Privacy policy
The short version. We collect the least we can get away with: a parent's email to hold the account, and for each child a first name, an age band and an avatar. We do not sell anything to anyone, we do not run advertising, and we do not use third-party analytics or tracking. You can have the whole lot deleted by asking us.
1. Who we are
TaniLearn is a learning service for children aged 5–14, operated by JotaMinds Private Limited, a company incorporated in India — CIN U62011KL2026PTC106045, registered office X/188, Library Road, Aluva – 683101, Kerala, India.
For anything in this policy, write to support@tanilearn.com or use the support form.
2. Accounts are held by a parent, not a child
A TaniLearn account belongs to a parent or guardian, who must be 18 or over. Children do not register, do not have their own login, and cannot buy anything. Each child is a profile inside the parent's account, created by the parent.
By adding a child profile you confirm you are that child's parent or legal guardian and that you consent to us processing their information as described here. You can withdraw that consent at any time by deleting the profile or the account.
3. What we collect
From the parent
- Email address — identifies the account, and is where password resets, receipts and renewal reminders go.
- Password — stored only as a salted hash. We never see or store the plain text.
- Google sign-in identifier, if you choose to sign in with Google instead of a password. We receive your email address and a stable account identifier from Google. We do not receive your Google password.
- Anything you type into the support form — your name, email and message.
For each child profile
- First name or nickname — shown in the game and printed on certificates. It does not have to be their real name.
- Age band (5–6, 7–8, 9–10, 11–12, 13–14) — decides which material they see. We do not ask for a date of birth.
- Avatar — an emoji chosen from a fixed list.
- Learning and play data — levels reached, stars, badges, streaks, which questions were answered right or wrong, time spent, and IQ test results.
Automatically
- A session cookie, so you stay signed in. It is strictly necessary for the service to work, and it is the only cookie we set — no advertising or analytics cookies. That is why you see no cookie banner on TaniLearn: there is nothing optional to consent to.
- Anonymous visit counting — each page reports its own address back to us, plus a yes/no for whether it is your first page today. To answer that yes/no, your browser keeps one date in its local storage — storage on your device, like a cookie — and that date never leaves your device. No identifier of any kind is sent or stored, so we can count visitors without knowing who anyone is. We do not use third-party analytics.
- Server logs — IP address, timestamp and the page or endpoint requested. Used to keep the service up, to enforce rate limits, and to investigate abuse.
We do not collect photographs, voice, video, precise location, contacts, or any biometric information. There is no free-text chat between children anywhere in the product.
4. Why we process it, and on what basis
India's Digital Personal Data Protection Act, 2023 is the law that primarily governs us. It allows processing on two bases: consent, and a short list of “certain legitimate uses” set out in the Act itself. Here is which is which:
- To provide the service — running lessons and quizzes, saving progress, issuing certificates, and the security work that keeps the service usable: rate limiting, fraud and abuse prevention. Basis: consent — yours for your own information, given when you create the account, and the consent you give as the parent for each child when you create their profile (section 2).
- To take payment — processing a plan or credit purchase. Basis: consent, given when you choose to buy.
- To keep payment records afterwards — basis: legitimate use under the Act, namely compliance with the tax and company law that obliges us to keep books of account (section 9 says for how long).
- To email you about your own account — password resets, receipts, renewal reminders. Basis: consent. These are service messages, not marketing; we do not send marketing email to parents who have not asked for it.
You can withdraw consent at any time, and doing so is as easy as giving it was: delete a child's profile from the account page to withdraw the consent for that child, or close the account to withdraw it all (section 10).
If you are in the EEA or the UK, the GDPR applies to you, and the same processing maps to its bases as follows: providing the service and taking payment — performance of a contract (Art. 6(1)(b)); keeping payment records — legal obligation (Art. 6(1)(c)); security and abuse prevention — our legitimate interest in a service that is not abused (Art. 6(1)(f)); a child's profile data — the consent you give as the holder of parental responsibility (Art. 6(1)(a), read with Art. 8).
5. Who else sees it
We do not sell personal information, and we do not share it for anyone else's marketing. It reaches other companies only where they do a specific job for us:
- Payment gateways (Razorpay, PayPal, PayU) — they take the payment. Card, UPI and bank details are entered on their systems and are never sent to or stored by TaniLearn. We keep only what a receipt needs: amount, currency, date, plan and their reference number.
- Our hosting and email providers — they store the database and deliver account email on our behalf.
- Google Sign-In — only if you choose to use it.
- Browser speech services (Google or Microsoft) — only if you switch Answer by voice on. Chrome and Edge turn a spoken answer into text using the browser maker's own speech service, so the audio reaches Google or Microsoft under their privacy policy; TaniLearn receives only the text. Section 7 explains this in full; leave the feature off and no audio ever leaves the device.
