A learning account of their own.

Parental notice

Exorvio is operated by Devvik Agarwal. Contact support@exorvio.com about your family’s privacy.

Before an account is created: we send KWS your email address, your child’s country and an anonymous verification reference. We match the email to the verified Google email of your parent account. We store a hash of the email, your account reference, country, request times and verification result. KWS handles the verification and its email. Exorvio does not receive identity documents, payment-card details or face scans. KWS retains its own verification record under its Privacy Policy. A payment-card check can involve a small temporary charge or authorization. Verification confirms adulthood; you must separately confirm your legal authority and consent.

After your consent: we store the child’s chosen username, securely hashed password, age group (under 13 or 13–17), country, link to your account and consent notice version/time. We store submitted answers and code, lesson progress, exercise results, preferences, XP, streaks and achievements so the child can learn and resume their work. We do not require the child’s email, real name, school or exact birth date. Please ask your child not to put personal information into code or answers.

Private by design: child accounts cannot join public leagues, use friends/discovery or enable push reminders. We do not show ads or add the public analytics beacon to a marked child session. Cloudflare/Sites hosts and stores account data; Railway executes submitted Python and Java code in isolated, limited sessions. These providers process data needed to supply the learning service. We do not sell child data or allow public child profiles.

Your controls: download the child’s saved data, reset their password, or withdraw consent and request deletion in Family accounts. Withdrawing consent stops account access immediately; saved account data is scheduled for deletion after seven days. Deleting your parent account also disables and schedules deletion of dependent child accounts. Abandoned verification requests expire after 48 hours and are removed by periodic maintenance. Consent evidence is removed with the managed account. Verification requests are also removed when the parent requests account deletion. Records independently held by KWS are governed by its policy.

Consent covers the account and necessary learning-service processing described here. It does not authorize public sharing, advertising or unrelated use. Review the full Privacy Policy and Terms of Use before agreeing. Notice version: 2026-09-23.1.