Sasta Basta

Privacy Policy

Last updated: 23 July 2026

In short: Sasta Basta is a family account — a parent or guardian signs up with an email and password, then adds each child inside the app. We store your account details and your family's learning progress so it follows you across devices. There are no adverts, no third-party trackers, and the built-in AI tutor runs entirely on your device — it never sends your child's questions anywhere.

Who this applies to

This policy covers the Sasta Basta application (the "App") on the web, Apple App Store, and Google Play. The App is an educational learning tool for children from nursery age through GCSE, used with the involvement of a parent, guardian, or teacher, under a single family account.

Your family account

To use the App, a parent or guardian creates one account with an email address and password. We ask that a child not create their own account — the sign-up screen is addressed to parents and guardians, and we expect an adult to be the one who registers, manages the subscription, and adds children as profiles inside the app.

Account sign-in is handled by our database provider, Supabase (see supabase.com/privacy). Your password is stored by Supabase in hashed form — we never see or store it ourselves. New accounts must confirm their email address before first use.

What we collect and store

Because the App now runs on accounts, some information is stored in our database (hosted by Supabase) so it can follow your family across devices, rather than staying only on one device as in earlier versions of the App. This includes:

Your account email address — used to sign you in and to identify your family's data.
A first name or nickname for each child profile — used only to greet the learner; stored on-device and backed up to your account.
Learning progress — which chapters have been practised, tested, or passed, and scores, per child profile, so the App can resume where a child left off on any device.
"Mastery" data — a per-question record of recent right/wrong answers, used only to bias Practice mode toward a child's weaker spots.
Coins, badges, and cosmetic unlocks — the App's in-app reward system (themes, colours, Brain Teaser puzzles), and Brain Development game scores.
Optional classroom / pace-plan settings — if a parent or teacher sets these up, e.g. a target exam date.
Your chosen theme.

We do not collect your child's date of birth, home address, phone number, precise location, contacts, photos, or device identifiers, and we do not use this data for advertising.

Biometric unlock (Face ID / Touch ID)

The App can optionally use your device's own Face ID, Touch ID, or fingerprint unlock as a privacy lock when re-opening the App, and as a parental gate for certain settings. This uses your device's built-in WebAuthn support: a private credential is created and stored only on your device by your device's own operating system. Your fingerprint or face data itself never leaves your device, and we never receive it — the App only ever receives a yes/no confirmation from your device.

The AI tutor ("Ask Alif")

The built-in "Alif" tutor runs entirely on your device. It matches a child's question to the App's own curriculum content and simple calculations, and answers from that. No questions, messages, or other data are sent to us or to any external AI service.

Optional newsletter

A parent or guardian may choose to subscribe to our homeschooling newsletter from within the App. This is entirely optional and is never ticked by default. If a parent opts in, their email address is passed to our newsletter provider MailerLite (MailerLite, UAB — see mailerlite.com/legal/privacy-policy) solely to send the newsletter; the subscription is confirmed on MailerLite's own page (double opt-in). This is separate from your account data above, and you can unsubscribe at any time using the link in every newsletter. We do not subscribe children, and we do not use newsletter sign-ups for any other purpose.

Subscriptions (App Store & Google Play versions)

The paid App is offered as an auto-renewing subscription. When a parent starts a subscription, the purchase is processed by Apple or Google and managed on our behalf by RevenueCat, Inc. (see revenuecat.com/privacy). To manage the subscription, RevenueCat receives a record of the purchase and an anonymous subscription identifier. This is used only to keep the subscription active across the family's devices and to restore purchases — it is not used for advertising, is not sold, and does not identify your child. No learning data or your account email is sent to RevenueCat, Apple, or Google. This section applies only to the App Store and Google Play versions; the free web tier has no subscription.

No advertising or tracking

The App contains no advertisements, no third-party advertising SDKs, no behavioural analytics, no advertising cookies, and no social-media trackers.

Children's privacy

The App is designed for use by children and is built with children's privacy laws in mind, including the U.S. Children's Online Privacy Protection Act (COPPA) and the UK GDPR / UK Age Appropriate Design Code. The account itself is created and controlled by a parent or guardian, not a child — a child only uses a profile that the account holder adds inside the App. We collect only the information described above, do not use it for advertising, and do not knowingly allow a child to create their own account or interact with anyone outside their own family.

Parents and guardians can contact us at any time (see below) to review what is stored for their family, or to request that their account and associated data be deleted.

Your choices and rights

You can edit a child's saved nickname at any time from the App.
You can sign out of your account from the App at any time.
To request a copy of, or deletion of, your account and stored data, email us at the address below — we will action this promptly.
Uninstalling the App or clearing its local site data removes everything stored on that device, though your account data remains in our database until you request deletion.

Changes to this policy

If this policy changes, we will update the date above and publish the new version here.

Contact

Questions about privacy, or want your account data deleted? Email privacy@triomatic.ai.