Privacy Policy

1Your child's data stays on your device

Your child's name, avatar, age setting, stars, stickers, progress and play time are stored only in the browser on your device. They are never sent to our servers. Clearing the browser's data or using the in-app reset removes them; you can also save and restore a backup file from the Parent Corner.

2What we collect about parents

• Account details from Google or Apple when you sign in: your name, email address (with Sign in with Apple this may be a private relay address), profile picture (Google only) and an account identifier.
• Your device's time zone, used only to show prices in the right currency (Rupees in India, US Dollars elsewhere).
• Subscription and payment records: your plan, dates, amount, currency, payment method type and the Razorpay payment reference. We never receive your card, UPI or bank details — Razorpay handles those.
• Emails we send you (welcome, receipts and reminders) and whether they were delivered.
• When you last opened the app while signed in, so we can keep your access up to date.
• How you found us: if you arrived through a link that carries campaign tags (for example, a link in one of our social media posts) or from another website, we note the tags, the page you first landed on and the other website's name, and store them with your account when a grown-up first signs in. This tells us which of our posts and adverts bring families to Toddler's Galaxy. It is never collected about your child.

3Page visit counts

On our public pages (such as this one and our page for parents) and at two steps of signing up — when the sign-in screen and the passes are shown — we add one to a daily total. We store only the total, broken down by page, the campaign tags above, the type of device (phone, tablet or computer) and whether the visit was from India. We do not store your IP address, an identifier, or anything that could tell visits apart. Nothing is counted inside your child's games.

4What we do not do

• No advertising, and no advertising or analytics trackers.
• No tracking or profiling of children, and no behavioural monitoring.
• We never sell or rent personal data.

5Why we use your data

To run your account, provide the free trial and passes you choose, take payment, send receipts and account emails (trial and pass reminders), prevent fraud and misuse, and meet legal and tax obligations. We rely on your consent, given when you sign in, and on what is needed to provide the Service you asked for.

6Who we share it with

Only the service providers needed to run Toddler's Galaxy, each bound to use the data only for us:

• Google and Apple — sign-in.
• Razorpay — payment processing.
• Resend — sending account emails.
• Railway — hosting our servers and database.

Some of these providers store data outside India, including in the United States. We may also disclose data where required by law.

7How long we keep it

Account data is kept while your account is active and deleted within 30 days of a verified deletion request. Payment and invoice records are kept for as long as Indian tax and accounting law requires (currently up to 8 years).

8Cookies and storage

We use your browser's storage only for things the app needs to work: your child's progress, your sign-in session, and settings, plus — if you arrived through a tagged link or from another website — that note of how you found us, which is sent once when a grown-up signs in and then deleted (it is also deleted after 30 days). The owner's admin page uses one security cookie. There are no advertising or tracking cookies, and nothing is shared with advertising or analytics companies.

Our page for parents has a short video hosted on YouTube. Nothing loads from YouTube until you press play. If you do, the video plays from YouTube's privacy-enhanced (youtube-nocookie.com) player, and Google's privacy policy applies to that video. The child app never shows YouTube videos.

9Your rights

You can delete your account yourself at any time: open the Parent Corner, go to Membership, and choose Delete my account. This removes your account straight away; your child’s progress on the device is not affected. Payment and invoice records are kept as described above, without your email address.

You can also ask to see, correct or delete your personal data, or withdraw consent (which ends your account), by writing to support@toddlersgalaxy.com from the email on your account. We respond within 30 days.

10Grievance officer

For any concern about how your data is handled, contact our grievance officer at support@toddlersgalaxy.com, or by post at Navya Systems, B-806, Aspiria Society, Hinjewadi Wakad Road, Hinjawadi, Pune 411057, Maharashtra, India. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

11Changes

We will update the effective date above when this policy changes, and tell signed-in parents about significant changes.