Privacy Policy

This policy explains what personal data Joyful Genius, operated by Kedar Manoj Shelar, collects, why we collect it and the choices you have. We collect as little as we can. We show no ads and use no advertising trackers.

1. What we collect

• Parent's mobile number, to sign you in with a one-time password (OTP).
• The child's first name and class, shown on the child's screens and report cards. We do not ask for a surname, school, date of birth, photo or home address.
• Test activity: the answers chosen, time taken, scores, and any question the child reports as wrong.
• Consent record: when the parent confirmed that they are the child's parent or legal guardian.
• Payment records: order number, pack, amount, status and the payment reference from Razorpay. We never receive your UPI PIN, card or bank details.
• Sign-in SMS records: for each one-time password we send, the mobile number, the time, the IP address that asked for it and a scrambled form of the password (never the password itself), used to check the password and to stop misuse. We delete them within two days.
• Technical data: a sign-in session cookie and standard server logs (IP address, browser type, time of request), used for security and to fix problems.

2. How we use it

To sign you in, run tests, show report cards and progress, activate packs and process refunds, answer your support requests, prevent fraud and misuse, and keep the records that tax and accounting laws require.

3. What we never do

We show no ads, use no third-party analytics or advertising trackers, do not sell or rent personal data, and do not profile children or target them with advertising.

4. Where data is kept and who processes it

Our application servers and database are in India (Mumbai). A few service providers also handle some data to run the Service. Each one processes it under its own terms and privacy policy, and only for the purpose below:

• MSG91 (Walkover Web Solutions Pvt Ltd) (sign-in SMS): receives the parent's mobile number and the one-time password, to deliver the password by SMS, and keeps its own delivery record of each message.
• Google Firebase (sign-in, only if we switch sign-in to it instead of MSG91): would receive the parent's mobile number to send the one-time password by SMS, and keep it in its sign-in records for the account. Its login page also runs Google reCAPTCHA, which checks that a person, not a bot, is signing in; for this Google receives technical data from your browser, such as the IP address and browser details.
• Razorpay (payments): receives the order amount and whatever you enter in its checkout, such as your UPI app, card or bank details. We receive only the order status and the payment reference.
• Google Fonts (font files): our pages load their fonts from Google's servers, so your browser's IP address is sent to Google when a page loads.
• Sentry (error reports, only if we switch it on): receives technical details when something breaks, such as the page, the browser and the error message, which can include the IP address.
• Our hosting provider, which runs our servers in India (Mumbai).

We may also disclose data when the law requires it.

5. Children's data and parental consent

The Service is used by children, so every account is created by a parent or legal guardian. At sign-up the parent confirms that they are the child's parent or legal guardian and agrees to this policy on the child's behalf. We use the child's data only to provide the practice service, in line with the Digital Personal Data Protection Act, 2023 and its Rules, and we do not track or target children for advertising.

6. Cookies

Our own cookies are essential only: one keeps you signed in and one protects forms against misuse. If we switch sign-in to Google Firebase, its reCAPTCHA may set its own Google cookies on the login page to tell people from bots. There are no advertising, tracking or analytics cookies.

7. How long we keep data

We keep account data while the account is in use. When you ask us to delete an account, within 30 days we delete the mobile number (also from Google Firebase, if you signed in through it), the child's name, every answer given in tests and any note sent with a question report, and we close the account, which also signs it out on every device. What we keep, with no name or mobile number attached: the scores of past tests, and the payment records (order number, pack, amount, status and payment reference), for as long as tax and accounting laws require. Razorpay keeps its own record of each payment, including the number used to pay, under its own terms (see section 4). MSG91 keeps its own record of the sign-in SMS it delivered, including the mobile number, under its own terms. The same mobile number can later open a new account.

8. Your rights: access, correction and deletion

You can ask to see, correct or delete your data, or withdraw consent (which closes the account). Send the request from the registered mobile number by WhatsApp (+919096675560) or by email (kedarshelar1998@gmail.com).

9. Security

All traffic uses HTTPS. Our application servers and database are in India (Mumbai) and only the operator has access to them. Data handled by the service providers listed in section 4 is protected under their own terms.

10. Grievance officer

If you have a concern about your data, contact our Grievance officer, Kedar Manoj Shelar, Founder (kedarshelar1998@gmail.com). If you are not satisfied with our answer, you may approach the Data Protection Board of India.

11. Changes to this policy

If we change this policy we will update the date at the top, and show a notice on this website for significant changes.