Privacy Policy

Last updated

September 18, 2026.

1. Who we are

App publisher: TEVIAL. Contact: contact@tevial.fr.

2.1 Family account data

Email address (the household's login) and PIN code (same role as a password, never stored in plain text, only in hashed form). Currency chosen for the household (euro or US dollar).

2.2 Child profile data

The child's nickname (chosen by the parent), login PIN (hashed), date of birth (optional), and learning/progress data (badges earned, quizzes completed).

2.3 Simulated financial data

Virtual amounts allocated by parents, the child's investment decisions (allocation across fictional companies and ETFs, within the Free account or the Vault account), and the history of virtual transactions (investment, withdrawal, sale). This data is entirely fictional and does not represent any real bank account, payment card, or financial asset.

2.4 Subscription-related data

On mobile (iOS/Android), if you subscribe to a premium plan via the App Store or Google Play Store, the purchase is processed directly by Apple or Google: through our provider RevenueCat, we only receive your subscription status (trial, active, payment pending, expired, or canceled) and a technical identifier linked to the purchase. On the web (PWA), payment is processed directly by Stripe: we receive from Stripe your subscription status, a Stripe customer identifier, and your billing history, needed to manage your access. In all cases, we never receive or store your banking or card details.

2.5 Technical data

Device identifier, device type, operating system, and technical logs in case of errors, for maintenance purposes.

3. Why we collect this data

To create and manage your family space and child profiles; to make the app's educational concept work (investment simulation); to manage your subscription where applicable; to keep the app secure and technically sound; to contact you when needed (support, important service information). We do not use your data or your children's data for advertising purposes, and we do not sell it to any third party.

4. Data sharing

We share certain data only with RevenueCat (mobile subscription management — see their privacy policy: https://www.revenuecat.com/privacy), Stripe (processing web payments and subscriptions — see their privacy policy: https://stripe.com/privacy), Apple and Google (processing the mobile subscription payment, as part of the in-app purchase), and our hosting provider OVH (secure storage of data on our servers). These providers only access data strictly necessary to perform their service and are not permitted to reuse it for other purposes.

5. Specific protection of children's data

Glaow is designed to be used by children under the supervision and with the consent of their parents, who create and manage the family account. The parent controls the creation, modification, and access to child profiles. The app does not display any advertising aimed at children. Children's data is never sold or shared for commercial or advertising purposes. The parent can request the deletion of a child's profile, or of the whole family account, at any time.

6. Retention period

Your data is kept for as long as your family account is active. If you request account deletion (see section 7.1), it is handled with a 30-day grace period: during this time, you can cancel the request at any time from the app's settings. After this period, your account and all associated data are permanently and irreversibly deleted from our servers, unless a longer retention is legally required.

7. Your rights

In accordance with applicable data protection regulations (including the GDPR for European users), you have the following rights regarding your data and your minor children's data: the right to access your data, the right to rectification, the right to erasure ("right to be forgotten"), the right to data portability, and the right to object to processing. To exercise these rights, contact us at contact@tevial.fr.

7.1 Deleting your account and your data

You can request the deletion of your family account and all associated data (including child profiles) at any time, from the app: Settings > Delete my account, after re-entering your PIN. This request does not trigger immediate deletion: it opens a 30-day grace period, during which you can cancel the request at any time from the same settings. A confirmation email is sent when you request it, and another if you cancel it. After this 30-day period, the account and all associated data (email address, PIN, child profiles, virtual transaction history, subscription) are permanently deleted from our servers. If you cannot access the app, you can also contact us at contact@tevial.fr to request the deletion of your account.

8. Security

We implement reasonable technical measures (secure PIN hashing via BCrypt, token-based authentication with no server-side session, secure hosting) to protect your data against unauthorized access, loss, or alteration. As no system is 100% infallible, we cannot guarantee absolute security.

9. Changes to this policy

We may update this privacy policy. Any substantial change will be flagged to you in the app. The last update date appears at the top of this document.

10. Contact

For any question about this privacy policy or your personal data: contact@tevial.fr.