Effective date: 14 October 2026 · Version 1.1
Privacy at a glance
We collect very little, we never sell data, and we have designed Pratham Pranam so that we do not need to know who your child is.
- Adults sign in, children do not. Only an adult account holder signs in. Children never type, chat or post.
- Personas are labels, not children. A persona is a name you make up and an age band. We ask you not to use a child's real name, and we never ask for a child's photo, birth date, school or location.
- No ads, no trackers. No advertising, no advertising IDs, no third-party analytics or tracking code in the app.
- Stored in India. Your data is kept on servers in India and delivered through a secure content network.
- Your data, your control. You can see, download or delete your data at any time from the app.
1. Who we are
Pratham Pranam is run by Meet Gupta, an individual based in India ("Pratham Pranam", "we", "us"), 402, Kempstone, Omaxe Hills 2, Faridabad, Haryana 121010, India. We decide how personal data in the Service is used, so we are the Data Fiduciary under Indian law, the controller under EU and UK law, and the operator under US children's privacy law. Contact us at support@prathampranam.com.
This policy covers the Pratham Pranam apps and website prathampranam.com (the "Service"), the adults who use them, and the children who use the apps through an adult's account.
2. Children and this policy
Pratham Pranam is made for children aged 2 to 10, so we built it to work without collecting personal data that identifies a child.
- Personas. The persona name, age band, language and telling depth are settings the account holder chooses. We treat them, and the progress saved under them, as part of the adult's account. If you choose to type a child's real name as a persona name, you can change it at any time, and we protect it in the same way.
- No age or identity checks. Because we do not knowingly collect personal data about an identifiable child, we do not ask parents to prove their identity or age. Our Terms of Service require account holders to be 18 or older, and by signing in you confirm that you are.
- Technical data and US law. Because the app is directed at children, US law (COPPA) treats technical data such as an IP address or app installation ID as a child's personal information. We use such data only for the internal operations of the Service (running it, keeping it secure, fixing faults and understanding how it performs), which COPPA allows without parental consent. We never use it for advertising, profiling or to contact anyone.
- If this changes. If we ever plan a feature that would need a child's personal data, we will update this policy and get verifiable parental consent before launching it.
- If a child signs in. If we learn that a child has created an account, we will delete it and its data.
3. What we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Email address (you sign in with a one-time code sent to it), app language, country | You |
| Personas | The name you choose, age band (2–5, 6–8, 9–10), language, telling depth | You |
| Progress and settings | Stories, mantras and aartis completed, quiz answers, keepsakes earned, journey map position, time used against your daily limit, time limits, bedtime hours, reminder choices, downloads | Created as the app is used, saved to your account |
| Subscription status | Plan, status, start and renewal dates, store transaction ID. Apple or Google handle payment; we never receive card, UPI or bank details. | Apple App Store, Google Play |
| Technical data | IP address, device model, operating system and app version, a random app installation ID, server logs and, once added, crash reports from our own self-hosted tool | Your device, automatically |
| Usage statistics | Which screens and content are opened and for how long, collected by our own self-hosted analytics tool, without your name, email, persona names or any advertising ID | Your device, automatically |
| Support messages | What you write to us and your reply address | You |
| Website | Email addresses given for the waitlist or newsletter; basic visit statistics | You, your browser |
What we never collect
- Children's real names, photos, video, voice, birth dates, schools or locations (the app does not use the camera or microphone)
- Precise location, contacts, or information about other apps on the device
- Advertising IDs (IDFA, Google Advertising ID) or any cross-app tracking data
- Biometric data: if you unlock the parent area with Face ID or a fingerprint, your device checks it and only tells the app "yes" or "no"
- Sensitive data such as health information. Religious stories are the app's subject, but we never ask about your family's religion, caste or community.
4. How we use data and why we are allowed to
| Purpose | Data used | Legal basis (India / EU and UK) |
|---|---|---|
| Sign you in and run your account | Account | Your consent / our contract with you |
| Show content for each persona's age band and language, save progress, award keepsakes, sync across your devices | Personas, progress and settings | Your consent / contract |
| Show you what was learned, enforce time limits and bedtime mode | Progress and settings | Your consent / contract |
| Unlock paid content and check subscription status | Subscription status | Your consent / contract and legal obligations (tax records) |
| Keep the Service secure, prevent abuse, fix faults | Technical data | Legitimate use for security and performance / legitimate interests |
| Understand which content works and improve it, using totals rather than individual profiles | Usage statistics | Your consent / legitimate interests |
| Answer support requests and content reports | Support messages, account | Your consent / contract |
| Send service emails and, only if you opt in, newsletters and festival reminders | Account, website email | Your consent / contract for service emails, consent for marketing |
| Meet legal duties and respond to lawful requests | Any relevant data | Legal obligation |
We do not make decisions about anyone by automated means alone, and we do not build profiles of users.
5. Built for children
On top of collecting less, we design the app so children are protected while they use it:
- no advertising, no in-app prompts to buy, and no prices shown to children;
- no chat, comments, sharing or free-text input on child screens;
- no links out of the app from child screens;
- no third-party analytics, advertising or tracking code anywhere in the app;
- no notifications to children (reminders go only to the account holder, if switched on);
- purchases, settings and sharing sit behind a parent lock;
- high privacy by default: nothing is shared unless the account holder chooses to share it from the parent area.
