Privacy policy

• A parent or guardian creates the account and agrees before anything about a child is saved.
• We keep what Mindzilo needs to teach your child and show you their progress, and nothing more.
• No ads, no advertising ID, no location tracking, no chat, and we never sell data.
• The phone lock is optional. The list of apps on the phone and what is on the screen stay on the phone.
• Zilo, our AI guide for parents and guardians, is off unless you turn it on. Children never see it.
• You can see, change or delete everything at any time, in the app or on the website.

Mindzilo is made by Soonbuilt (soonbuilt.com), the developer named on Google Play. We make the Mindzilo Android app, the family dashboard and this website, and we are responsible for your data. We are based in Pakistan.

Our address: Islamabad, Pakistan.

You can reach us at [email protected].

In this policy, “we” means Soonbuilt, the developer of Mindzilo, and “you” means the parent or guardian who creates the account.

Terms of use

Here is everything Mindzilo keeps on its servers, and why.

We do not collect a surname, photo, birth date, home address, precise location, contacts, camera images, voice recordings or advertising IDs. Children cannot type messages to anyone.

If you sign in with Google, Google shares your name, email and picture with our sign-in service. Mindzilo keeps only your email address.

WhatsApp reports are not available yet. If we add them, adding a number will be your choice, and we will update this policy first.

The phone lock is optional. A parent or guardian sets it up on an Android phone so that chosen apps open only within the rules they set: free (with or without a daily time limit), paid for with coins the child earns by learning, or blocked, with daily limits and bedtime or school times.

What stays on the phone and is never sent to us:

• the list of apps installed and their icons;
• which app is on the screen at any moment;
• anything shown on the screen, typed or said.

What the phone sends to our servers:

• the rules you choose for each app: its name, its Android package name, Free, Coins or Blocked, and the coins and minutes, or a free app’s daily time limit;
• daily limits and bedtime or school schedules;
• minutes used in apps your child bought time for, and in free apps with a daily time limit (recorded about once a minute), and the coins spent on bought time;
• lock events: the lock switched off, a permission removed, Mindzilo’s notifications turned off, Mindzilo force-stopped, the phone’s clock or time zone changed, or a gap in the lock;
• the lock’s status: which permissions are on, the phone’s brand and model, and when the lock was last active.

We use this to apply the same rules on every phone in your family, to show you your child’s app time, and to email you if the lock is switched off or tampered with.

Permissions the lock asks for, and why:

• Accessibility service: only to see which app has opened, so the lock can apply your rule. It never reads what is on the screen, never types or taps inside other apps, and never sends what it sees. When an app is not allowed, it only goes to the Home screen, leaves split screen or closes that app’s floating window, then opens Mindzilo.
• Device admin (optional): only to stop Mindzilo from being uninstalled without your PIN. Mindzilo does not use it to wipe, lock or read the phone.
• Notifications: on Android 13 and later, needed so the lock’s ongoing notification shows the whole time the lock is on, as Google Play requires for parental-control apps. The lock cannot be turned on without it.
• Show over other apps and Usage access (optional, under Extra protection in Lock health): backups that let the lock see which app is open and show its screen if Accessibility is off. They are read on the phone only.

Mindzilo is listed on Google Play as a parental-control app. Android or Google Play Protect may show a notice that a monitoring app is on the phone. This is expected.

Use the lock only on your own child’s phone or a shared family phone. You can turn it off at any time in Family settings, then Phone lock, with your PIN.

• To sign you in, with Google or a 6-digit code sent to your email.
• To choose questions at the right level for each child, and show you their progress.
• To apply the phone lock’s rules, if you set it up.
• To send you emails: a welcome, the weekly report if you turn it on, PIN-reset codes you ask for, phone lock alerts, and account notices (a policy change, a warning before an unused account is deleted, and confirmation that an account was deleted).
• To keep accounts safe, for example by limiting sign-in attempts and wrong PINs.
• To improve our questions, using totals for each question that are not linked to any child.
• To help you when you contact us.

We do not use your data or your child’s data for advertising, and we never sell it. Nothing is decided automatically about your child: Mindzilo only picks the next question and suggests ideas to you.

Zilo is off unless you turn it on. It explains your child’s learning and suggests ideas, only to you. Children never see Zilo, its answers or a profile.

What is sent to an AI service provider when you use Zilo:

• learning facts worked out by our code, with your child’s name replaced;
• your hopes and notes about your child, and the age band if you chose one;
• your country and language;
• which subjects your family has on, such as whether Islamic Studies is on;
• your message, with your children’s names replaced and phone numbers and emails removed. Other names you type may remain, so please leave them out.

The AI service provider is a third party we share this with. It never receives anything that names or identifies you or your child: not your name, your email, your child’s name, their raw answers, photos, or any account or child ID. It may process this outside your country, and keeps it for a limited time under its own terms.

Every answer is checked by our code and by a separate AI safety review before you see it. You can rate any answer, or report one to us from the app.

