This Privacy Policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and the Digital Personal Data Protection Act, 2023 (“DPDPA”). It applies to all users of Kidverse Pune, including parents, guardians, and event organisers accessing our platform at kidversepune.com.
1. Who We Are
Kidverse Pune (“Platform”, “we”, “us”) is a children's activity discovery platform headquartered in Pune, Maharashtra, India. We act as an intermediary technology platform and do not directly organise or manage any events or activities.
2. Information We Collect
A. From Parents & Guardians (Platform Users)
- Account Information: When you sign in with Google (via Firebase Authentication), we receive your name, email address, and Google profile picture. We do not receive your Google password.
- Phone Number: Optionally provided to enable WhatsApp booking confirmations and account recovery.
- Children's Information: Name, date of birth, and gender of your child(ren) — provided voluntarily to personalise activity recommendations. You confirm you have full parental authority to share this information.
- Booking Details: Records of events or activities you have booked through the Platform.
- Communication Data: Messages or enquiries sent through the Platform.
- Technical Data: IP address, browser type, device type, operating system, and usage patterns collected automatically via cookies and analytics tools.
B. From Event Organisers
- Business name, contact details, event descriptions, pricing, schedules, images, and venue information submitted when creating or managing listings.
- Bank account or UPI details where applicable for payment processing (handled via third-party gateways; not stored by us).
3. How We Use Your Information
- To create and manage your Kidverse account and authenticate you securely via Google Sign-In.
- To display personalised event and activity recommendations based on your child's age and interests.
- To process and confirm bookings and send booking confirmations via email and/or WhatsApp.
- To send transactional communications, invoices, and service updates related to your bookings.
- To improve and optimise Platform functionality and user experience through analytics.
- To comply with legal obligations and respond to lawful requests from government authorities.
- To prevent fraud, misuse, or unauthorised access to the Platform.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Consent: When you create an account or sign in with Google, you consent to the processing described in this Policy.
- Contract Performance: To fulfil any bookings or services you request through the Platform.
- Legitimate Interests: To improve the Platform, prevent fraud, and maintain security.
- Legal Obligation: To comply with applicable Indian laws and regulatory requirements.
5. Sharing of Information
We do not sell your personal data. We may share your information in the following limited circumstances:
- With Organisers: When you make an enquiry or booking, relevant contact or booking information may be shared with the event organiser to fulfil your request.
- With Service Providers: Trusted third-party providers who help operate the Platform, including hosting (Hostinger), authentication (Google Firebase), email services (Brevo/Sendinblue), and analytics. These providers are bound by data processing agreements and may not use your data for their own purposes.
- With Payment Gateways: Payment information for bookings is handled by third-party payment processors. We do not store card or bank details.
- With Authorities: Where required by law, court order, or a legitimate government authority.
- During Business Transfers: In the event of a merger, acquisition, or sale, user data may be transferred as part of that transaction with equivalent data protection commitments.
6. Cookies & Tracking
We use browser cookies to maintain your login session on Kidverse (a session cookie stored for up to 30 days), and may use analytics cookies (e.g., Google Analytics) to understand usage patterns. You may disable cookies in your browser settings; however, this may affect certain Platform features, including staying logged in.
7. Children's Privacy
The Platform is designed for use by parents and guardians (aged 18 and above). We do not knowingly collect personal data directly from children. All child-related data (such as a child's name, age, or gender) is provided by the parent or guardian who holds the account. Parents may request the deletion of their child's information at any time by contacting us at kidversepune@gmail.com.
8. Data Retention
We retain your personal data for as long as your account is active or as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Login session cookies expire after 30 days. You may request account deletion at any time (see Section 9 below), after which we will delete or anonymise your personal data within a reasonable period, unless retention is required by law.
9. Your Rights
As a data principal under the DPDPA 2023 and related Indian law, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update or correct inaccurate personal data via your account or by contacting us.
- Deletion: Request deletion of your account and associated personal data.
- Withdraw Consent: Withdraw consent for data processing at any time (this may affect your ability to use certain features).
- Grievance Redressal: Lodge a complaint with us or with the Data Protection Board of India.
To exercise any of these rights, contact us at kidversepune@gmail.com. We will respond within 30 days.
10. Security
We implement reasonable technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include HTTPS encryption, secure server hosting, hashed passwords, and HTTP-only session cookies. However, no internet-based service can guarantee absolute security, and you use the Platform at your own risk.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page will reflect any changes. For material changes, we may notify you via email or a prominent notice on the Platform. Continued use of the Platform after any update constitutes your acceptance of the revised Policy.
12. Contact & Grievance Officer
For any privacy-related queries, complaints, or requests, please contact our Grievance Officer at:
Email: kidversepune@gmail.com
Platform: Kidverse Pune, Pune, Maharashtra, India
We aim to acknowledge your complaint within 48 hours and resolve it within 30 days.