Privacy Policy

The account is yours, not your child's

This is the most important thing to know. Your child never signs in and we hold almost nothing about them.

The one thing we store about a child is the first name you type at sign-up, used so the app can greet them by name. No age, no date of birth, no photograph, no contact details, and no record of what they did.

What we store about you

Your email address, your first name, and your last name if you gave one.

Your password, kept only as a bcrypt hash. We cannot read it, and nor can anyone who obtains a copy of the database.

Your mobile number, and only if you subscribe — a UPI mandate is authorised against a number, not an email.

A session identifier in a cookie, so you stay signed in. It is random and means nothing on its own.

Your child's progress never reaches us

Stars, badges, which letters have been seen, which stories have been read, the daily plan — all of it is kept in your browser's own storage on your device.

It is never sent to our servers. Clearing your browser data clears it. Using a different device starts it afresh.

Payments

Payments are handled by our payment provider. We never see or store your UPI PIN, bank credentials or card details.

What we keep is the record of the mandate: its identifier, its state, the amounts, and the dates. That is what tells us whether your subscription is active.

What we do not do

No advertising. No advertising identifiers, no behavioural profiling, and nothing sold or rented to anyone.

No third-party analytics or tracking scripts. The pictures, sounds and fonts are served from our own servers, so browsing the app does not announce your child to anyone else.

Children's data

The design above is deliberate. Under India's Digital Personal Data Protection Act 2023, processing a child's personal data requires verifiable parental consent, and tracking or behavioural advertising directed at children is not permitted. The equivalent rules in the United States sit in COPPA.

By keeping the account with the parent, storing only a first name, and keeping the child's activity on your own device, there is very little about a child for anyone to misuse.

How long we keep it, and how to get rid of it

We keep your account details while your account exists. Payment records are kept longer where tax and accounting law requires it.

To have your account deleted, email niofxclub@gmail.com from the address on the account. Deleting it removes your details and your child's first name. Your child's progress is on your device, so clearing your browser data removes that.

Contact

Anything about your data: niofxclub@gmail.com.