Privacy Policy

Last updated: 20 August 2026

Vaddi-Pein is a child-facing mentor and a guardian dashboard. This page explains what we collect, why we collect it, and the choices parents and schools have.

We process digital personal data in line with India’s Digital Personal Data Protection Act, 2023 (DPDPA) and the rules notified under it. In DPDPA terms, Vaddi-Pein is a Data Fiduciary. The student, and the parent or guardian acting for a child, is the Data Principal.

Who this covers

Students using Kid Space, parents or guardians who manage a child’s account, and schools or institutions that register students. A school cannot consent in place of a parent.

Information we collect

• Student profile details such as name, student ID, class, date of birth, and optional hobbies.
• Parent or guardian name and mobile number, used to link the student and obtain consent.
• School or institution signatory details when an organization registers students.
• Chat and activity in Kid Space, used to mentor the student and to surface safety flags to the linked guardian.

We collect only what is needed for these purposes (data minimisation) and use it only for the purposes stated here (purpose limitation).

Consent and control (DPDPA)

A parent or guardian must give consent before a student space is fully active. Under DPDPA, consent must be free, specific, informed, unconditional, and unambiguous. Guardians can review, withdraw, or resume access from their dashboard. Withdrawing consent does not affect processing that was already lawfully done before withdrawal. Suspended or deleted student spaces stop appearing in the child and guardian views until they are resumed.

Where DPDPA allows processing without consent (for example, to comply with law or to respond to a safety incident), we limit that use to what the law permits.

Children’s personal data

Vaddi-Pein is designed for children. DPDPA requires verifiable parental or guardian consent before we process a child’s personal data. A school or institution may register a student, but it cannot give that consent on a parent’s behalf.

• We do not track children for targeted advertising or carry out behavioural monitoring for ads.
• We do not use a child’s data in a way that is likely to have a detrimental effect on their well-being.
• Safety screening of chats exists to protect the child and to alert the linked guardian, not for marketing.

How we use information

• To run the child’s mentor experience and remember relevant context.
• To show guardians a calm picture of growth, reading stage, and safety alerts.
• To screen conversations for safety and to notify the linked guardian when needed.
• To operate school or guardian accounts and honour consent, suspend, delete, and resume requests.

Your rights as a Data Principal

Under DPDPA, you (or a parent or guardian acting for a child) may:

• Access a summary of the personal data we hold and the processing activities it is used for.
• Correct inaccurate or incomplete personal data.
• Erase personal data that is no longer needed for the stated purpose, subject to any legal retention duty.
• Withdraw consent at any time from the guardian dashboard, as easily as it was given.
• Nominate another person to exercise these rights in the event of death or incapacity.
• Raise a grievance with us, and if unresolved, with the Data Protection Board of India.

These requests can be made through the Guardian / School account that manages the student space. We will respond within the timelines required under DPDPA.

Sharing

We do not sell student or family data. We only share information with service providers that host or operate the product (as Data Processors acting on our instructions), and with the parent or school already linked to that student. We may disclose information if required by Indian law or to protect a child’s safety.

Storage, security, and transfers

We take reasonable security safeguards to prevent personal data breach, as required by DPDPA. If a breach is likely to affect Data Principals, we will notify them and the Data Protection Board of India as the law requires.

If personal data is processed or stored outside India, we will do so only in line with DPDPA and any government restrictions on cross-border transfer then in force.

Retention

We keep profile and activity data only for as long as it is needed for the purposes above, or as Indian law requires. When a guardian or school deletes a student space, access is revoked and data is erased or anonymised unless a longer legal retention period applies. You can ask for a copy of data or for erasure from the guardian dashboard.

Grievance redressal

Questions, rights requests, or complaints about this policy or our DPDPA practices can be raised through the Guardian / School account that manages the student space. If you are not satisfied with our response, you may approach the Data Protection Board of India.