Nalukh — Privacy Policy
What do we collect?
When you create an account, we collect your email address, your name (optional) and whether you are a student or a teacher. If you sign up as a teacher, you provide your phone number — it is used only to contact you about offers and support for teachers and is not visible to other users. We do not collect phone numbers from students. A student's learning progress — completed activities, collected stars and badges — is stored on our server. We do not collect location or phone contacts. A profile picture is optional — only if you choose one yourself do we take a photo from your device's photo library and store it on our server (the Sanity image store); you can replace it with another picture at any time. Your friends list and the chat messages you exchange with friends are also stored on the server. For the app's operation (one device–one account binding, notifications, internal statistics), we use a device identifier and an anonymous installation ID. When you sign up we ask for your year of birth (year only — no day or month); we use it to derive an age band and switch on the restrictions for users under 13, and it is never shown to other users. We also store the app language you chose and a two-letter store/device country code (not a precise location) for language settings, the payment route (QPay or an app-store purchase) and country-level aggregate statistics. To suggest the app language, on first launch the app sends a single request to the ipapi.co service to determine the country from the IP address; it returns only the two-letter country code. The IP address is not stored on our servers, and the country code stays only on the device. You choose the language yourself, and your choice overrides this suggestion.
School and teacher dashboard
If a school introduces Nalukh for its classes, at the school's request we link student accounts (by email) to the relevant class. The class teacher can see, on the teacher.nalukh.mn teacher dashboard, the names, emails and learning progress of the students in their class (completed activities, stars, day streak, topic test scores) as well as the results of exams the teacher has given. Chats, friends lists and payment information are never visible to teachers. Exams given by the teacher appear on the app's “Daily challenge” screen; to be removed from a class, contact your teacher or support@nalukh.mn. When you delete your account, you are automatically removed from the class and your exam answers are deleted.
Parental controls and age policy
Nalukh is a general education app for students at all levels and is not specifically directed at any particular age group (e.g., young children). Purchases, the “For parents” section (privacy policy, account deletion) and the external links opened from it are placed behind a parental verification step (parental gate). We do not use user information for advertising and do not sell it to third parties (we do not share it with anyone other than the class teacher, as described in the “Schools and the teacher dashboard” section above). Users under 13 (derived from the year of birth): the public all-users chat is read-only, sending and receiving friend requests, duels against random opponents and the public leaderboards are disabled, and other users (apart from the class teacher) see only their name and picture. Class chats and duels with existing friends remain available. To correct a year of birth, contact support@nalukh.mn.
Third-party services and internal statistics
The app does not use advertising or third-party analytics/tracking SDKs. However, we collect internal statistics on our own server (api.nalukh.mn) — screens opened, sessions, activity progress — which we do not use for advertising and do not sell to third parties. Because the learning content is built into the app, viewing it does not download anything from external servers; however, the app may send requests to our server and to Firebase Cloud Messaging for internal statistics and notifications. Payments are processed through QPay (transaction processing, VAT receipt generation), and receipts and system emails are sent through Brevo (email delivery); these services process only the information needed to perform that service. Data is stored on MongoDB Atlas (database). User profile pictures are hosted on Sanity (image storage/CDN), and only the image link is stored in the database. For users outside Mongolia, purchases are made through Apple App Store or Google Play in-app purchases — card details stay with the store and never reach us; from the store we receive only a transaction identifier, the product, the price and currency paid and the store country, which we use to verify the purchase, send receipts and process refunds.
Website (nalukh.mn)
This website does not use cookies and contains no advertising or third-party tracking code. To understand which channels (e.g., Google, Facebook, ChatGPT) bring visitors, we collect anonymous statistics on our own server (api.nalukh.mn): pages viewed, the domain name of the referring site (e.g., google.com) and link campaign tags (utm_…), device type (iPhone, Android, computer), and whether a store button was clicked. These statistics contain no information that identifies you, such as your IP address, name or email; the random token used to count a single visit is stored only in that browser tab and is deleted when you close the tab. Statistics are deleted automatically after 180 days.
Notifications (push)
To send notifications, we use Google's Firebase Cloud Messaging (Apple Push Notification service on iOS). It processes your device's notification token/identifier solely to deliver notifications. You can turn off notifications at any time in your device settings.
Deleting your data
You can permanently delete your account, progress and data with the “Delete account” button in the “For parents” section of the app. Or send a request to the email address below.
