1. Introduction

Welcome to Preschoolio ("we," "us," or "our"), with principal place of business at Ground Floor, No. 45, Shakthi, Kattigenahalli, Yelahanka, Bengaluru – 560064, Karnataka, India. GSTIN: 29CYNPS8608B1ZX.

For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDPA"), Preschoolio — a sole proprietorship of Sibin Sivanandan — is the Data Fiduciary for personal data processed through the Service. Our Grievance Officer is Arya R Ashok (see § 12).

This Privacy Policy explains how we collect, use, store, and safeguard information when you use our website at preschoolio.com and any associated mobile applications (collectively, the "Service").

By using Preschoolio, you agree to the collection and use of information in accordance with this policy. Parents and guardians are responsible for supervising their children's use of the Service.

2. Children's Privacy (COPPA & DPDPA Compliance)

Our Service is designed for children aged 3–6, used under parental supervision. We take children's privacy extremely seriously and operate in compliance with the Children's Online Privacy Protection Act (COPPA) and India's Digital Personal Data Protection Act, 2023 (DPDPA).

• We do not collect personal information directly from children.
• Children cannot create accounts. All accounts are created by parents or guardians.
• All child progress data (XP, activity completions, stickers) is stored under the parent's account.
• We do not serve behavioural advertisements to children.
• We do not allow children to share personal information within the app.

For a plain-language overview of how the in-app experience is kept age-appropriate and parent-controlled, visit our Child Safety page.

3. Information We Collect

From Parents (Account Holders):

• Email address (used for authentication and account management).
• Billing state (Indian users only) — used to compute the correct GST split (CGST/SGST or IGST) on tax invoices.
• Payment information — processed securely by our payment partners (Razorpay for direct web payments; Google Play Billing for Android in-app purchases). We do not see or store card or bank-account details.

Automatically Collected (Non-Personal):

• Device type, operating system version, and browser type.
• App usage statistics (e.g., games played, session duration) to improve the learning experience.
• Crash reports and performance diagnostics.

4. Cookies & Similar Technologies

We use essential cookies and local storage to maintain your login session and remember your preferences. We do not use third-party advertising cookies or tracking pixels. You can clear cookies via your browser settings, which may require you to log in again.

5. How We Use Information

• To authenticate parent accounts and maintain security.
• To personalize the child's learning journey (learning progress, earned stickers).
• To process subscription payments and send receipts.
• To respond to support requests submitted by parents.
• To send service emails you cannot opt out of while your account is open — payment receipts, renewal and cancellation notices, security alerts, and replies to your support requests.
• To send optional emails: monthly learning-progress reports for your children, product updates, and occasional promotional offers or discounts on our paid plans. Every one of these carries a one-click unsubscribe link, and opting out never affects your subscription or your access to the Service.
• To improve the app through aggregated, anonymised analytics.

6. Data Sharing & Third Parties

We do not sell your data. We share data only with the following trusted service providers, each of whom is bound by their own privacy commitments and is engaged solely to provide services on our behalf:

• Google Firebase & Google Cloud Platform — Authentication, Firestore database storage, and hosted infrastructure.
• Cloudflare — Edge content delivery, DDoS protection, and serverless backend for our payment and entitlement APIs.
• Razorpay (RazorPay Software Private Limited) — Payment processing for web purchases (all currencies).
• Google Play Billing — In-app subscription and one-time purchases on the Android app.

We may disclose information if required by law, court order, or to protect the rights and safety of our users.

Cross-border data transfers. Some of the service providers listed above process data on servers located outside India — typically in the United States and the European Union (e.g., Firebase / Google Cloud regions). We rely on each provider's contractual safeguards and applicable cross-border transfer mechanisms. By using the Service, you consent to these transfers in accordance with DPDPA § 16.

7. Data Retention & Deletion

We retain your account data for as long as your account is active.

Delete your account yourself, any time. Open Parent Dashboard → Delete account (web and Android app). This immediately and permanently deletes your account, every child profile, and all learning progress. The action cannot be undone. You may alternatively request deletion by emailing us, and we will complete the erasure within 30 days. For step-by-step instructions, see our dedicated Delete Account & Data page.

Partial deletion or correction. To correct inaccurate data, or delete specific data without removing your whole account, email hello@preschoolio.com or use Parent Dashboard → Support. We respond within 5 business days.

Subscriptions. If you have an active subscription purchased on the web, it is cancelled automatically as part of deletion. If you subscribed through the Google Play Store, you must cancel the subscription separately in your Google Play account — deleting your Preschoolio account does not cancel Google Play billing.

What we keep. When you delete your account we erase your personal data and sign-in identity. We retain a minimal, de-identified record of completed payments and subscriptions (amounts, dates, and transaction references — no longer linked to your name or email) for as long as required to meet tax, accounting, and other legal obligations. We also keep a small, non-identifying audit record that a deletion occurred.

8. Your Rights

As a parent or account holder, and as a Data Principal under the DPDPA, you have the right to:

• Access — Request a copy of the data we hold about you and your child profiles.
• Correction — Request correction of inaccurate or incomplete data.
• Erasure / Deletion — Delete your account and data yourself at any time from Parent Dashboard → Delete account (see our Delete Account & Data page), or request removal by email (subject to the financial-record retention noted in § 7).
• Withdrawal of Consent — Withdraw consent to data processing at any time (this will require account deletion, as the Service cannot operate without the data described above).
• Grievance Redressal — Lodge a grievance with our Grievance Officer (see § 12).
• Nomination — Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity (DPDPA § 14).

To exercise these rights, contact us at arya.r.ashok@preschoolio.com. We respond within 7 business days and complete verified deletion requests within 30 days.

9. Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), Firebase security rules, and regular security reviews. However, no method of transmission over the internet is 100% secure.

10. Governing Law

This Privacy Policy is governed by the laws of the Republic of India. Any disputes shall be subject to the exclusive jurisdiction of the competent courts in Bangalore, Karnataka, India.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by updating the "Last Updated" date above and, where appropriate, by sending an email notification.

12. Grievance Officer & Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact our Grievance Officer:

• Name: Arya R Ashok
• Email: arya.r.ashok@preschoolio.com
• Subject line: please prefix with "Grievance –" so it is routed promptly
• Response time: within 7 business days, as required by DPDPA § 13

You may also raise grievances, bug reports, or feedback from the Support section inside the Parent Dashboard. Our team can reply directly within the app, and you can mark the conversation as resolved once your issue is addressed.