1. Introduction

Welcome to Preschoolio ("we," "us," or "our"), with principal place of business at Ground Floor, No. 45, Shakthi, Kattigenahalli, Yelahanka, Bengaluru – 560064, Karnataka, India. GSTIN: 29CYNPS8608B1ZX.

For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDPA"), Arya R Ashok is the Data Fiduciary for personal data processed through the Service.

This Privacy Policy explains how we collect, use, store, and safeguard information when you use our website at preschoolio.com and any associated mobile applications (collectively, the "Service").

By using Preschoolio, you agree to the collection and use of information in accordance with this policy. Parents and guardians are responsible for supervising their children's use of the Service.

2. Children's Privacy (COPPA & DPDPA Compliance)

Our Service is designed for children aged 3–6, used under parental supervision. We take children's privacy extremely seriously and operate in compliance with the Children's Online Privacy Protection Act (COPPA) and India's Digital Personal Data Protection Act, 2023 (DPDPA).

• We do not collect personal information directly from children.
• Children cannot create accounts. All accounts are created by parents or guardians.
• All child progress data (XP, activity completions, stickers) is stored under the parent's account.
• We do not serve behavioural advertisements to children.
• We do not allow children to share personal information within the app.

For a plain-language overview of how the in-app experience is kept age-appropriate and parent-controlled, visit our Child Safety page.

3. Information We Collect

From Parents (Account Holders):

• Email address (used for authentication and account management).
• Billing state (Indian users only) — used to compute the correct GST split (CGST/SGST or IGST) on tax invoices.
• Payment information — processed securely by our payment partners (Razorpay for direct web payments; Google Play Billing for Android in-app purchases). We do not see or store card or bank-account details.

Automatically Collected (Non-Personal):

• Device type, operating system version, and browser type.
• App usage statistics (e.g., games played, session duration) to improve the learning experience.
• Crash reports and performance diagnostics.

4. Cookies & Similar Technologies

We use essential cookies and local storage to maintain your login session and remember your preferences. We do not use third-party advertising cookies or tracking pixels. You can clear cookies via your browser settings, which may require you to log in again.

5. How We Use Information

• To authenticate parent accounts and maintain security.
• To personalize the child's learning journey (learning progress, earned stickers).
• To process subscription payments and send receipts.
• To respond to support requests submitted by parents.
• To send optional product update emails (parents can unsubscribe at any time).
• To improve the app through aggregated, anonymised analytics.

6. Data Sharing & Third Parties

We do not sell your data. We share data only with the following trusted service providers, each of whom is bound by their own privacy commitments and is engaged solely to provide services on our behalf:

• Google Firebase & Google Cloud Platform — Authentication, Firestore database storage, and hosted infrastructure.
• Cloudflare — Edge content delivery, DDoS protection, and serverless backend for our payment and entitlement APIs.
• Razorpay (RazorPay Software Private Limited) — Payment processing for web purchases (all currencies).
• Google Play Billing — In-app subscription and one-time purchases on the Android app.

We may disclose information if required by law, court order, or to protect the rights and safety of our users.

Cross-border data transfers. Some of the service providers listed above process data on servers located outside India — typically in the United States and the European Union (e.g., Firebase / Google Cloud regions). We rely on each provider's contractual safeguards and applicable cross-border transfer mechanisms. By using the Service, you consent to these transfers in accordance with DPDPA § 16.

7. Data Retention & Deletion

We retain your account data for as long as your account is active. You may request deletion of your account and all associated child profiles at any time by emailing us. Upon a valid deletion request, we will permanently erase all personal data within 30 days.

8. Your Rights

As a parent or account holder, and as a Data Principal under the DPDPA, you have the right to:

• Access — Request a copy of the data we hold about you and your child profiles.
• Correction — Request correction of inaccurate or incomplete data.
• Erasure / Deletion — Request complete removal of your account and data.
• Withdrawal of Consent — Withdraw consent to data processing at any time (this will require account deletion, as the Service cannot operate without the data described above).
• Grievance Redressal — Lodge a grievance with our Grievance Officer (see § 12).
• Nomination — Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity (DPDPA § 14).

To exercise these rights, contact us at arya.r.ashok@preschoolio.com. We respond within 7 business days and complete verified deletion requests within 30 days.

9. Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), Firebase security rules, and regular security reviews. However, no method of transmission over the internet is 100% secure.

10. Governing Law

This Privacy Policy is governed by the laws of the Republic of India. Any disputes shall be subject to the exclusive jurisdiction of the competent courts in Bangalore, Karnataka, India.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by updating the "Last Updated" date above and, where appropriate, by sending an email notification.

12. Grievance Officer & Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact our Grievance Officer:

• Name: Arya R Ashok
• Email: arya.r.ashok@preschoolio.com
• Subject line: please prefix with "Grievance –" so it is routed promptly
• Response time: within 7 business days, as required by DPDPA § 13

You may also raise grievances, bug reports, or feedback from the Support section inside the Parent Dashboard. Our team can reply directly within the app, and you can mark the conversation as resolved once your issue is addressed.