If Zilo cannot give a checked answer, if you report one, or if a message raises a safety concern, a trained member of our team may read that conversation, including your child’s first name and anything you wrote in a report, to keep Zilo safe. Every look is recorded.

If a message describes a child in danger, such as abuse, self-harm, neglect, bullying or a medical emergency, Zilo shows help numbers instead of advice, and our team may follow up with you. The alert records only the kind of concern and when, never what you wrote.

Mindzilo is for children up to 16, used with a parent or guardian. We follow Google Play’s Families policy and the children’s privacy laws that apply to us.

• A parent or guardian creates the account and agrees before anything about a child is saved.
• We collect only what a child needs to learn in Mindzilo. A child does not need to share more to keep playing.
• Children never see ads, never chat, never post, and never see other children’s results.
• Children never use AI in Mindzilo. Questions written with AI help are checked by a person before any child sees them.
• Coins are earned by learning. There are no real-money purchases.
• The shapes your child traces in First Steps are visible only to the grown-ups in your family.
• You can review your child’s data, change it, stop further collection, or delete it, at any time (see “Your choices”).

We never sell data. We share only what is needed with these service providers, which work for us and follow our instructions:

Zilo, only if you turn it on: we share what “Zilo” above describes with an AI service provider, which writes and checks Zilo’s answers. It is a third party, not one of the service providers above that follow our instructions: it may process this outside your country and keep it for a limited time under its own terms, and it never receives anything that names or identifies you or your child.

Some of these services are based outside Pakistan, so your data may be stored or processed in other countries, including Singapore, the United States and the country where our AI service provider processes Zilo requests.

Schools: if you add a class code to a child’s profile, our team may share a weekly class summary with the teacher: the child’s first name or nickname, minutes and days learned, and skills mastered or found hard. You can remove the class code at any time.

The law: we share information only when the law requires it, and only what is required.

• Your account and your children’s data: while you use Mindzilo.
• If your family’s account is not used for 6 months (no one signs in and no phone with Mindzilo connects to us), we delete it with all its data: every child’s profile, learning, phone lock settings and records, and Zilo history. At 5 months we email every parent or guardian on the account to say when, and we never delete sooner than 30 days after that email. Signing in, or a phone with Mindzilo connecting while online, keeps the account and starts the 6 months again. When the account is deleted, we send a final email to confirm.
• When you remove a child, or delete your account: deleted straight away, including your sign-in record. Our encrypted backups are replaced within 35 days, so it is gone from them too.
• Phone lock records about a phone, such as the lock being switched off, stay with that phone in your account, even after you remove a child, until the account is deleted.
• Zilo’s conversations and weekly notes: 90 days. Turning Zilo off deletes them, with your hopes, notes and age bands, straight away. The learning profile stays until the child or the account is deleted.
• A closed safety alert: up to 12 months.
• Sign-in sessions: up to 90 days after your last visit.
• Signing out of the app removes your family’s data from that phone.
• A few records with no personal content remain after deletion: our team’s action logs (which may hold our internal reference numbers), records of emails sent (no addresses, only our reference numbers), monthly totals of Zilo’s use that are not linked to anyone, finished or failed background-task records (reference numbers only, removed after 30 days), and totals for each question that are not linked to any child.

• See and change: your dashboard shows what Mindzilo knows about each child. You can change names, languages, starting points and settings at any time.
• Withdraw your agreement: on the website, in Settings, then Privacy and consent. Mindzilo then stops sending your children’s learning to our servers; the app keeps new progress only on the phone until you agree again or sign out. What is already saved stays until you delete it.
• Email reports: turn them off in Settings, or with the unsubscribe link in any report.
• Zilo: turn it off at any time in Settings. Its data is deleted as described above.
• Phone lock: turn it off at any time in Family settings, then Phone lock, with your PIN.
• Delete a child: in the app, in Family settings, or on the dashboard.
• Delete your account: in the app (Family settings, then Settings, then Delete account) or on the website (Settings, then Delete account).
• Get a copy of your data, or ask us anything: email [email protected]. We answer within 30 days.

How to delete your account and data

• Every connection is encrypted (HTTPS/TLS).
• Your email address is stored encrypted. Your PIN is stored only as a one-way hash.
• Database backups are encrypted.
• Wrong tries are limited: 5 wrong PINs pause the PIN for 5 minutes.
• Only a few people on our team can look up an account, each with a set role, only to help with a request, and every look-up is recorded.

If something goes wrong that affects your data, we will tell you quickly and explain what we are doing about it.

The website uses only the cookies it needs to work. There are no advertising or tracking cookies.

On the phone, the app keeps your children’s profiles and progress so it works offline (up to 3 children), with your sign-in in the phone’s secure storage. Signing out removes it from the phone, except your language and theme.

When we change this policy, we update the date at the top and tell you by email and in the app. If a change affects your children’s data, we ask you to read and agree again before Mindzilo saves anything more.

Questions about your privacy or your child’s, or a request about your data? Write to us and we will answer within 30 days.