Privacy Policy

This policy explains what personal data Joyful Genius Education, operated by Kalpak Bhoir, collects, why we collect it and the choices you have. We collect as little as we can. We show no ads and use no advertising trackers.

1. What we collect

• Parent's mobile number, to sign you in with a one-time password (OTP).
• The child's first name and class, shown on the child's screens and report cards. We do not ask for a surname, school, date of birth, photo or home address.
• Test activity: the answers chosen, time taken, scores, and any question the child reports as wrong.
• Consent record: when the parent confirmed that they are the child's parent or legal guardian.
• Payment records: order number, pack, amount, status and payment reference, plus the payer's mobile number, email address and UPI ID (or, for a card, the card network, type, issuing bank and last four digits, and the name on the card if Razorpay sends it) as Razorpay sends them to us. We use them to confirm and reconcile payments and to handle refunds. We never receive your UPI PIN, full card number, CVV or bank login details.
• Sign-in SMS records: for each one-time password we send, the mobile number, the time, the IP address that asked for it and a scrambled form of the password (never the password itself), used to check the password and to stop misuse. We delete them within two days.
• Technical data: a sign-in session cookie and standard server logs (IP address, browser type, time of request), used for security and to fix problems.

2. How we use it

To sign you in, run tests, show report cards and progress, activate packs and process refunds, answer your support requests, prevent fraud and misuse, and keep the records that tax and accounting laws require.

3. What we never do

We show no ads, use no third-party analytics or advertising trackers, do not sell or rent personal data, and do not profile children or target them with advertising.

4. Where data is kept and who processes it

Our application servers and database run on AWS Lightsail in India (Mumbai). A few service providers also handle some data to run the Service. Each one processes it under its own terms and privacy policy, and only for the purpose below:

• MSG91 (Walkover Web Solutions Pvt Ltd) (sign-in SMS): receives the parent's mobile number and the one-time password, to deliver the password by SMS, and keeps its own delivery record of each message.
• Razorpay (payments): receives the order amount, the parent's mobile number (filled in for you at checkout) and whatever you enter in its checkout, such as your UPI app, card or bank details. It sends us the payment status and reference with the payer's details listed in section 1, which we keep to confirm and reconcile payments and to handle refunds.
• Google Fonts (font files): our pages load their fonts from Google's servers, so your browser's IP address is sent to Google when a page loads.
• Amazon Web Services (AWS Lightsail) (hosting): runs our application servers and database in India (Mumbai).

We may also disclose data when the law requires it.

5. Children's data and parental consent

The Service is used by children, so every account is created by a parent or legal guardian. At sign-up the parent confirms that they are the child's parent or legal guardian and agrees to this policy on the child's behalf. We use the child's data only to provide the practice service, in line with the Digital Personal Data Protection Act, 2023 and its Rules, and we do not track or target children for advertising.

6. Cookies

Our own cookies are essential only: one keeps you signed in and one protects forms against misuse. There are no advertising, tracking or analytics cookies.

7. How long we keep data

We keep account data while the account is in use. When you ask us to delete an account, within 30 days we delete the mobile number, the child's name, every answer given in tests and any note sent with a question report, and the payer's mobile number, email address, UPI ID and the name on a card from our payment records, and we close the account, which also signs it out on every device. What we keep, with no name or mobile number attached: the scores of past tests, and the payment records (order number, pack, amount, status and payment reference, and for a card its network, type, issuing bank and last four digits), for as long as tax and accounting laws require. Razorpay keeps its own record of each payment, including the number used to pay, under its own terms (see section 4). MSG91 keeps its own record of the sign-in SMS it delivered, including the mobile number, under its own terms. The same mobile number can later open a new account. Server logs are rotated by size: once they reach their size limit, the oldest entries are deleted.

8. Your rights: access, correction and deletion

You can ask to see, correct or delete your data, or withdraw consent (which closes the account). Send the request from the registered mobile number by WhatsApp (+918983355615) or by email (joyfulgenius2020@gmail.com).

9. Security

All traffic uses HTTPS. Our application servers and database are in India (Mumbai) and only the operator has access to them. Data handled by the service providers listed in section 4 is protected under their own terms.

10. Grievance officer

If you have a concern about your data, contact our Grievance officer, Kedar Manoj Shelar, Founder (joyfulgenius2020@gmail.com, +91 8983355615). We acknowledge complaints within 48 hours and resolve them within 4 working days. If you are not satisfied with our answer, you may approach the Data Protection Board of India.

11. Changes to this policy

If we change this policy we will update the date at the top, and show a notice on this website for significant changes.