1. Who we are
KidzCloud is operated by KidzCloud Edutech Private Limited (“KidzCloud”, “we”, “us”), a company based in Bengaluru, Karnataka, India. We are the Data Fiduciary for personal data processed through the KidzCloud mobile app, the website at kidzcloud.in and related services (together, the “Services”).
This policy explains what personal data we collect, why we collect it, who we share it with and the rights you have. It is written to comply with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and its Rules, the Information Technology Act, 2000 and the rules made under it.
2. Children and parental consent
KidzCloud is built for learners aged 5–18. Under the DPDP Act, anyone under 18 is a child, so we treat every learner account as a child’s account.
- We process a child’s personal data only with the verifiable consent of a parent or lawful guardian. A parent or guardian links their own account to the child’s account and gives consent before the child can use features that need personal data.
- We do not track children’s behaviour for advertising, do not show advertising to children, and do not build profiles of children for targeted advertising.
- We do not knowingly process data in a way that is likely to harm a child’s wellbeing.
- A parent or guardian can review the child’s data, withdraw consent or ask us to delete the child’s account at any time (see Your rights).
If you believe a child is using KidzCloud without a parent’s consent, please contact us at support@kidzcloud.in and we will act promptly.
3. Personal data we collect
Information you give us
- Account details: full name, username, email address, mobile number, date of birth, gender and your role (student, parent or tutor).
- Profile details (optional): profile photo, short bio, city and interests.
- Verification details: one-time passwords sent to your mobile number or email and, where you choose identity verification for an adult account, your Aadhaar number and the verification result returned by a licensed KYC provider. We do not store Aadhaar biometric data.
- Parent–child link: the connection between a parent or guardian account and a child account, and the consent records that go with it.
- Tutor details: qualifications, experience, subjects, languages, certifications, introductory video, portfolio, residential address, PAN, and bank account details and documents needed to pay tutors.
- Content you create: posts, comments, quiz answers, assignments, talent showcases, messages in live sessions and anything else you upload.
- Support and reports: what you tell us when you contact support, report a concern or raise a grievance.
Information created when you use the Services
- Learning activity: courses joined, progress, quiz and competition results, badges, certificates and attendance in live sessions.
- Transactions: purchases, subscriptions, coupons used, refunds and, for tutors, wallet balances and withdrawals. Card, UPI and net-banking details are entered on our payment gateway’s secure pages and are not stored by KidzCloud.
- Device and technical data: device model, operating system, app version, push-notification token, IP address, and error and crash logs used to keep the app secure and working.
- Notification preferences: your choices for in-app, email, SMS and push notifications.
Information from others
- If you sign in with Google, we receive your name, email address and Google account identifier.
- A parent may provide information about their child when setting up or linking an account.
4. How we use personal data
We use personal data only for the purposes below, and only what is needed for each purpose:
| Purpose | Legal basis |
|---|---|
| Create and run your account, sign you in and verify your identity | Consent (parental consent for children) |
| Deliver courses, live sessions, quizzes, competitions, rewards and certificates | Consent |
| Let parents follow and guide their child’s participation | Consent |
| Process payments, refunds and tutor payouts | Consent; legal obligations (tax and accounting) |
| Keep children safe: moderation, reporting, verification and preventing misuse | Consent; legitimate uses permitted by law |
| Send service notifications you have opted into | Consent |
| Respond to support requests and grievances | Consent; legal obligations |
| Fix errors, secure and improve the Services | Consent |
| Comply with law, court orders and lawful requests from authorities | Legal obligations |
We do not sell personal data, and we do not use children’s data for advertising.
6. How long we keep data
- Account and profile data: while your account is active.
- After you delete your account or withdraw consent: we delete or anonymise your personal data within 30 days, unless we must keep it longer by law.
- Payment and invoice records: for the period required by Indian tax and accounting laws (generally 8 years).
- Records of safety reports and enforcement actions: as long as needed to protect children and meet legal obligations.
- Security and error logs: for a limited period, normally not more than 1 year.
See our Account Deletion page for how to delete an account.
7. How we protect data
We use reasonable security safeguards appropriate to the sensitivity of the data, including encryption in transit (HTTPS), access controls limited to staff who need access, one-time-password verification, rate limiting, monitoring and regular backups. No system is perfectly secure; if a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law.
8. Your rights
Under the DPDP Act you (or, for a child, the parent or guardian) have the right to:
- Access a summary of the personal data we hold about you and how we use it, and the identities of those we have shared it with.
- Correct, complete or update inaccurate or incomplete data.
- Erase your data when it is no longer needed or when you withdraw consent.
- Withdraw consent at any time, as easily as you gave it. Withdrawing consent does not affect processing done before withdrawal, and some features may stop working.
- Nominate another person to exercise your rights in the event of your death or incapacity.
- Grievance redressal: raise a complaint with us and, if you are not satisfied, with the Data Protection Board of India.
To exercise any of these rights, email support@kidzcloud.in from your registered email address, or contact our Grievance Officer. We may need to verify your identity before acting on your request. We respond within the time limits set by law.
10. Grievance Officer
The Grievance Officer, KidzCloud Edutech Private Limited, 13/A, 5th Sector, HSR Layout, Bangalore South, Karnataka, 560102, India. Email: support@kidzcloud.in. Phone: +91 81232 54305.
We acknowledge complaints within 24 hours and aim to resolve them within 15 days. See our Grievance Redressal Policy.
11. Changes to this policy
We may update this policy from time to time. We will post the updated version here with a new “Last updated” date and, for significant changes, notify you in the app or by email before they take effect. Where a change needs fresh consent, we will ask for it.