bodhi.kids — Privacy Policy
Last updated: 1 July 2026
Who we are
bodhi.kids is a daily seven-minute social-emotional learning practice for children in classes 3–8 in India, built by Bodhi Studios Private Limited (registered office: Property No. 44, Regal Building, Connaught Place, New Delhi 110001). This policy explains what we collect, why, who can see it, and what rights you have over it — in plain language, not the usual density.
What we collect
From a parent: phone number, name, email (if provided), payment information (handled by Razorpay — we never see or store card details ourselves).
About a child: first name, grade, school affiliation (if linked via a school code), and their practice activity — which days they practiced, which feeling-words came up, and what they wrote during the Practice phase.
Automatically: basic technical data needed to run the service securely (login timestamps, device type for support purposes). We do not use third-party trackers, advertising pixels, or cross-site tracking cookies anywhere in this product — see "Cookies & Analytics" below for the precise, narrow exception.
Why we collect it
Solely to operate the practice: to run the four daily phases, generate the weekly signals your child's teacher and you receive, process your subscription payment, and keep the account secure. We do not use your data, or your child's, for advertising — ours or anyone else's.
How AI is involved, precisely
A bounded AI system is used only in the Practice phase, to reflect a single feeling-word back to your child — it never scores, evaluates, or grades what they write. Every input and output passes through a safety check before your child ever sees a reply. If something a child writes suggests they may need support, a real person — a trained reviewer, and you, their parent — is notified, typically within the hour. We never train any AI model on your child's writing, and we never will.
Who can actually see what
This is the part most privacy policies bury — we're putting it up front instead.
- You (the parent) can read your own child's actual practice writing, directly. No one else in your family's chain gets this by default.
- A teacher, if your child's account is linked to a school, sees only whether your child practiced this week and roughly how often — never the content of what they wrote.
- A school principal sees only school-wide and class-wide participation patterns — never anything tied to an individual child by name.
- A trained reviewer (counsellor) sees the specific content of a flagged item only if our safety system detects something that may need a caring adult's attention — never browses freely, and only for that flagged instance.
- We, the company, do not browse your child's writing as a matter of course. Founder/staff access to any individual child's content is limited to the same flagged-item basis as a reviewer — not general database access.
Children's data and parental consent
Because this service is used by children, and because you — the parent — create and control the account, all consent under this policy is given by you on your child's behalf, in line with the Digital Personal Data Protection Act, 2023. You can review or withdraw this consent at any time from your account settings.
Where your data lives
All data is stored in India, in Supabase infrastructure hosted in the Mumbai (bom1) region. We do not store your data outside India.
Who else touches your data (our processors)
We work with a small number of service providers, each with a narrow, specific job:
- Razorpay — payment processing. They see your payment details; we don't.
- Firebase (Google) — phone number verification only, at signup and login.
- Resend — sending transactional emails (receipts, confirmations). Never marketing email unless you've opted in.
- Vercel — hosting the application itself.
None of these providers are permitted to use your data for their own purposes. We do not sell, rent, or share your data with advertisers, data brokers, or any other third party, ever.
Cookies and analytics
We use first-party, cookieless analytics (Vercel Analytics) on our own pages to understand basic usage patterns and improve the product — never on a child's own practice screens, and never shared with anyone outside our team. No third-party trackers, no advertising pixels, no cross-site tracking, anywhere in this product.
We collect limited, aggregate usage information about how parents and schools navigate bodhi.kids — which pages are visited and where people find or lose their way — so we can make the experience calmer and clearer. We never track or analyse a child's practice, writing, or activity; the child's experience is never instrumented.
How long we keep your data
While your account is active, we keep your child's practice data to run the service. You can ask us to delete your account and its data at any time, from Account Settings. When you make that request, a short cooling window (currently seven days) lets you undo it before it takes effect — you can cancel the request yourself during that window.
Some records we keep longer, because the law or a child's safety requires it: your consent records (our proof of the lawful basis for processing your data), our financial and tax records (such as invoices), and any child-safety records. These are retained for as long as required by applicable law and for legitimate safeguarding purposes.
Your rights
You can, at any time: access the data we hold about your child, correct anything inaccurate, withdraw consent, request deletion of your account and associated data, and request a copy of your data in a portable format. Contact us using the details below to exercise any of these.
Grievance redressal
Grievance Officer: Siddharth Raizada · info@bodhi.kids · +91 9958803296
Changes to this policy
If we materially change this policy, we'll notify you and record which version you consented to — every consent we collect is tied to a specific policy version number, not just a generic "I agree."