Roboilm App Privacy Policy
Effective date: October 8, 2026 · Last updated: 7 October 2026
This policy explains what the Roboilm app (the “app”) collects, why, and the choices you have. The app is the companion to the Roboilm kids robotics program (roboilm.com) and is used mainly by children aged about 5 to 10, together with their teachers. We keep it simple on purpose: we collect as little as we can.
Who we are
The Roboilm app is operated by Mazen Fraihat, operating as Roboilm. Contact: info@roboilm.com, (213) 660-9969.
What we collect and store
| Who | What | Why |
|---|---|---|
| Students (in a class) | A first name or nickname the student types when they join a class; which class the student belongs to; which builds they have completed, quiz scores, stars and XP; their best scores in the games. | To show the right lessons, remember progress, and let the teacher see how the class is doing. |
| Every user of the app | A random anonymous sign-in ID created by the app when it first opens. It is not linked to an email, a phone number or a real-world identity. Wrong class-code attempts are logged against this random ID with a time stamp (kept only briefly) to stop code guessing. | To keep each person’s progress separate and to protect classes from code guessing. |
| Teachers | Email address, a password (stored only in scrambled/hashed form by our sign-in provider), display name, and the classes they create (class name, program, dates, join code, student first names). | To let teachers sign in, manage their classes and see their students’ progress. |
| Demo-code users | Only the anonymous sign-in ID. No name is asked for. | To open the one or two builds on the demo code until it expires. |
What we do not collect
- No student email address, phone number, home address or date of birth.
- No photos, videos, audio, contacts or files from the device. The app does not ask for the microphone, contacts or location permission. It asks for the camera only if a child taps “Scan code” to read the QR code on the teacher’s screen. The camera picture is read on the device to find the class code; nothing is recorded, saved or sent anywhere, and the code can always be typed instead.
- No location data.
- No advertising, no advertising ID, no profiling, no in-app purchases.
- No analytics or crash-reporting tools. (The app’s permissions are internet access and, optionally, the camera for scanning a class QR code.)
Information kept on the device
- Games work without signing in. Game scores and progress for someone who has not joined a class stay only on the device and are never sent to us.
- Lessons you are allowed to open are downloaded to private app storage so they work offline. They are deleted when your access ends or when you leave the class.
- Small settings such as your last choice between the booklet and the 3D steps.
Uninstalling the app or clearing its data removes everything stored on the device.
Who provides student names, and who is responsible
Students do not create accounts. A student joins by typing (or scanning) the class code and then typing their own first name or nickname. Typing the same name again later, even on a new tablet, brings that student’s progress back; there is no password or PIN. The app tells children to use a first name or nickname only, never a full name or other personal details. Nobody sees the names of other children in the class except the teacher.
The teacher (or the school or organisation running the class) can see who has joined, rename or remove any student, lock the class so that no new names can join even with the code, and delete the class. A class holds at most 40 students. Removing a student deletes their name, progress and scores and ends their access to that class.
By giving children the class code, the teacher confirms they are authorised to enrol them in the class, including any consent a school or parent must give. Student first names are provided by or with the knowledge of the school, program, or parent running the class. We do not collect student emails, birthdays, photos, or location, and the app shows no ads.
How we use information
- To run the app: sign people in, unlock the right lessons, save progress and scores.
- To show teachers their own students’ progress. A teacher can only see their own classes; another teacher cannot.
- To keep the service secure and prevent misuse.
We do not use children’s information for advertising, and we do not sell or rent information to anyone.
Who we share it with
We use Supabase (supabase.com) to host our sign-in, database and file storage. They process data on our behalf under their own security commitments; our project’s data is stored with our hosting provider in the United States (US East). Our hosting provider also handles routine technical data such as IP addresses to operate and secure the service. We do not share information with anyone else, except if the law requires it.
Children’s privacy
The app is designed for children, and for that reason it collects only what is needed to teach: a first name or nickname the child types in, and learning progress. There are no chats, no comments, no photos, no social features and no ads. Teacher accounts are for adults only.
Parents, guardians and schools can ask us at any time to show, correct or delete a child’s information, or to stop us collecting it. Email info@roboilm.com with the name of the class and the child’s first name or nickname (we will confirm the request with the teacher or school where we need to). We aim to reply within 30 days.
How long we keep information
- While a class is active: student names, progress and scores are kept so the class can continue.
- After a class ends: lessons lock, but the student’s progress and scores stay saved so they are not lost if the class is extended or restarted. Student names and progress are kept for up to 12 months after the class ends, then deleted. They are deleted sooner on request from the school, teacher, or parent.
- Teacher accounts: kept until the teacher deletes the account in the app (or asks us to). Deleting an account removes the email address, the classes it owns and their students’ names and progress.
- Wrong-code attempt logs: kept only briefly.
Deleting a teacher account
Teachers can delete their own account inside the app: tap your name, choose Delete my account, type DELETE and confirm. This immediately and permanently removes the account, every class and demo code it owns, and the student names, progress and scores in those classes. Instructions are also at roboilm.com/delete-account. If you cannot use the app, email info@roboilm.com from the address on the account and we will do it for you.
Security
Information travels over encrypted (HTTPS) connections. Each class’s data is protected by access rules in the database: a student’s device can only see lessons for the class they joined, and teachers can only see their own classes. Lesson files are private and are only released to people with an active class code. No system is perfectly secure, but we take care to protect what we hold.
Changes to this policy
If we change what we collect, we will update this page and the date above, and tell teachers in the app or by email before the change affects children’s data.
Contact
Questions, requests or concerns: info@roboilm.com.