6. Who we share data with
We share data only with the providers below, who handle it on our behalf under their data processing terms and may not use it for their own purposes.
| Provider | What they do for us | Data involved | Where |
|---|---|---|---|
| DigitalOcean | Hosting our servers, database, backups and self-hosted tools | Everything stored in your account, technical data, usage statistics | India (Bangalore data centre) |
| Cloudflare | Delivering app content quickly and protecting our servers from attacks | IP address and technical request data passing through its network | Worldwide network, nearest location to you |
| Apple and Google | App distribution, in-app purchases and billing, delivering reminders you switch on | Subscription status, a notification token | Their global infrastructure |
| Our email delivery service | Sending sign-in codes and service emails | Email address | Where the provider operates, which may be outside India |
We may also disclose data when required by law or a valid request from a government authority, to protect the safety of a child or anyone else, or to a person or company that takes over the Service, under the same protections as this policy and with notice to you first.
We do not sell or rent personal data, and we do not share it for advertising, including "selling" or "sharing" as defined by California law.
7. International transfers
Your account data is stored in India. Cloudflare's network and Apple's and Google's services may process some data in other countries, such as the USA.
- From India: we transfer data only to countries not restricted by the Government of India under Section 16 of the DPDP Act.
- From the EU, EEA or UK: India does not have an adequacy decision, so we rely on the Standard Contractual Clauses and UK addendum in our providers' data processing terms, plus encryption in transit.
- You can ask for details of these safeguards at support@prathampranam.com.
8. How long we keep data
We keep data only as long as we need it, and never indefinitely. This section is our data retention policy.
| Data | How long we keep it |
|---|---|
| Account, personas, progress and settings | While your account is open. Deleted within 30 days after you delete a persona or your account. |
| Inactive accounts | After 24 months with no sign-in and no active subscription, we email you, then delete the account 30 days later unless you sign in. |
| Subscription and tax records | 8 years, as Indian tax law requires |
| Server logs and crash reports | Up to 30 days, or up to 1 year for logs about a security incident |
| Usage statistics | Up to 24 months, then kept only as totals that cannot identify anyone |
| Support messages | 2 years after the conversation ends |
| Waitlist and newsletter emails | Until you unsubscribe or ask us to delete them |
| Backups | Overwritten within 4 weeks, so deleted data leaves backups by then |
9. How we protect data
Our safeguards are written down and reviewed at least once a year. They include:
- encryption in transit (TLS) for all app and website traffic, and encryption of stored data and backups wherever our hosting provider supports it;
- access to servers and data limited to Meet Gupta and Aman Gupta, with two-factor sign-in on DigitalOcean, Cloudflare and app store accounts;
- firewalls and attack protection through Cloudflare;
- prompt security updates to our servers and app;
- keeping only the data listed in this policy.
No system is perfectly secure. If a personal data breach happens, we will tell affected users and the Data Protection Board of India as the DPDP Rules require, notify EU or UK regulators within 72 hours where GDPR applies, and explain what happened and what you can do.
10. Your rights and choices
Wherever you live, you can see the data we hold, correct it, download it, delete a persona or your whole account, and withdraw consent. Most of this is in the app under Parent area > Settings > Privacy; for anything else, write to support@prathampranam.com. Some laws give extra rights:
| Where you live | Your rights | Our response time |
|---|---|---|
| India (DPDP Act, 2023) | A summary of your data and who it is shared with; correction, completion, updating and erasure; withdrawing consent as easily as you gave it; grievance redressal; nominating someone to act for you if you die or become incapacitated | Within the period set by the DPDP Rules, and no later than 90 days |
| EU, EEA and UK | Access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, withdrawing consent | One month, extendable by two months for complex requests |
| USA | If you believe we hold personal information from a child under 13, a parent can ask us to review it, delete it and stop collecting it. Residents of California and other states with privacy laws can also know, access, correct and delete data. | Within 30 days (45 days for state-law requests) |
| Other countries | The rights your local law gives. We honour access, correction and deletion requests from everyone. | 30 days where possible |
How we handle requests. We confirm a request comes from the account holder, usually by asking you to make it from inside the app or from your sign-in email. We do not charge a fee. If we cannot fully meet a request, for example because we must keep tax records, we will tell you why.
Other choices. Switch off reminders and newsletters in the parent area or with the unsubscribe link. To object to usage statistics, write to support@prathampranam.com. Your device settings also control notifications.
Complaints. Please contact our Grievance Officer first. You can also complain to a regulator: the Data Protection Board of India, your data protection authority in the EU, the Information Commissioner's Office in the UK, or the US Federal Trade Commission.
11. Our website
Our website is for parents. It uses only cookies that are strictly needed for it to work, along with our self-hosted analytics, which do not track you across other sites. If we ever add other cookies, we will ask first where the law requires it. Links to our pages on Instagram, Facebook, Threads and X lead to services with their own privacy policies; the app's child screens never link to them.
12. Notifications
The app never sends notifications to children. The account holder can switch on reminders, such as an upcoming festival, and switch them off at any time in the parent area or device settings.
13. Languages
This policy is available in English and Hindi, and we will add more languages as the app adds them. If versions differ, the English version applies, except where local law requires otherwise.
14. Changes to this policy
We will update this policy when the Service or the law changes, and show the new effective date at the top. For significant changes, we will tell account holders in the app or by email at least 30 days in advance. Before any change that would collect data about children in a new way, we will ask for parental consent first.
15. Contact us
| Role | Contact |
|---|---|
| Privacy questions and requests | support@prathampranam.com |
| Grievance Officer (India) | Aman Gupta, support@prathampranam.com, 402, Kempstone, Omaxe Hills 2, Faridabad, Haryana 121010, India. We acknowledge complaints within 48 hours. |
| Operator | Meet Gupta, trading as Pratham Pranam, 402, Kempstone, Omaxe Hills 2, Faridabad, Haryana 121010, India |