Fonts and every other page asset are served from our own servers — no font or content-delivery company learns that you visited.
We may also disclose information if the law genuinely requires it, or to establish or defend a legal claim.
6. The Family Cup and playing with friends
The Family Cup leaderboard is opt-in and covers only your own children and people you have specifically invited. There is no global or public leaderboard, and a child is never shown to strangers.
When two children play a live quiz battle or a challenge link, each sees the other's profile name, avatar and score for that game. Choose a nickname rather than a full name if you would rather that not be shared.
7. Reading aloud and answering by voice
Both voice features are off unless you turn them on, in Settings inside the game, and both are handled by the browser itself — there is no TaniLearn microphone service.
- Reading aloud — the question and choices are spoken by the voice built into the device. Nothing leaves the device for this.
- Answering by voice — the browser asks your permission for the microphone, listens while a question is on screen, and hands us back text. In Chrome and Edge that browser turns the audio into text using the browser maker's own speech service, which means the audio reaches Google or Microsoft under their privacy policy, exactly as it would for any other site or app using voice input on that browser. Some browsers do it on the device instead. Either way TaniLearn never receives, records or stores the audio: we see only the recognised words, we use them to read off the answer (“A”, “next”, “skip”), and we do not keep them afterwards.
If you would rather no audio left the device at all, leave Answer by voice off; every question can always be answered by tapping, and reading aloud works independently.
8. Adaptive difficulty and the IQ score
Two features look at a child's answers to decide what to show next, and it is fair to call that a form of profiling — so here is exactly what it does and does not do:
- Smart difficulty nudges questions slightly harder after two right answers in a row and slightly easier after two misses, within the round being played. It can be switched off in Settings, and turning it off keeps every question at the level opened.
- The IQ test produces an age-normed estimate from the answers given in that sitting, shown only to you. The terms (section 7) explain why it is an estimate, not an assessment.
Neither goes further than that. No profile is used to advertise to anyone, nothing is shared or sold, and no automated decision is made about a child that carries legal or similarly significant effect — the scores decide which practice question appears next, and nothing else.
9. How long we keep it
An account is inactive when 12 consecutive months have passed with no sign-in and no active paid plan — so a paid term never expires mid-plan, and the clock restarts every time you sign in. Nothing is kept indefinitely: every category below has a stated end.
| What | Why we keep it | How long |
|---|---|---|
| Account and child profiles, including learning data | To run the service | While the account is open, then deleted or anonymised 12 months after it goes inactive as defined above — or straight away if you ask (section 10) |
| Payment records | Tax and company law require it — the Companies Act, 2013 (s.128) and GST law oblige us to keep books of account | 8 years from the end of the financial year of the payment. This is the one category we cannot delete on request |
| Server logs | Uptime, rate limiting, abuse investigation | 90 days from the request |
| Support messages | To handle follow-ups on the same problem | 24 months from the last message in the conversation |
| Consent records | The law requires us to be able to show that a parent consented while we were processing a child's data | As long as the account data, plus the period in which a legal claim could still be brought |
10. Your rights
You can ask us to:
- show you a copy of what we hold about you and your children;
- correct anything that is wrong;
- delete a child's profile, or the whole account, along with its learning data;
- withdraw the consent you gave for a child's profile — withdrawing is as easy as giving it was, and section 4 says how;
- send you your data in a portable form;
- record a nominee — another adult entitled to exercise these rights for you if you die or become incapacitated.
Write to support@tanilearn.com. We will respond within 30 days. We may ask you to confirm you control the account email before we act, because otherwise anyone could ask us to delete your child's work.
When a child on your account turns 18 they become entitled to exercise these rights over their own data themselves. If they write to us, we will verify with you that they are the person behind the profile and then act on their instructions.
11. Security
The site is served over HTTPS only. Passwords are salted and hashed. Session cookies are HTTP-only, so page scripts cannot read them. IQ test answer keys never leave our servers. Sign-in attempts are rate limited. Access to the production database is restricted to the operator.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information we will tell you and the relevant authority as the law requires.
12. Where your data is held
Our servers are in the European Union. Some of the providers in section 5 process data outside EU; where that happens we rely on their contractual data-protection commitments.
13. Grievance contact
If you are unhappy with how we have handled your information, contact:
Dr. P N Joshi, Grievance Officer
JotaMinds Private Limited
X/188, Library Road, Aluva – 683101, Kerala, India
info@tanilearn.com
We acknowledge complaints within 48 hours and aim to resolve them within 30 days — all our response times are collected in one place on the support page. If you remain dissatisfied after our grievance process, you may complain to the Data Protection Board of India.
14. Changes
If we change this policy in a way that materially affects you, we will email the address on your account before it takes effect. Each version carries a number and date at the top; earlier versions are available from support on request.