Privacy Policy

1.Who This Privacy Policy Applies To

This Privacy Policy applies to:

• Children using KidsiGullak under parental supervision
• Parents and guardians
• Approved family contributors
• Customer support users
• Other authorized users of the platform

Because KidsiGullak is designed for children and families, we take additional care with information relating to child users.

2.Our Privacy Principles

We believe children should be able to learn about money without giving up unnecessary personal information. Our approach is based on the following principles:

Privacy by Design

We aim to collect only information that is necessary to provide and improve the KidsiGullak experience.

Parent-Controlled Access

Parents have supervisory control over their child's account, goals, saving rules and other relevant settings.

Child-Safe Experience

Children do not receive independent access to payment integrations or unrestricted financial functionality.

Limited Visibility

Family contributors only receive access to information necessary for the contribution experience.

Secure Financial Information

Payment-related information is protected using appropriate security measures and is not exposed unnecessarily to children or unauthorized users.

Transparent Use

We aim to explain our data practices in clear and understandable language.

3.Information We May Collect

The information we collect depends on how KidsiGullak is used.

A. Parent Information

When a parent creates or manages an account, we may collect information such as:

• Name
• Email address
• Mobile number
• Account credentials or authentication information
• Parent verification information
• Child profile information provided by the parent
• Payment-related information required for supported services
• Preferences and account settings

B. Child Information

Parents may provide limited information required to create and manage a child's profile. This may include:

• Child's name or nickname
• Age or age range
• Profile information
• Savings goals
• Goal amounts and timelines
• Savings activity
• Learning activity
• Achievements, badges and streaks
• Allowance or earning information
• Withdrawal requests
• Parent-defined rules

We encourage parents to provide only the information necessary for their child's use of the platform.

C. Savings and Goal Information

To provide the core KidsiGullak experience, we may collect information relating to:

• Gullaks created by the child or parent
• Savings goals
• Target amounts
• Contributions
• Goal progress
• Milestones
• Allowances
• Earning activities
• Withdrawal requests
• Applicable saving rules

This information is used to provide the savings and goal-tracking functionality.

D. Family Contributor Information

When an approved family member contributes to a child's Gullak, we may collect information such as:

• Name
• Contact information
• Relationship or connection to the child
• Contribution amount
• Contribution date
• Personalized message
• Payment status

Family contributors only receive access to children and information explicitly shared with them.

E. Usage and Interaction Information

KidsiGullak may collect limited information about how the application is used, including:

• App opens
• Session duration
• Repeat usage
• Time of use
• Goal interactions
• Saving activity
• Learning activity
• Feature interactions
• Withdrawal attempts

This information helps us understand product usage and support the child's saving and learning experience. KidsiGullak is designed around behavioral signals rather than monitoring the actual content a child consumes.

F. Device and Technical Information

We may collect technical information necessary to operate, secure and troubleshoot the service, such as:

• Device type
• Operating system
• Application version
• Device identifiers where required
• IP address
• Crash and diagnostic information
• Security and authentication information

4.Information We Do Not Intentionally Collect

KidsiGullak is designed to avoid unnecessary monitoring of children's private activities.

Unless specifically required for a clearly disclosed feature, KidsiGullak does not intend to collect or monitor:

• Private messages
• Chat conversations
• Personal communications
• Screenshots of other applications
• The actual content consumed within third-party applications
• Sensitive information unrelated to the KidsiGullak experience

The purpose of usage tracking is to understand saving, learning and application interaction patterns—not to spy on children.

5.How We Use Information

We may use information to:

Provide the Service

Create and manage accounts, Gullaks, goals, allowances, contributions and learning experiences.

Support Financial Habits

Display progress, milestones, streaks and saving activity.

Enable Parent Controls

Allow parents to configure rules, approve withdrawals and manage child accounts.

Facilitate Family Contributions

Enable approved family members to contribute toward children's goals.

Provide Learning Experiences

Deliver age-appropriate educational content, scenarios and quizzes.

Improve the Product

Understand how features are used and identify opportunities to improve usability and reliability.

