Privacy policy

What we hold, why we hold it, and how to make us delete it.

Last updated 24 September 2026

This describes what the software actually stores, not what a policy template says a service like this might store. Where you see a list below, that list is the whole list.

The data fiduciary is Online Kids PC, operated by Gagan (Founder) and Vansh (Co-founder), contactable at hello@kidspc.online.

What we collect

About you, the parent

Your email address, and a cryptographic hash of your password — never the password.
The name you choose to be called by.
Your timezone, so that "an hour a day" means a day where you live.
When you created the account and when you last signed in.

About each child

A first name, or whatever name you choose to type.
Birth month and year only — not a date of birth. It is used to decide which activities suit them and to unlock the next set on a birthday.
The avatar you picked, and a hash of their four-digit code.

About their use of the service

Minutes used per day, so the limits you set can be enforced.
When sessions started and ended, on what kind of device, and which activity they opened.
Personal bests — a number per activity per measure, such as words per minute or puzzles solved.

If you ask to subscribe, or write to us

Your email address, optionally a name, which plan and how many children, the price we quoted, and a referral code if you arrived on one.
Messages you send through the contact form, so that we can reply.

What we never collect

Anything your child makes. Drawings, stories and code stay on the device. They are never uploaded and we cannot see them.
No advertising, ever. There is no advertising in this product and no setting that could switch one on.
No behavioural profile of a child. Nothing here watches a child to work out what to suggest to them — the weekly challenge is the same for every household in the country, chosen by the calendar. Section 9 of the Digital Personal Data Protection Act 2023 prohibits tracking, behavioural monitoring and targeted advertising directed at children, and this service is built so that none of it is possible rather than merely switched off.
No third-party analytics or trackers. There is no analytics script, no advertising pixel, and no social media embed on any page. Nothing on this site loads code from a company that would learn you had visited.
No payment card details. We have never held any and cannot.

Why we are allowed to hold it

For your own account: because you asked us to provide the service, and consented when you created it. For a child's data: only with the verifiable consent of their parent or guardian, which is why a child profile cannot be used before that consent is verified. You may withdraw consent at any time, which means deleting the account.

Who else sees it

Nobody buys it, and nobody is given it. The only third parties involved at all are the ones needed to run the service: the company hosting our servers, and our email provider, who handles the messages we send you. Neither is given data for any purpose of their own. We will disclose data if a law or a court in India requires it, and where we are permitted to tell you that we have, we will.

Cookies and what is stored in your browser

One cookie, used to keep you signed in. It is not used to follow you anywhere and there is no advertising or analytics cookie on this site.
Some things are kept in your browser's own storage and never sent to us: scores from the free preview, a referral code if you arrived on a link, and any name typed onto a "show a grown-up" card. Clearing your browser data removes all of it.

How long we keep it

Only while it still does something for you. A job on our server deletes everything below on schedule, without anyone having to remember to.

Your account, and each child's profile, scores and limits — while the account exists. Deleting it removes all of it at once.
A sign-up nobody confirmed — deleted after 24 hours. Somebody may have typed an address that is not theirs, so we do not keep it waiting.
The emails we send you — we keep no copy of what a letter said once it has been delivered. A note that we sent it (to whom, and when) is kept for 30 days in case it bounces, then deleted.
Sign-in codes and links — they stop working after 30 minutes, and are deleted within 24 hours of being used or expiring.
Individual sessions (when one started and ended) — 90 days. Minutes used per day — 400 days, so a year of history is there when you look.
A log of changes to your household's settings — 400 days, which the Digital Personal Data Protection Rules 2025 ask for.
Plan requests — deleted with your account, unless you actually paid: an invoice is a record the tax law requires us to keep, for as long as it requires and no longer.

Your rights, and how to use them without asking us

Get a copy. The parent dashboard has a button that downloads everything we hold about your household, immediately, as a file.
Delete it. The same screen has a button that deletes the account and everything in it. No email, no waiting, no retention period.
Correct it. Names, birth months, limits and permissions are all editable on that screen.
Complain. Write to Gagandeep Goyal, Grievance Officer, at hello@kidspc.online. If you are not satisfied with the response you may complain to the Data Protection Board of India.

Security

Passwords and children's codes are stored as hashes and never in a form we could read back. Consent is recorded as a digest of the proof rather than the proof itself. Traffic is encrypted in transit. We keep the amount of data small on purpose, because the safest record is the one that was never collected.

Changes

If we change what we collect or why, we will email every account holder before the change takes effect. The date at the top of this page tells you when the wording last moved.

Anything here that is unclear is our fault, not yours. Write to hello@kidspc.online or use the contact page, and a person will answer.