Data retention
We keep your data while your account is active. When you delete your account, all related data is deleted from the server.
Contact
Questions and requests about privacy can be sent to support@nalukh.mn.
Nalukh — Privacy Policy
What we collect
Creating an account requires your email address, optionally a name, and whether you are a student or a teacher. Teachers also provide a phone number, which we use only to contact them about teacher offers and support; it is never shown to other users. We do not ask students for a phone number. Your learning progress — completed activities, earned stars and badges — is stored on our server. We do not collect location or contacts. If you choose to set a profile picture, the image you pick from your photo gallery is uploaded through our server to our image hosting provider (Sanity) and shown to your friends; you can replace it at any time by choosing another image. Your friend list and the chat messages you exchange with friends are also stored on our server, and both are deleted when you delete your account. We do use device identifiers and an anonymous install ID for core app functionality (single-device account binding, push notifications, and our own first-party analytics). When you sign up we ask for your year of birth (year only — no day or month); we use it to derive an age band and switch on the restrictions for users under 13, and it is never shown to other users. We also store the app language you chose and a two-letter store/device country code (not a precise location) for language settings, the payment route (QPay or an app-store purchase) and country-level aggregate statistics.
Schools & teacher dashboard
When a school adopts Nalukh for a class, at the school’s request we link a student’s account (by email) to that class. The class teacher can then see, on the teacher dashboard at teacher.nalukh.mn, the class members’ names, emails and learning progress — completed activities, stars, streak and topic-test results — as well as the results of exams the teacher assigned. Chats, friend lists and payment details are never visible to teachers. Exams assigned by a teacher appear on the app’s “Daily challenge” screen; to leave a class, ask your teacher or contact support@nalukh.mn. Deleting your account removes you from the class and deletes your exam answers.
Parental controls & age policy
Nalukh is a general-education app for students of all levels and is not specifically directed at any particular age group (such as young children). Purchases, the “Parents” section (privacy policy, account deletion) and the external links opened from it sit behind a parental gate. We never use user data for advertising, nor sell or share it with third parties (other than your own class teacher, as described under “Schools & teacher dashboard” above). Users under 13 (derived from the year of birth): the public all-users chat is read-only, sending and receiving friend requests, duels against random opponents and the public leaderboards are disabled, and other users (apart from the class teacher) see only their name and picture. Class chats and duels with existing friends remain available. To correct a year of birth, contact support@nalukh.mn.
Third-party services & first-party analytics
The app contains no advertising and no third-party analytics/tracking SDKs. We do operate our own first-party analytics on our server (api.nalukh.mn) — screens viewed, sessions, and learning progress — which is never used for advertising or sold/shared with third parties. Learning content is bundled in the app, so displaying it does not fetch from external servers; the app does, however, send requests to our server and to Firebase Cloud Messaging for push notifications. Payments are processed through QPay (transaction processing and VAT e-receipt issuance), and receipts and system emails are delivered through Brevo (email delivery); each processes only the data needed to perform that service. Account data is stored in MongoDB Atlas, and profile pictures you upload are stored with Sanity (image hosting/CDN). For users outside Mongolia, purchases are made through Apple App Store or Google Play in-app purchases — card details stay with the store and never reach us; from the store we receive only a transaction identifier, the product, the price and currency paid and the store country, which we use to verify the purchase, send receipts and process refunds.
Website (nalukh.mn)
This website uses no cookies and contains no advertising or third-party tracking code. To learn which channels (e.g. Google, Facebook, ChatGPT) bring visitors, we collect anonymous statistics on our own server (api.nalukh.mn): pages viewed, the referring site's domain (e.g. google.com) and link campaign tags (utm_…), the device type (iPhone, Android, computer), and whether a store button was clicked. These statistics contain no IP address, name, email or anything else that identifies you; the random token used to count a single visit is kept only in that browser tab and is discarded when the tab is closed. The statistics are deleted automatically after 180 days.
Push notifications
We use Google's Firebase Cloud Messaging (and Apple Push Notification service on iOS) to deliver push notifications. It processes your device's notification token / identifier solely to deliver notifications. You can turn notifications off at any time in your device settings.
Deleting your data
You can permanently delete your account, progress, and data in-app via the “Parents” section → “Delete account”, or by emailing the address below.
Retention
We keep your data while your account is active. Deleting your account removes all associated data from the server.
Contact
Privacy questions and requests: support@nalukh.mn.