Maintain Security

Detect suspicious activity, protect accounts and prevent unauthorized access.

Provide Customer Support

Respond to questions, technical issues, payment issues and account-related requests.

Meet Legal and Compliance Requirements

Maintain appropriate records and comply with applicable legal, regulatory and safety obligations.

6.Children's Privacy

Children's privacy is a core consideration in the design of KidsiGullak. The child account is intended to operate under parent or guardian supervision.

Parents control important functions including:

• Child account management
• Savings rules
• Allowances
• Withdrawal approvals
• Emergency unlocks
• Goals and related settings
• Linked payment methods

Children cannot independently access payment integrations, approve withdrawals or modify parent-defined financial rules.

We aim to follow applicable child privacy and safety requirements, including COPPA-like principles where applicable.

7.Parental Control and Access

Parents may have the ability to:

• Review their child's account information
• View savings and goal activity
• Configure savings rules
• Configure withdrawal controls
• Approve or reject withdrawal requests
• Manage allowances
• Manage goals
• Configure earning activities
• Manage linked payment methods
• Request correction or deletion of applicable information

Parents may contact us using the details provided in the Contact & Grievance section of this Privacy Policy.

8.Family Contributors

Family contributors can participate in a child's savings journey without receiving access to the parent's full dashboard.

A family contributor may be able to:

• View limited goal information
• Contribute to approved Gullaks
• Add a message
• Participate in milestone celebrations

Family contributors cannot:

• Withdraw funds
• Change savings rules
• Edit goals
• Access the parent dashboard
• Modify transaction history

9.Payments and Financial Information

KidsiGullak may integrate with third-party payment providers or financial infrastructure providers to facilitate supported contribution and payment flows.

Where payment services are used:

• Payment information is handled using appropriate security measures.
• Sensitive payment credentials should not be exposed to child users.
• Payment processing may be performed by authorized third-party payment providers.
• KidsiGullak may receive transaction status and reference information required for reconciliation and service delivery.
• We do not intend to provide children with unrestricted spending functionality.

Payment providers currently used: Razorpay.

Payment-related data retained by KidsiGullak: transaction amount, currency, payment status, and Razorpay's own reference IDs (payment ID, order ID, payment link ID, QR code ID). Card numbers, bank account details, and UPI IDs are never received or stored by KidsiGullak — all card, bank, and UPI handling takes place on Razorpay's own secure checkout page. This data is currently retained indefinitely; see Section 12 for our retention approach.

10.How We Share Information

We do not sell children's personal information.

Information may be shared only where reasonably necessary to operate, secure or support the service, including with:

Service Providers

Technology, hosting, analytics, authentication, customer support and infrastructure providers.

Payment Providers

Where necessary to process or verify supported transactions.

Parents or Guardians

Information relating to a child may be made available to the authorized parent or guardian managing the child's account.

Approved Family Contributors

Only limited information necessary for the contribution experience may be shared.

Legal or Regulatory Authorities

Where required by applicable law, regulation, court order or legitimate legal process.

Business Transfers

If KidsiGullak undergoes a merger, acquisition, restructuring or sale of assets, information may be transferred as part of that transaction subject to applicable privacy requirements.

We do not permit third parties to use children's information for purposes inconsistent with KidsiGullak's disclosed services.

11.Data Security

We use reasonable technical and organizational safeguards designed to protect personal information against:

• Unauthorized access
• Unauthorized disclosure
• Loss
• Misuse
• Alteration
• Destruction

Security measures may include:

• Encryption
• Authentication and verification controls
• OTP-based verification for sensitive actions
• Role-based access controls
• Audit logging
• Restricted access to sensitive information
• Monitoring for suspicious activity

All financial and sensitive actions are intended to be traceable through appropriate system logs.

No internet-based service can guarantee absolute security. We continuously work to improve the security of the platform.

12.Data Retention

We retain personal information only for as long as reasonably necessary to:

• Provide the KidsiGullak service
• Maintain account functionality
• Complete legitimate business and operational requirements
• Meet legal, regulatory or compliance obligations
• Resolve disputes
• Prevent fraud and abuse
• Maintain appropriate transaction and audit records

Specific retention periods will depend on the type of information and applicable legal requirements.

