Privacy Policy

This app is still being built

Rancho Labs is in active development. Features appear, change and disappear as we build them; whole sections can be switched off by your centre while the data behind them is not ready, so the app may show less than you expect.

This policy will change with the app, and we may update it at any time. The date at the top is the version you are reading. Where a change is significant we will tell you in the app and ask you to agree again before you continue.

Who this policy covers

Parents and guardians of an enrolled child. You sign in with the email address recorded on your child’s enrolment, and a six-digit code we send to it.

There is no separate parent record: your child’s enrolment carries the address, and whoever receives mail at it is the parent the app signs in. Two consequences worth stating plainly:

• One address can open more than one child’s records. Siblings share a parent and a parent has one inbox, so signing in may show you every enrolled child whose record carries your address.
• Your centre decides which children an address can open. Access is switched on per child by centre staff. Until it is switched on, signing in will tell you no account was found — even with a correct address.

The app has no sign-up and no child sign-in. Accounts are created by the centre as part of enrolment; you cannot register inside the app, and a child cannot sign in to it.

What we collect

We do not collect contacts, photos, files, precise or coarse location, microphone or camera data, or advertising identifiers.

What we do not do

• No advertising and no ad networks.
• No analytics, no behavioural tracking, no profiling — of anyone, and specifically never of a child’s session.
• No third-party trackers or data brokers. The app ships with no analytics, advertising or attribution SDKs of any kind.
• We never sell personal data.

Children’s data

Children’s information reaches us through enrolment at a centre, carried out by the child’s parent or guardian, who provides consent at that point. The app shows that information to the parent; there is no child-facing sign-in, and a child is never asked for data by the app.

In line with India’s Digital Personal Data Protection Act, 2023, we do not use a child’s data for behavioural monitoring, profiling or targeted advertising. A parent or guardian may ask us at any time to show, correct or delete their child’s information.

How the information is used

Only to operate the service: to sign you in, to show your own family’s learning records, and to keep accounts secure. We do not share personal information with anyone else, except where the law compels disclosure.

Staying signed in

So you do not have to sign in every time, the app keeps you signed in on your own device.

• The sign-in credentials are stored in your device’s secure keystore — the Keychain on iPhone, the encrypted keystore on Android — not in ordinary app storage, and not readable by other apps.
• We also keep a record of the session on our servers, so that it can be ended: by you when you log out, or by your centre if access is withdrawn.
• A session lasts up to 120 days. After that, signing in again is required.

Logging out removes the credentials from your device and ends the session on our side. If you are handing the device to someone else, log out from the Account tab.

Links out of the app

The app can open WhatsApp (to message our support team) and Google Maps (to show a centre’s location). Those services have their own privacy policies and are not controlled by us.

How long we keep it

Enrolment and learning records are kept while a child is enrolled and for as long afterwards as we are required to keep business records. A signed-in session lasts up to 120 days, and ends sooner if you log out or your centre withdraws access.

Your rights, and deleting your account

You may ask us to access, correct, or delete your account and its personal data. Contact your centre, or use the details below. We respond within 30 days, except for records we are legally required to retain (for example accounting records). Deleting an account removes access to the app for that account.

Security

Signing in requires the email address on your child’s enrolment and a six-digit code we send to it, so access depends on your inbox. Sign-in credentials are stored in your device’s secure keystore, are replaced regularly while you use the app, and can be revoked by us. We use industry-standard measures to protect our systems; no method of transmission or storage is perfectly secure.

Changes to this policy

While the app is in active development this policy may change at any time. We will update the date at the top, and where a change is significant we will tell you in the app and ask you to agree again.

You agree to this policy by ticking the box on the sign-in screen before you request a code. We record that you agreed, when, and which version you agreed to — nothing else.

Contact

Questions about this policy or your data are answered by our team directly. See also our Terms & Conditions.