ZoyaSafe is a curated video app for children, built and operated as an independent product. The app is available on iOS via the App Store and on Android via Google Play. Our support contact is [email protected].
For the purposes of Indian data protection law (the Digital Personal Data Protection Act, 2023) and international standards including the US Children's Online Privacy Protection Act (COPPA), ZoyaSafe acts as the data fiduciary / operator for the limited technical data described in this policy.
ZoyaSafe is designed for use by children under the supervision of a parent or guardian. Children do not create accounts, enter personal information, or interact with other users. The parent or guardian manages the subscription and app settings; the child only interacts with the video-viewing interface.
ZoyaSafe does not collect names, email addresses, contact details, location data, or photos from children or parents. The app uses only an anonymous device-level identifier for subscription verification and app functionality. The limited technical data we handle is detailed below.
| Data type | Collected? | Purpose |
|---|---|---|
| Child's name | No | Not requested or stored |
| Child's email or contact info | No | Not requested or stored |
| Parent / guardian name or email | No | No account creation required |
| Location data | No | Not accessed |
| Camera / microphone | No | Not accessed |
| Face ID / fingerprint (biometrics) | No | Used purely on-device to verify parent identity before accessing parental controls. Biometric data never leaves the device — it is processed entirely by Apple's or Android's local authentication system. ZoyaSafe does not collect, store, or transmit any biometric information. |
| Viewing history | No | Not logged or transmitted |
| Device Identifier | Yes | Associates the device with the child profiles and channel selections made on it, so the correct profiles appear when the app opens. Also verifies subscription status and prevents trial abuse on reinstall. Never combined with any name, email, location, or real-world identity. See §4. |
| Subscription status | Yes | To determine whether an active subscription exists. Managed by RevenueCat. See §5. |
| Anonymous usage events | Yes | Anonymous technical diagnostics only. No user-identifiable information. |
| Consent record | Yes | Device identifier linked to the policy version you agreed to and the date/time you consented. Required for legal and regulatory compliance. |
The app uses an anonymous device-level identifier for essential app functions. This identifier:
ZoyaSafe uses RevenueCat to manage in-app subscriptions. Subscription purchases are processed entirely by Google Play or the App Store. We do not collect, store, or have access to payment card details.
RevenueCat receives your device's anonymous purchase token from Google Play or the App Store to verify subscription status. RevenueCat's own privacy policy governs their data handling: revenuecat.com/privacy.
New subscribers receive a 30-day free trial. After the trial, a subscription is required. Pricing varies by platform: on Android, ₹349/month or ₹3,499/year; on iOS, ₹599/month or ₹5,999/year. Subscriptions may be cancelled at any time through Google Play or App Store settings.
We take children's privacy seriously.
If you believe we have inadvertently collected personal data relating to a child, please contact us at [email protected] and we will delete it promptly.
ZoyaSafe uses the YouTube Data API to source curated video content. Videos play via YouTube's privacy-enhanced embed (youtube-nocookie.com) loaded inside the app. The video player is operated by Google, not ZoyaSafe. Google may set cookies or collect technical data through this embed in accordance with their own privacy policy.
The app intercepts all navigation within the player to prevent children from following related video links, comments, or any path outside the curated content. Children cannot reach open YouTube through the app.
Our use of the YouTube API is subject to Google's Privacy Policy and YouTube's Terms of Service.
We do not integrate any advertising SDKs or social login SDKs.
Monetised YouTube videos may carry YouTube's own pre-roll advertisements within the embedded player — this is the creator's and YouTube's setting and is outside ZoyaSafe's control.
We do not sell, rent, or trade any data. We do not share data with third parties except as described in this policy (subscription verification via RevenueCat, and YouTube API usage via Google). We may disclose data if required by law or to protect the safety of users.
Subscription entitlement data is retained only for as long as your subscription is active. Anonymous usage events are retained for a maximum of 90 days. Consent records are retained for the lifetime of the device identifier in our system. We do not maintain persistent user records beyond what is necessary for the app to function.
The app communicates exclusively over HTTPS. Our backend infrastructure is hosted on Railway, with the database on Supabase, both of which maintain industry-standard security practices. We do not store sensitive personal or payment data on our own servers.
As a parent or guardian, you may at any time:
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If we make material changes to this privacy policy, we will update the effective date above and, where appropriate, notify subscribers. Continued use of the app after changes are posted constitutes acceptance of the updated policy.
For any privacy-related questions or concerns: