Your family's privacy

Indria holds some of the most personal information a family has. This policy explains, in plain language, what we collect, why, who can see it, and how you stay in control.

Last updated: [date] · Applies to the Indria mobile app and indria.io

Draft
This policy is a draft and must be reviewed by a qualified lawyer before publishing. Remove this notice once it has been approved.

1. Who we are

Indria ("we", "us") is operated by [Company legal name], [registered address], India. We are the data fiduciary for the personal data described in this policy. You can reach us at support@indria.io.

2. Who this policy is for

Indria is used by parents and legal guardians ("parents"), by family members and caregivers a parent invites, and by therapists, special educators and schools a parent chooses to share with. Children do not create accounts or use the app themselves. A parent sets up and manages every child's profile.

3. What we collect

Information you give us

Your account: name, email address, phone number (if provided), password, and your relationship to each child.
Your child's profile: first name or nickname, date of birth, and any details you choose to add.
Development information: answers to developmental screenings, screening results, activity logs, progress, milestones and journal entries.
Conversations: messages you send to the Indria AI assistant, messages with your child's care team, and your private Wellbeing chat.
Family and care team: the details of people you invite and the access you give them.
Support requests: what you tell us when you contact us.

Information collected automatically

Device and usage information: device type, operating system, app version, crash reports, and how features are used, so we can keep the app working and improve it.
Notification tokens: so we can tell you when your care team replies.

We do not collect your precise location, contacts or photos unless you choose to attach something. We do not use advertising trackers.

4. Why we use it

To run your account and show you your child's screenings, activities and progress.
To suggest screenings and activities suited to your child's age and needs.
To let the AI assistant and Wellbeing chat respond to you.
To share progress and messages with the people you invite, and only them.
To send notifications you've turned on, and important messages about your account.
To keep Indria secure, fix problems and improve the service, using aggregated or de-identified data wherever possible.
To meet our legal obligations.

We never sell personal data, and we never use your or your child's information for advertising.

5. Consent and children's data

Because Indria processes information about children, we ask the parent or legal guardian for verifiable consent before a child's profile is created, as required under India's Digital Personal Data Protection Act, 2023 and its rules. You can withdraw consent at any time by deleting the child's profile or your account. Withdrawing consent stops further processing, but does not affect processing that already happened lawfully.

We do not track children's behaviour or use children's data for targeted advertising.

6. Who can see your information

People you invite. Family members, caregivers, therapists, special educators and schools see only the children and information you give them access to. You can remove access at any time.
Nobody sees your Wellbeing chat except you. It is never shared with family members or your child's care team.
Service providers who help us run Indria, such as cloud hosting, email delivery, crash reporting and AI processing, under contracts that require them to protect the data and use it only to provide their service to us. [List of service providers and where data is processed.]
Authorities, only when the law requires it, or to protect someone's safety.

7. The AI assistant

The Indria assistant and Wellbeing chat use AI to understand and reply to your messages. Your messages are processed by [AI service provider] on our behalf and are not used to train their public models [confirm with provider terms]. The assistant offers guidance and support. It does not diagnose, and its suggestions are not a substitute for professional advice.

8. How long we keep it

We keep your information while your account is active. If you delete a child's profile or your account, we delete the related personal data within 30 days, except for limited records we must keep by law (for example, billing records for tax purposes) or to resolve disputes. Anonymised, aggregated data that can no longer identify you or your child may be kept.

9. How we protect it

Data is encrypted in transit and at rest, access within our team is limited to people who need it, and we review our security practices regularly. [Where data is stored, e.g. servers located in India.] If a personal data breach affects you, we will notify you and the Data Protection Board of India as the law requires.

10. Your rights and choices

Access and correction: see and edit your and your child's information in the app, or ask us for a summary.
Deletion: delete a child's profile or your whole account in the app, or request deletion.
Sharing: change who can see each child's information at any time.
Notifications: turn them on or off in Settings.
Nominate someone to exercise your rights if you are unable to.
Raise a grievance with us, and if you're not satisfied, with the Data Protection Board of India.

11. Grievance Officer

[Name], Grievance Officer · support@indria.io · [address]. We acknowledge grievances within [48 hours] and aim to resolve them within [30 days].

12. Changes to this policy

If we make important changes, we'll tell you in the app or by email before they take effect. The date at the top shows when this policy was last updated.