Safety & privacy notice
Version 2026-10 · Applies to hridaa.org
In short
- Only a parent or lawful guardian can create an account and give consent. Children never sign up.
- We keep the minimum: a nickname, an avatar, an age band and a language. No real names, photos, school, birthday, voice or location.
- No ads, no ad trackers, no selling or sharing data for marketing, and no tracking or profiling of children's behaviour.
- Everything your child makes is private to your family. There is no public gallery and no chat.
- You can download or delete everything at any time from the parent space.
What we collect and why
| What | Details | Why |
|---|---|---|
| Parent account | Email and login, managed by our hosting provider | To run your account and send essential messages |
| Child profile | Nickname, avatar, age band (6–8 or 9–12), language, your time-reminder and approval settings | To show age-appropriate activities in the right language |
| Creations | Stories, characters, drawings and pictures your child makes | To keep them in your private family library |
| Story Gallery (only if you choose) | A copy of a story you approve, shown with your child's nickname and age group; stars, reaction cards and parent comments on it. Comments are checked before they show. Members only, not visible to search engines | To let children share stories with other signed-in Hridaa families. You can unpublish at any time and the copy and its reviews are deleted |
| Usage counts | How many stories and pictures your family made this month (numbers only) | To apply monthly limits and control costs |
| Consent record | Which notice you accepted, which choices you ticked, and when | To show we have your consent, as the law requires |
| Safety log | When the safety check blocks something: the feature and the card choices only, never names or text | To improve child safety |
How AI is used
Children choose from picture cards instead of typing open questions. Our server turns those choices into a story or picture using AI services provided through our platform provider. We send only the card choices and the character's name, never your email or your child's profile. Every story is checked by a second safety step before your child sees it, and you can choose to approve each story yourself. When a child writes their own book, AI never writes it for them: it only asks questions and draws the pictures. Science experiments and building projects in the Lab preview are written by people, not AI. Read-aloud uses your device's own voice, and Read with Owl listens on the device itself where the device supports it. Today our AI runs through our platform provider (Base44); if we ever move to another AI provider, such as Google Gemini or OpenAI, we will tell you first and use it only under a paid data agreement that forbids training on, or keeping, your child's content.
Your rights
Under India's Digital Personal Data Protection Act, 2023 and its Rules, you can ask what we hold, correct it, delete it, withdraw consent, and raise a grievance. Most of this is one click in the parent space. For anything else, write to our grievance officer at Founder@hridaa.org. We aim to reply within 15 days. If you are not satisfied, you can approach the Data Protection Board of India.
Keeping data safe
Data is encrypted in transit, each family can only see its own records, children's drawings are stored privately, and we keep basic security logs for one year as the Rules require. If a breach ever affects your data, we will tell you and the Data Protection Board as the law requires.
Beta note
Hridaa is in beta. Today, parents confirm they are adults by declaration. A stronger adult-verification step will be added before the children's provisions of the DPDP Rules apply in May 2027. Lessons made with AI are checked automatically and are being reviewed by teachers.