Quizlilt Privacy Policy

Quizlilt Privacy Policy

Effective date: 2026-10-18 App: Quizlilt (com.servenzo.quizlilt) Publisher/developer brand: Servenzo Privacy contact: [email protected] Public policy URL: https://servenzo.com/apps/quizlilt/privacy-policy

This policy describes Quizlilt's local R1 implementation for the planned ages 6–8 learning experience. The bundled exercises are currently authored candidates for grown-up preview. Independent educator approval and licensed narration are still required before child lessons can be published. It does not describe future accounts, cloud features, advertising or purchases.

Information handled on this device

A grown-up can create local learner profiles using a nickname, a listed avatar and the broad ages 6–8 band. A full name, exact birthday, email, account, photograph or payment method is not required. Avoid entering a child's full identity in a nickname or support note.

The app stores profile identifiers, nicknames, avatars, age-band confirmation, presentation preferences, optional learning windows, selected profile, versioned lesson/checkpoint state, object interaction state and observed practice facts. Practice facts include content/version identifiers, local completion times, help/hint/skip/repeat status and completion records. Grown-up preview sessions are identified separately and are not presented as child learning outcomes, school grades or diagnoses.

The app also stores local adult-gate setup, separate salted PIN/recovery-code verifiers, failed-attempt cooldown state, transaction/retry receipts, original legacy mode provenance, compatibility/quarantine records and factual content-error drafts entered by a grown-up. Clear PIN and recovery-code secrets are not intentionally stored as profile data. Content-error drafts include content/version references and adult prose; child answers, nicknames and work are not attached automatically.

Use, network and sharing

These records support local profiles, saved practice, safe Continue, preferences, adult reports, local gate/recovery, scoped deletion/export and content review. The current R1 entry path has no account, app-operated server, cloud synchronization, advertising, analytics, developer-operated crash reporting, chat, purchases or child telemetry service. App code does not automatically transmit these local records to Servenzo or an AI service.

The bundled starter and verification work locally. There are no licensed instruction or phonics recordings installed in this candidate build. Missing playback retains written/visual directions; it does not contact a speech service or download a substitute. The app does not record voice or request microphone access.

A grown-up may explicitly export a profile, a local content-error draft or private recovery records to a selected file/document destination. An export is an independent plaintext copy. Your chosen storage provider, browser, operating system or later sharing action can operate its own services. Saving a file is not automatic developer collection, and deleting a learner in the app cannot remove an exported copy elsewhere.

Storage and security

Acknowledged records persist in the app's local transactional storage until deleted or cleared. Device app isolation and device security settings provide the platform protections. The adult PIN is a rate-limited convenience gate, not separate encryption of profiles or evidence, and not verifiable legal parental consent. Someone controlling the device or an unencrypted recovery/export copy may access its contents.

The Android main source disables ordinary automatic app backup. Device/operating-system behavior, manually created backups, external destinations and existing copies are independent of app-local deletion. No promise of forensic erasure or recovery of deleted material is made.

Retention, export and deletion

Grown-up controls can export one learner's acknowledged data or delete that learner's profile, preferences, attempts, saved session/lesson and app-owned learner records. Other learners, the local adult gate and independent external copies are separate. Minimal content-free transaction tombstones can remain to stop delayed operations from recreating deleted facts. Household ownership records, if introduced in a later compatible version, have a separate scope and are not sold or purchased in this version.

Unknown or damaged local records are preserved instead of automatically reset. An explicit emergency recovery route can export private raw local records after a disclosure, including when a damaged gate cannot be verified. That export can include all local profiles, practice, original migration material and salted gate verifiers. It is not an encrypted backup or an automatic cloud restore. Keep such exports private and manage their retention separately.

You can clear the installation through Android Settings > Apps > Quizlilt > Storage > Clear storage, with labels varying by device. Uninstalling removes app-local data from that installation under the platform's behavior. Manage provider/browser downloads, backups and support messages separately. No developer account or app-operated developer data store exists for this version.

Device access and children

The reviewed main Android source requests no runtime or internet permission. The R1 application does not request advertising identifiers, location, camera, microphone, contacts or unrestricted file access. User-directed adult exports use a document destination. Final merged-release permissions and actual network behavior are separately checked before distribution; source checks alone are not a device traffic trace.

Quizlilt's intended learning audience is ages 6–8. Grown-up setup and gate controls do not establish a child's legal consent or parental authority for a future online service. No advertising, purchases, public profiles, social chat, recording or unrestricted web content are provided in child routes. Candidate previews and observation reports do not diagnose a child or certify mastery.

Privacy questions and changes

Contact [email protected] with privacy questions. Do not include child information or private exported records in an initial support message. Contacting support outside the app uses your chosen email provider; the app does not send that message or grant Servenzo access to your local data automatically.

Before introducing online services, advertising, purchases, additional SDKs or materially different data handling, the publisher must update this policy, in-app disclosures and accurate Google Play declarations for the actual distributed version.

Operator, hosting and internal testing

Servenzo operates Quizlilt. Contact [email protected] for privacy questions. This release is fully local: it does not contact the shared app API, create a cloud account or upload app records. Child cloud accounts remain disabled.

The public policy and support website is hosted in the United Kingdom. Cloudflare provides its DNS and traffic proxy and processes network addresses, request timing and security information when you visit the website. Google Play separately handles app distribution and tester accounts. Opening a website, sending a support email or deliberately exporting information uses the provider you select; these actions do not grant Servenzo access to the app's local database.

Current local R2 increment — 20 October 2026

Profile-scoped local practice preferences and derived evidence add unseen/practising/ready-for-review explanations, adult overrides, optional bounded placement, replay choices and finite noncommercial effort collection. Hinted answers alone cannot establish readiness, response time alone cannot lower difficulty, and easier replay does not reduce accepted progress. The catalog still has zero approved child-published activities: adult candidate previews do not train child recommendations or consume child rewards, and educator/audio approval remains a release gate. No child cloud data, advertising, purchases, recording or new telemetry is introduced.

The new feature state remains app-scoped and local. Explicit JSON/file/clipboard exports are independent private copies; recovery can contain active or captured unacknowledged inputs. Deleting local feature data does not erase exports, OS/provider originals, separate app accounts or another product. Provider, installed-device, signed-release and store/public-policy qualification are not inferred from local tests.