- We do not use Google user data to develop, improve or train AI or machine-learning models.
5. No AI processing
Plusy does not send anything you or your child enter to an artificial intelligence service. The questions are multiplication facts made by the app itself, and the answers are checked by the app itself.
6. How we store and protect information
- Account and progress data are stored in our cloud database and authentication provider (Supabase), in the United States.
- The application is hosted on Railway, in the United States.
- Data is transmitted over encrypted connections (HTTPS/TLS).
- Each account can read only its own data, and access to personal data is restricted to what is needed to operate the Service.
No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
7. Service providers we share data with
We share data only with providers that help us operate the Service, and only as needed:
- Google: sign-in and authentication, when you choose Continue with Google
- Supabase: authentication, database hosting, and delivery of the sign-in emails described above
- Railway: application hosting and infrastructure
These providers process data on our behalf under their own terms and security commitments. We do not sell your personal information to anyone. Plusy has nothing to buy today, so no payment provider receives any data. If that changes, this Policy will name the provider before the first purchase can be made.
8. Cookies and local storage
We use cookies that are necessary to sign you in and keep your session active, and the session marker described in section 2. We do not use advertising cookies, and Plusy contains no advertising or third-party analytics.
9. Children's privacy
Plusy is designed for children aged 6 to 12 to use with a parent or guardian. Children's privacy is built into how the Service works:
- A grown-up makes the account. The account is created by a parent or guardian with their own Google account or email address. A child does not sign up.
- What we hold about the child is limited to their activity in Plusy: the levels finished, practice results, hearts, coins, XP and streak. Plusy does not ask for the child's name, age, photo, phone number or location.
- No advertising. Plusy shows no ads and contains no advertising or third-party analytics. We do not sell personal information and we do not use children's data for marketing.
- Deleting a child's data. The account holder can have the account and everything in it deleted at any time: see section 10. Deletion is permanent.
A parent or guardian who creates an account and lets their child use Plusy consents to the collection described in this Policy (COPPA, GDPR-K and equivalent laws). If you are a parent or guardian and believe we hold information about a child without appropriate consent, contact support@plusy.app and we will delete it.
10. Your rights and choices
Depending on your location, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing.
- You can sign out of this device, or of every device, from the You tab in the app.
- You can revoke Plusy's access to your Google account at any time from your Google Account settings.
- To delete your account and all associated data, email support@plusy.app from the address on the account. We will complete the deletion within 7 days.
11. Data retention
We keep your personal data for as long as your account is active or as needed to provide the Service. When your account is deleted, we permanently erase your personal data, including your sign-in details and all progress data.
12. International transfers
We are based in Hong Kong and use service providers that process data in the United States and may process it in other countries. Where required, we take steps to ensure your data receives an appropriate level of protection when transferred internationally.
13. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date above. Material changes will be communicated where appropriate. Continued use of the Service after changes take effect means you accept the updated Policy.
14. Contact us
Questions about this Policy or your data? Contact us at support@plusy.app.