Privacy Policy

Yestoryd ("we," "our," or "us") is committed to protecting the privacy of children and their families. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered reading coaching platform.

We comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and take special care when handling children's data.

1. Information We Collect

1.1 Parent/Guardian Information

• Full name and contact details (email, phone number)
• Billing address for payment processing
• Communication preferences
• Account credentials

1.2 Child Information

With verifiable parental consent, we collect:

• Child's first name and age
• School name and grade (optional)
• Reading assessment results and progress data
• Audio recordings during reading assessments
• Video/audio recordings of coaching sessions (with consent)
• Learning preferences and areas for improvement

1.3 Automatically Collected Information

• Device information (browser type, operating system)
• Usage data (pages visited, features used)
• IP address and approximate location
• Cookies and similar tracking technologies

2. How We Use Your Information

• Provide Services: Deliver reading assessments, coaching sessions, and personalized learning recommendations
• AI Analysis: Use audio recordings to analyze reading patterns, identify gaps, and generate improvement suggestions
• Progress Tracking: Create reports and dashboards showing your child's reading progress
• Communication: Send session reminders, progress updates, and important notifications via email, SMS, or WhatsApp
• Payment Processing: Process payments securely through Razorpay
• Service Improvement: Analyze aggregated, anonymized data to improve our platform

3. Children's Privacy (Special Protections)

• Parental Consent: We require verifiable parental consent before collecting any child's personal information
• Minimal Collection: We only collect information necessary to provide our educational services
• No Marketing to Children: We do not use children's data for marketing purposes
• No Third-Party Advertising: We do not display third-party advertisements to children
• Parental Access: Parents can review, modify, or delete their child's information at any time
• Secure Storage: All child data is encrypted and stored securely

4. Audio and Video Recordings

4.1 Reading Assessment Recordings

During reading assessments, we record your child's voice to analyze reading fluency, accuracy, and comprehension.

• Processed by our AI system (Google Gemini) to generate assessment reports
• Stored securely and encrypted
• Accessible only to authorized personnel and your assigned coach
• Retained for the duration of your enrollment plus 90 days
• Deleted upon request or account termination

4.2 Coaching Session Recordings

Coaching sessions may be recorded (with your consent) for quality assurance.

• Used to generate session summaries and track progress
• Shared only with your assigned coach and platform administrators
• Never shared with third parties without explicit consent
• Deleted within 90 days after the coaching program ends

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

5.1 Service Providers

• Razorpay: Payment processing
• Google Cloud/Gemini: AI-powered reading analysis
• Supabase: Secure database hosting
• SendGrid: Email delivery
• AiSensy: WhatsApp messaging
• Recall.ai: Session recording and transcription
• Cal.com: Discovery call scheduling
• Google Calendar: Coaching session scheduling

5.2 Legal Requirements

We may disclose information if required by law, court order, or government request.

6. Data Security

• SSL/TLS encryption for all data transmission
• Encrypted database storage
• Role-based access controls
• Regular security audits
• Secure authentication via Supabase Auth

7. Data Retention

• Active accounts: Data retained while your account is active
• Assessment recordings: Retained during enrollment + 90 days
• Session recordings: Deleted within 90 days after program completion
• Payment records: Retained for 7 years (legal requirement)
• Deleted accounts: Personal data erased within 30 days

8. Your Rights (Under DPDP Act)

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Erasure: Request deletion of your data
• Withdraw Consent: Withdraw consent for data processing at any time
• Grievance Redressal: Lodge complaints about data handling

To exercise these rights, contact us at engage@yestoryd.com

9. Contact Us