Privacy Policy

Last updated: September 24, 2026

Indus Tech Ltd ("we", "us", or "our") operates the Volo mobile application ("App"). We are committed to protecting your privacy and being transparent about how we handle your information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

1. Information We Collect

Account Information

When you create an account, we collect your name and email address. You can sign up using Google Sign-In, Apple Sign-In, or email and password. If you sign in with Google or Apple, we receive your name and email from those services.

Usage & Progress Data

As you use the App, we collect data about your learning progress, including:

  • Lesson completion status and timestamps
  • Step-level progress within lessons
  • Daily challenge completions
  • Streak counts and dates

Device Information

We collect basic device information such as your device type, operating system, and platform to ensure the App works correctly on your device.

Onboarding Preferences

During onboarding, we ask about your goals, experience level, and preferences to personalize your initial experience. This information is processed locally on your device only and is explicitly cleared from memory once onboarding is complete. It is never sent to or stored on our servers.

Payment Information

If you subscribe to Volo Pro, your purchase is processed by the Apple App Store. We do not directly collect or store your payment card details. Our subscription management provider, RevenueCat, receives your user ID and purchase data to manage your subscription status.

2. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the App and your account
  • Track your lesson progress, daily challenges, and streaks
  • Sync your progress across devices
  • Process and manage your subscription
  • Send push notifications (if you opt in)
  • Provide customer support
  • Improve and develop the App

3. Legal Basis for Processing

Depending on where you are located, we rely on the following legal bases to process your personal information:

  • Contract: Processing your account and progress data is necessary to provide you with the service you signed up for.
  • Consent: We process certain data, such as push notifications, based on your explicit consent. You can withdraw consent at any time.
  • Legitimate interest: We may process data to improve the App, fix bugs, and ensure security, where our interests do not override your rights.
  • Legal obligation: We may process or retain data where required by applicable law.

4. Third-Party Services

We use a limited number of third-party services to operate the App. We do not use any advertising or tracking SDKs in the App. The services we use are:

  • Supabase: Provides authentication and securely stores your account and progress data. Supabase acts as a data processor on our behalf. For more information, see Supabase's Privacy Policy.
  • RevenueCat: Manages subscription purchases. Receives your user ID and purchase information to verify your subscription status. For more information, see RevenueCat's Privacy Policy.
  • Apple / Google: Provide sign-in authentication, and Apple processes App Store payments. Their respective privacy policies apply to data they collect during sign-in and payment.
  • Vercel Web Analytics: Used on this website only (not in the App) to count page views and visitors. It is cookieless and does not collect personal information or track you across sites. For more information, see Vercel's Analytics Privacy Policy.
  • Expo: Delivers push notifications to your device when you have opted in. For more information, see Expo's Privacy Policy.

We do not sell, trade, or rent your personal information to third parties. We share your information with the services listed above solely to operate the App. We may also disclose information if required by law or to protect the rights and safety of our users.

5. International Data Transfers

Your data may be transferred to and processed in countries other than your own, as our service providers (including Supabase and RevenueCat) may operate servers in various locations. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

6. Data Storage & Security

Your data is stored on secure cloud infrastructure provided by Supabase. All connections between the App and our servers are encrypted. Authentication sessions use secure tokens with automatic refresh.

The App also caches your progress data locally on your device for offline use. If you complete lessons or challenges while offline, the data is stored locally and securely synced to our servers when your connection is restored.

While we implement reasonable technical and organizational measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the service. If you delete your account (available in the App's settings), all of your data is removed from our servers. Local cached data is cleared when you log out. We may retain certain information where required by law or for legitimate business purposes such as resolving disputes.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

All Users

  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate data
  • Deletion: Delete your account and associated data (available directly in the App, or by contacting us)
  • Data portability: Request a copy of your data in a portable format
  • Opt out: Disable push notifications at any time through your device settings

European Economic Area (EEA) / UK Residents

Under the General Data Protection Regulation (GDPR), you also have the right to:

  • Restrict processing of your personal data
  • Object to processing based on legitimate interest
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with your local data protection authority

California Residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of your personal information
  • Opt out of the sale or sharing of personal information (we do not sell or share your personal information)
  • Non-discrimination for exercising your privacy rights

To exercise any of these rights, you can contact us at hello@getvolo.co. We will respond to your request within 30 days.

9. Children's Privacy

Volo is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected such information, we will take steps to delete it promptly. If you believe a child has provided us with their personal information, please contact us at hello@getvolo.co.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify you through the App. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Indus Tech Ltd
Email: hello@getvolo.co