Effective 19 October 2026

Privacy Policy

Who operates TryPy

TryPy is currently operated by Ivan Hlazkov, an individual operator; operator country: Cyprus. Contact for privacy requests: info@trypy.app. The operator reports that incoming mail is configured through Zoho. Do not use the no-reply sender for privacy requests.

What the app does without an account

Core lessons and Python exercises run on the device. TryPy saves learning progress and preferences in an app-support file on that device. This can include a display name, completed lessons and scores, XP, gems, hearts, streaks, mistakes, achievements, course placement, voice speed, and reminder settings. The app may ask the operating system to schedule local streak reminders if the user or parent enables them. These reminders are stored and delivered by the device; they are not sent by TryPy as email or push messages.

To run Python code, the app loads the Pyodide runtime from jsDelivr’s CDN at cdn.jsdelivr.net when it is not already cached. The CDN receives the network request and may process connection metadata such as IP address, device/browser details, and request time under its own terms. TryPy does not send the learner’s code to that CDN as part of this runtime download. The first Python run may require an internet connection; cached files may allow later offline use.

Use Settings → Reset all progress to clear local learning progress. Removing the app may not remove every file that iOS has backed up; device backup and deletion settings are controlled by Apple.

Online accounts and social features in the current app

Account creation is optional. If someone creates an account, the app sends the email address, password credential (handled by the authentication provider, not stored by TryPy as readable text), and chosen display name to Supabase Auth. Google sign-in may provide account identifiers and profile information to Supabase. After sign-in, TryPy can store a username, display name, avatar colour, course level, learning progress, XP, gems, hearts, streaks, achievements, friend requests, friend links, league membership, duel scores, and account timestamps. Usernames and selected profile/progress information can be visible to other signed-in users through search, friends, leagues, and duels.

TryPy's app code is configured to use Supabase at mvdvgghohphgnjunknfl.supabase.co. The Supabase dashboard identifies this project's region as West EU (Paris), eu-west-3, and currently reports the project as healthy. No scheduled database backups are configured in the dashboard. Supabase provides database/authentication hosting. Google is involved only when Google sign-in is selected. jsDelivr serves the Pyodide runtime as described above. The current project contains no ads or third-party analytics integration identified in the code review. The app includes pre-generated voice audio as bundled files; it does not send lesson text to a voice service while playing them.

Child account safeguards: The app source gates child-facing online access by default; online accounts and social features are intended for adults using the app for their own learning. An in-app grown-up math check and adult-learner statement block those screens by default and reset when the app restarts. They are only child-facing barriers: they do not verify a person’s age or identity, establish parental authority, or constitute legally verified parental consent. The app has no parent dashboard. The app includes a cloud account deletion control and the delete-account Supabase Edge Function is deployed. The production database confirms the duel-winner reference is set to null when a profile is removed, allowing deletion to cascade through the user-owned records. The iOS source passed a simulator build, but deletion has not been exercised against a real account; verify it with a disposable test account before release.

Why data is used

On-device progress is used to save lessons and personalize the learning experience. Account data is used to authenticate adult users, sync progress, operate friend/league/duel features, prevent abuse, and maintain service security. Local reminders are used only when enabled. We rely on the legal grounds available for each purpose in the countries where TryPy is offered, and request consent where required by law. New account creation records acceptance of the current policy versions and an adult learner self-attestation in account metadata. The in-app grown-up check and self-attestation are not independently verified and are not a substitute for legally required verifiable parental consent.

Children and parents

TryPy is intended for children as well as older learners. In the United States, COPPA can require notice and verifiable parental consent before collecting personal information from a child under 13. In the EU, when consent is the legal basis for an online service offered directly to a child, the age for a child to consent alone varies by Member State from 13 to 16; Spain sets 14 for consent-based processing. Other countries have different rules. A parental gate used to prevent a child from opening an external link is not the same as verified parental consent.

Where California's CCPA/CPRA applies, additional rights may include access/knowledge, correction, deletion, and opting out of sale or sharing. TryPy does not sell personal information or use it for targeted advertising in the current app.

Children should use the offline learning experience without signing in. Adults should create an account only for their own learning and should not use it to upload a child's progress. Parents can request access, correction, export, or deletion through the privacy contact above. If you believe child data has been collected, contact us so we can restrict and delete the account and associated data.

Sharing and international transfers

Account information is processed by the service providers necessary to run authentication and cloud sync. The Supabase project is hosted in West EU (Paris). The Pyodide runtime is delivered by jsDelivr when needed. These providers may process connection data in other countries under their own service terms. Social profile details and game progress are also shared with other users as described above when social features are used. TryPy does not sell personal information or use it for targeted advertising in the current app.

Retention and security

Local progress remains on the device until it is reset, the app’s data is removed, or the device removes it. Account data remains in the cloud until the account is deleted, subject to backups, security logs, and legal retention requirements. TryPy does not currently publish a fixed retention period for backups, security logs, or inactive accounts. We use access controls and Supabase row-level security; no security measure can guarantee absolute security.

Your choices and data rights

Depending on where you live, you or your parent/guardian may have rights to access, correct, export, delete, restrict, or object to processing, and to withdraw consent. The iOS app provides a local reset and a JSON export of learning data saved on this device. The app also provides a cloud-account deletion control as described above. To make a privacy request, contact info@trypy.app; this inbox is configured through Zoho. We will handle requests within the time limits required by applicable law.

Changes and contact

We will update this notice when data practices change and show the effective date. For privacy questions or requests, contact info@trypy.app (the operator reports that the inbox is configured through Zoho and will monitor it). The app has no privacy officer appointed at this time.