Detailed retention schedule: KidsiGullak does not currently apply automated, time-based retention periods or scheduled deletion. Information is retained until a user or parent requests deletion (see Section 18) or an account is otherwise manually removed.

13.Cookies and Similar Technologies

Our website and application may use cookies, device identifiers or similar technologies to:

• Maintain sessions
• Remember preferences
• Improve functionality
• Understand service performance
• Detect security issues
• Analyze product usage

Where required, we will provide appropriate choices or controls regarding non-essential cookies and similar technologies.

14.Analytics

We may use analytics and diagnostic tools to understand:

• Feature usage
• Application performance
• Errors and crashes
• User journeys
• Engagement with savings and learning features

Analytics should be configured to minimize unnecessary collection of children's personal information.

Analytics providers used: none currently in active use.

15.AI and Personalization

KidsiGullak may introduce intelligent features designed to support saving behavior, such as personalized nudges or guidance.

Where such features are introduced, they may use relevant activity within KidsiGullak to provide:

• Saving reminders
• Goal-progress encouragement
• Habit-building suggestions
• Personalized learning experiences

AI-based functionality should not be used to make decisions that unfairly disadvantage a child.

Current AI functionality: AI-generated financial-literacy quiz questions in the app's Learn section, produced via a third-party language-model API. No personal information is sent to this service beyond a lesson topic and, optionally, the child's age range.

16.Child Safety

We are committed to maintaining an age-appropriate and safe experience.

Our child-safety approach includes:

• Parent-controlled access
• Age-appropriate learning content
• Restricted financial functionality
• Controlled family access
• Role-based permissions
• Monitoring for suspicious activity
• Appropriate authentication for sensitive actions

We encourage parents to supervise their child's use of the platform and review available controls regularly.

17.Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information, including the right to:

• Access your information
• Request correction of inaccurate information
• Request deletion where applicable
• Withdraw certain permissions or consent
• Request information about how your data is used
• Raise a privacy complaint
• Request restriction of certain processing where applicable

Parents or guardians may exercise applicable rights relating to their child's information.

To submit a privacy request, contact:

Email: [privacy@yourdomain.com]
Address: [Registered business address]

18.Account Deletion

Parents may request deletion of a child account or parent account, subject to applicable legal, regulatory, fraud-prevention and transaction-record requirements.

Upon receiving a valid deletion request, we will review the request and delete or anonymize applicable information where legally permitted.

Certain records may need to be retained for a specified period where required by law or legitimate operational requirements.

19.Data Breaches and Security Incidents

If we become aware of a security incident involving personal information, we will investigate and take appropriate measures in accordance with applicable law.

Where legally required, affected users and relevant authorities will be notified within the applicable timeframe.

20.Third-Party Services and Links

KidsiGullak may use or link to third-party services. Those services may have their own privacy policies and practices.

We encourage parents to review the privacy policies of third-party services before using them.

KidsiGullak is not responsible for the privacy practices of third-party websites or services that it does not control.

21.International Data Transfers

Depending on the infrastructure and service providers used by KidsiGullak, information may be processed or stored in countries other than the country where the user resides.

Where applicable, we will use appropriate safeguards for international data transfers in accordance with applicable law.

Current hosting/data-storage locations: Firebase (Firestore database, Authentication, and Hosting) and Vercel (backend API).

22.Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our products or services
• Changes in technology
• Changes in legal or regulatory requirements
• Changes in our privacy practices

When we make material changes, we will provide an appropriate notice.

The "Last Updated" date at the top of this page indicates when this policy was most recently revised.

23.Contact Us

If you have questions about this Privacy Policy, your child's information, or our privacy practices, please contact us.

KidsiGullak
Growmind
B4-1304, Mahaveer Ranches, Hosa Road, Rayasandra
Bengaluru, Karnataka 560100, India

Privacy Email: [privacy@domain.com]
General Support: [support@domain.com]
Phone: [Phone Number]

24.Privacy for Parents — Quick Summary