Privacy Policy

Pre-launch draft · Last updated August 2026

1. Who we are

Aavran Kidz is a children's experiential-learning brand for ages 2–12, being established as Aavran Kidz Experiential Learning Private Limited (incorporation in progress), with a registered office planned in Bengaluru, Karnataka, India. Until incorporation completes, the founding team is the data controller in practice. Questions: aavrankidz@gmail.com.

2. What we collect today

This website has no accounts, no login and no analytics profiling. Concretely:

The founding-family waitlist. If you choose to join, the form asks for:

• Required: your first name, your email address, confirmation that you are 18+ and a parent or guardian, and your consent to be contacted about the founding-family beta.
• Optional: your child's age band (2–3 / 4–6 / 7–9 / 10–12) and your city — so we can tell you when an Adventure suits your child's age, and where we might run a workshop. Leave them blank and the form still works.
• Separately optional: general Aavran updates. This is its own tick-box; joining the waitlist does not sign you up for a newsletter, and you can want one without the other.

We never ask for anything about your child beyond an age band. Not their name, not their school, not a photograph, not a date of birth, not an address, not a phone number, and nothing about their health or development. We do not need it to invite you to a beta, so we do not collect it.

Standard server logs are held by our hosting provider, Vercel, for security and to keep the site running.

2a. Who processes your waitlist details

The waitlist form is provided by Tally (Tally Global BV), embedded in this page. Two different things happen, and they are worth separating:

• What you submit. Your name, email and any optional answers go from your browser directly to Tally. Aavran Kidz does not receive or store the information submitted through the embedded form — we read the responses in Tally's own dashboard.
• Technical connection data. Because the form is loaded from Tally, your browser necessarily connects to them, and that connection can expose ordinary technical request information such as your IP address and browser details. We are telling you this rather than claiming that nothing at all reaches a third party, which would not be true of any embedded form.

• Tally states that submissions are encrypted in transit and at rest, and stored on servers in Europe. They publish a Data Processing Agreement.
• We have deliberately not connected the form to a spreadsheet, an email marketing tool, an automation service or a CRM. Every extra service would be another copy of your data; there is one, and that is on purpose.
• Being straight with you: Tally storing data in Europe does not by itself settle how this sits under India's DPDP Act. That question — the processor position and cross-border transfer — is with our legal counsel, and we will state the outcome here rather than quietly assume it is fine.

3. Photos in the Wonder Journal (planned)

The app in development includes a Wonder Journal: after an off-screen activity, a child may photograph what they made or noticed and keep it. Because photographs of children are the most sensitive data a service like ours can hold, it is built to these rules:

• The photo stays on your device. It is saved inside the app on your own phone or tablet, is not uploaded to us, and does not sync anywhere automatically.
• No location is attached. Camera location data (EXIF/GPS) is switched off for every Journal photo, so a picture never reveals where a child lives.
• Nobody else can see it. The Journal is private to the device it was made on. There is no family circle to join, no sharing surface, no public gallery, no discovery feed, and no way for anyone — including a relative — to send a message to a child through Aavran. The family conversation an Adventure invites happens between people, not through us.
• Delete means delete. Removing a page deletes the image file from the device; a parent can erase the whole Journal at once from Parent Settings.
• Nothing about a child is scored. The Journal and an Adventure memory recognise the experience itself. Children are never ranked, and never rewarded for speed, duration or how good the work looks.

If we ever introduce optional cloud backup or sharing beyond the device, we will ask for parental consent explicitly first, describe it here before it launches, and it will remain optional.

4. What we will collect when the app exists

When the app launches, accounts will belong to a parent or guardian. A child profile will hold only a first name or nickname, an age band, and a chosen avatar — plus which Adventures were completed, so a family can pick up where they left off. We are designing for the least data that makes the experience work.

5. Children's data and parental consent

Aavran is used by children but bought and controlled by adults. Accounts may only be created by a parent or guardian aged 18+, and verifiable parental consent will be obtained at signup. We are building to the children's provisions of India's Digital Personal Data Protection Act 2023, and to the parental-consent expectations that international frameworks such as COPPA set for services children use. Those obligations are being confirmed with counsel before launch, and we will state plainly on this page which have been formally assessed.

We commit, in all cases, to the following:

• No advertising or marketing directed at children, on any plan.
• No behavioural profiling of children, and no selling or renting of personal data.
• No third-party trackers in areas a child uses.
• No public profiles, chat, comments or user-generated content — children cannot be contacted by strangers through Aavran.

6. Cookies and what your browser contacts

This site uses no advertising or cross-site tracking cookies, and no analytics profiling. Our fonts are served from our own domain rather than from Google Fonts, so reading a page here does not disclose your IP address to a font provider.

One exception is worth stating plainly. When the founding-family waitlist form is live, it is embedded from Tally — so on the page where that form appears, your browser contacts Tally as soon as the page loads, before you type or submit anything. That is true of any embedded form, and it is the same technical connection data described in §2a. Everywhere else on this site, your browser contacts only us.

7. Your rights

You can ask us what we hold about your family, ask for it to be corrected, or ask us to delete it — including withdrawing consent. Email aavrankidz@gmail.com and we will action deletion requests within 30 days. Because we hold so little today, a deletion request is usually as simple as removing one email address.

8. Security and retention

Data is kept with reputable providers, encrypted in transit, and reachable only by the few people who need it. We keep waitlist details only while the waitlist is live and the beta is being organised. We delete them if you ask, if you withdraw consent, or if we abandon the project. Ask and we will remove your entry from Tally within 30 days and confirm when it is done.

9. Changes

When this policy changes in a way that matters, we will say so directly to the people affected rather than quietly editing this page. The counsel-reviewed version will replace this draft and be dated accordingly.

10. Contact

Privacy and child-safety matters: aavrankidz@gmail.com
Anything else: aavrankidz@gmail.com