Privacy Policy

The Young Foundry is built for children aged 6–16. We collect the minimum information needed to run a safe learning community, and we never sell your data or your child's data. This summary explains what we collect, why, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

Because our users are children, a parent or guardian must create or approve every account. We verify the parent before activation. For verification we may use a one-time password (OTP) sent to the parent's phone, and — where required — Aadhaar-based OTP verification.

Aadhaar is used only to confirm the parent's identity at the moment of verification. We do not store the Aadhaar number or Aadhaar details. This follows the data-minimisation principle of the DPDP Act.

Account basics (display name, pseudonymous username, email, date of birth), learning and activity data (XP, badges, posts, progress), and safety signals from automated moderation. Children are encouraged to use a nickname rather than their real name.

Parents can see their child's activity, screen-time, login history and safety flags from Family HQ, and can pause the account, set time limits or enable exam mode at any time.

To safeguard the child, a verified parent or guardian can review their child's private chats — including messages the child has deleted — from the Chat Review section of Family HQ. Chat messages are retained for 2 weeks and are then archived and hidden from view. Archived messages are permanently deleted after 3 months, and can only be retrieved within that window through a reasoned request that is reviewed and approved by a TYF administrator. Children are told, in age-appropriate language, that a parent can review their chats for safety. Access is limited to the child's own parent/guardian and authorised TYF safety staff, and is logged.

Parental consent records are kept for 7 years from the date of consent, then automatically deleted. Event participation records are kept for 2 years. Account data is deleted within 30 days of an account-deletion request. You may request earlier deletion at any time.

You may access, correct, or request deletion of your child's data, and withdraw consent, by contacting us at theyoungfoundry@gmail.com. We will respond in line with the DPDP Act.

You may also request a copy of all personal data we hold about you or your child (right to data portability under DPDP Act Article 10) by writing to the address below or using the “Download my data” option in your account settings.

In accordance with Section 13 of the Digital Personal Data Protection Act, 2023, The Young Foundry has designated a Grievance Officer to address any concerns relating to the processing of personal data on this platform.

Name: The Young Foundry — Data Privacy Team
Email: theyoungfoundry@gmail.com
Response time: We will acknowledge your grievance within 48 hours and resolve it within 30 days of receipt, as required under the DPDP Act.

You may write to us in English or any language listed in the Eighth Schedule to the Constitution of India.