Privacy Policy

At TwoRuby, we develop a variety of mobile applications, ranging from health and utility tools to a grade book for teachers. Because these apps do very different things, our data practices differ per app. This Privacy Policy explains what is common to all of them, and then what applies to each.

1. What applies to all of our apps

• Payments: Subscriptions are securely handled by Apple (App Store) or Google Play. We use RevenueCat to validate purchase history. We never see or store your credit card details.
• Auto-Renewal: Subscriptions automatically renew unless auto-renew is turned off at least 24 hours before the end of the current billing period.
• No sale of personal data: We never sell your personal data, and we never use it to build advertising profiles.

Everything else — whether an app signs you in, uses analytics, or shows ads — depends on which app you are using. The table below summarises it, and the sections after that give the detail.

2. Which app collects what

3. Chalkbook — grade book for teachers

Chalkbook is a professional tool used by teachers. Children do not use it and do not have accounts. It does, however, hold records about them, so this section is specific.

• What a teacher records, and why: a pupil's name, and optionally a student ID, a parent phone number and a date of birth, along with grades, attendance and written comments. We process this on the basis of legitimate interests — running a class and keeping parents informed, which is the ordinary purpose of a grade book. The teacher decides what to record. TwoRuby is the data controller for the storage and sharing described here, and is the contact for any request (see section 8).
• Offline by default: everything stays on the teacher's device unless they explicitly choose to publish a class to the parent portal.
• Never leaves the device, for any class: the tuition-status flag, the teacher's private note about a pupil, and the pupil's recorded mood.
• Not shared with parents, even for a published class: the student ID and the parent phone number.
• Shared with that pupil's parent, for a published class: the pupil's name, the class name and subject, grades, per-term averages, attendance and missing-homework counts, and the teacher's comments.
• Teacher account: cloud features require signing in with Google or Apple. We receive the teacher's email address and basic profile from that provider, used only to identify their own data.
• How parents see the data: each pupil has a private link containing a secret code, which the teacher sends to that pupil's parent. Anyone holding the link can view that one pupil's record from that one teacher and nothing else. A teacher can revoke a link at any time, which stops the old one working immediately. Parents are not asked to create an account, and we collect no personal data from them through the portal.
• Comments are visible to parents: the comments a teacher writes alongside grades and daily records are shown to that pupil's parent. The app states this next to each field as it is typed. The private note field, which never leaves the device, is for anything not meant for parents.
• Cloud backup (paid feature): teachers on a paid plan can back up to our cloud. A backup contains their classes, pupils (including student ID, parent phone and date of birth), grades and records. It does not contain tuition status or private notes. Only that teacher can read their own backup. The student ID is typically an identifier assigned by the school or education ministry, not one we generate — it is included in backups but never shown on the parent portal.
• No analytics, no ads, no tracking: Chalkbook contains no analytics, no crash reporting, no advertising and no tracking of any kind.

4. Premium & Health Applications (e.g., Plant30: Gut Health Tracker)

For applications focused on personal health, utility, or those operating on a premium subscription model, we enforce strict privacy boundaries:

• No Tracking & No Ads: These specific applications do not contain third-party advertisements (such as Google AdMob) and do not use advertising identifiers (like IDFA) to track you across other apps or websites.
• Anonymous Authentication: These apps utilize anonymous authentication. We do not require your real name, email, or phone number. Your app data (like tracking streaks) is linked only to a random, anonymous User ID.
• Analytics: These apps use analytics tools (such as Firebase Analytics) to understand how they are used — for example screen views and crash reports. This is collected using anonymous identifiers and is used strictly to improve performance and user experience.

5. Ad-Supported Applications

Some of our other free applications rely on advertising to remain free for users. For these specific ad-supported apps:

• Third-Party Advertising: We work with advertising partners, including Google AdMob, to display ads.
• Advertising Identifiers: These apps may collect and share specific device identifiers (such as Apple's IDFA or Android Advertising ID) and IP addresses with our ad partners to provide personalized advertising.
• Opt-Out: You can opt-out of personalized ads anytime through your device settings (e.g., enabling "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android). To learn more about Google's data usage, visit: How Google uses information from sites or apps that use our services.

To learn more about how Google uses data, please visit: How Google uses information from sites or apps that use our services.

You can opt-out of personalized advertising by visiting your device settings (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android).

6. Where data is stored

Where our apps store data in the cloud, it is held on Google Cloud infrastructure (Firebase) and encrypted in transit and at rest. Data may be processed in the region where our Firebase project is hosted, which may be outside your country. We rely on Google Cloud's standard contractual protections for such transfers.

7. How long we keep your data

We keep data for as long as you keep it — we do not retain copies after you delete it.

• Chalkbook: published pupil records remain until the teacher deletes the class, revokes the pupil's link, or deletes their account. Cloud backups remain until the teacher deletes them or their account. Data on the device remains until the teacher deletes it or removes the app.
• Our anonymous apps: data remains until you use the in-app deletion feature or uninstall the app.

8. Data Deletion and Your Rights

Depending on where you live, you may have rights of access, correction, deletion, portability and objection.

• For our anonymous apps (like Plant30), you can delete your data by using the in-app deletion feature or by uninstalling the app.
• Teachers using Chalkbook can delete a class, revoke a pupil's link, or delete their entire account from within the app — which removes everything published and wipes local data. Instructions are also available at chalkbook.tworuby.com/delete-account.html.
• Parents and guardians should normally contact their child's teacher, who decides what is recorded and can correct or remove it. You may also contact us at the address below and we will respond within 30 days — please tell us which app, and for a pupil record, the teacher or school concerned, so that we can locate it.
• For any other request, including CCPA or GDPR inquiries, please contact us at the email below.

9. Children

None of our apps are directed at children, and none are listed in a children's app category.

Chalkbook is designed for and used by teachers. It collects nothing directly from a child; records about pupils are entered by their teacher in a professional capacity. If a parent or guardian would like a child's record corrected or removed, please contact the teacher, or us at the address below.

10. Data Protection

We implement industry-standard security measures to maintain the safety of your data. However, no electronic storage method is 100% secure.

11. Changes to this Policy

We update this page whenever our apps change how they handle data. The date below shows the last revision.

12. Contact Us

If you have any questions regarding this Privacy Policy, please contact us at tworubystudio@gmail.com.

Last updated: August 6, 2026