NDPR Compliance Statement

1. Principles of Data Protection

In accordance with NDPR rules, we adhere strictly to the following principles:

• Lawfulness & Fairness: Data is collected only after obtaining valid parental consent.
• Purpose Limitation: We collect and process data solely for personalized learning and parent dashboard monitoring.
• Data Minimization: We only collect the minimal required information: child's name, age, and WhatsApp number.
• Retention Limitation: Conversations and activity logs are automatically purged after 365 days.

2. Protection of Children

NDPR mandates special protections for minors. We strictly implement:

• Explicit Consent: Parents must actively check the NDPR consent box during account creation.
• Restricted Interaction: The AI tutor handles only educational interactions and never prompts children for personal metadata.
• Parental Control: Parents have absolute control to inspect, modify, or immediately delete their child's profile and chat history via the Parent Dashboard.

3. Data Subject Rights

Under the NDPR, you and your child have the following rights:

• The right to access and extract your child's data.
• The right to rectify incorrect spelling or phone numbers.
• The right to request the complete erasure of your child's data.
• The right to withdraw consent at any time.

4. Security Measures

We protect your data using TLS encryption in transit and secure database storage. Access to conversation logs is restricted strictly to the child's registered parent account and authorized systems.