Your child's privacy, in plain language.
This policy explains how TaiBoli collects, uses, and protects your child's personal information. We take it seriously, so we have written it so you can understand exactly what happens with your child's data.
This policy explains how TaiBoli collects, uses, and protects your child's personal information, written in plain language so you can understand exactly what happens with your child's data. TaiBoli is a language-learning service for children aged 6–12.
The laws that protect your child depend on where your child lives. For children in the United States, we comply with the Children's Online Privacy Protection Act (COPPA). For children in India, we comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and its Rules. Wherever your child lives, we apply strong protections as a baseline. If you have any questions, contact us at privacy@taiboli.ai.
Who we are
TaiBoli is a brand operated by Panya Labs Pvt Ltd, on its Panya learning platform. We are the party responsible for your child's personal information (the "Data Fiduciary" under Indian law). You can reach us at:
- Address: E316, Shree Hans Gardens, Dhanori, Pune, India
- Privacy questions: privacy@taiboli.ai
- General support: support@taiboli.ai
- Phone: [PHONE NUMBER]
- Grievance Officer (India): [GRIEVANCE OFFICER NAME], privacy@taiboli.ai
Who this policy is for
TaiBoli is for children, and only a parent or legal guardian can set up and manage a child's account. We treat anyone under 18 as a child for the purposes of Indian law, and anyone under 13 as a child for the purposes of U.S. law. In all cases, we collect a child's information only after a parent or guardian has given verifiable consent.
What personal information we collect from your child
Information you provide when you create your child's account
Your child's first name, last name, age, gender (optional), and the language they'll be learning. We also ask about their prior exposure to the language and their interests. You select which script your child will learn to read in — the native script (like Devanagari for Hindi) or romanised (Hindi written with English letters). You choose how many sessions per week (3, 4, or 5) when you subscribe.
Your child's voice during sessions
During learning sessions, your child speaks to an AI-powered avatar tutor. We capture your child's voice through the device microphone to convert speech to text, so the avatar can understand and respond.
What your child says during sessions
Your child may share personal details during conversations (a friend's name, a favourite activity, something happening at home). We store some of these so the avatar can reference them naturally in future sessions.
Your child's learning progress
We track what your child has learned, how they're progressing, and which teaching approaches work best for them — session dates, scores, assessment results, and engagement patterns.
Video display
During sessions, your child's face appears on screen like a video call. In the current version, this video stays on your device only — it is not recorded, stored, or sent to our servers. If we introduce video recording in the future, we will ask your permission first.
Photos from family activities
You may choose to upload photos during family learning activities. These uploads are always voluntary and controlled by you.
What personal information we collect from you (the parent or guardian)
When you create your account, we collect your name, email address, and phone number (if you provide it for notifications). We also ask about your motivation and your family's language background so we can tailor the experience. Payment information is collected and processed by our payment provider — we do not store your card number or payment details.
How we get your permission
We collect your child's information only after you give verifiable parental consent during onboarding. The way we verify that you are the parent or guardian may differ depending on where your child lives, so that we meet the requirements that apply there. You can review your consent choices, and withdraw any optional consent, at any time through your dashboard — withdrawing is as easy as giving consent. Withdrawing consent does not affect processing that already took place.
How we use your child's information
- To provide the learning service: Your child's name and voice are used during tutoring sessions; learning data is used to track progress, select content, and adjust difficulty.
- To personalise the experience: Details your child shares (interests, family, preferences) help make sessions relevant — for example, connecting a new Hindi word to your child's favourite sport.
- To show you your child's progress: Highlights, milestones, and progress data appear in your parent dashboard.
- To create audio highlights (if you choose): If you enable clip sharing, we save short audio clips (5–30 seconds) of your child's best moments. You can listen, share, download, or delete them at any time.
- To improve the platform (if you choose): With your permission, we use anonymised learning patterns — stripped of anything that identifies your child — to improve TaiBoli for all children. You can opt out at any time.
How we do NOT use your child's information
- We never sell your child's data — not to advertisers, data brokers, or anyone.
- We never use your child's data for advertising. There are no ads in TaiBoli.
- We never serve targeted advertising to your child and never use your child's data for behavioural advertising or profiling for advertising.
- We never create marketing profiles of your child.
- We never use your child's voice to create a voiceprint or any biometric identifier.
- We never use facial recognition.
- We never share your child's data with other families.
- We never compare your child to other children in any way visible to you or to them.
Who we share your child's information with
To make TaiBoli work, we share limited information with the service providers below. They are contractually required to use your child's data only to provide their service to us, and for no other purpose — including no model training, no product improvement of their own, and no advertising. All are required to delete your child's data promptly after processing.
- AI language model provider: receives your child's first name, current learning context, and conversation transcript during sessions. Your child's last name is never shared.
- Speech-to-text provider: receives your child's voice audio and converts it to text; audio is deleted immediately after transcription.
- Text-to-speech provider: generates the avatar's voice; receives only the avatar's script — no information about your child.
- Cloud hosting provider: hosts data on secure, encrypted servers.
- Payment provider: processes your subscription payment; receives only your payment information — no information about your child.
We do not share your child's information with any other third parties, and never for advertising or marketing.
Audio files: how we use and delete your child's voice recordings
Your child's voice is streamed to our speech-to-text provider and converted to text in real time. Raw voice audio is temporarily stored for up to 48 hours after each session (to extract any audio highlights you've enabled and handle processing issues), then automatically and permanently deleted. If you enable clip sharing, short highlight clips may be extracted within that window and stored separately until you delete them, disable clip sharing, or close the account. If you do not enable clip sharing, no audio is kept beyond 48 hours. We never create voiceprints or biometric identifiers, and our provider is contractually prohibited from doing so.
Photos and videos
Camera during sessions: Your child's face appears on screen like a video call, displayed locally on your device only. It is not transmitted, recorded, or stored. The avatar responds to voice only.
Photos you upload: Stored in your child's account, visible only to you, deletable at any time. Never shared with other families, never used for facial recognition, never sent to any AI provider.
Future video features: If we introduce recording or transmission of your child's video (such as session replay), we will notify you and request your specific permission first. Such features are never turned on automatically.
How long we keep your child's information
We keep your child's information only as long as it is needed:
| What | How long | What triggers deletion |
|---|---|---|
| Profile (name, age, interests) | While the account is active | You request deletion, or account closes |
| Raw voice audio | Up to 48 hours after each session | Automatic deletion |
| Audio highlight clips | Until you delete them or disable clip sharing | Your action, or account closes |
| Photos you upload | Until you delete them | Your action, or account closes |
| Session transcripts | While the account is active | You request deletion, or account closes |
| Learning progress | While the account is active | You request deletion, or account closes |
| Personalisation details | While the account is active | Delete individual items anytime, or all on account close |
Inactive accounts: If your child hasn't had a session in 6 months, we'll email you. If there's no activity for 9 months, we delete your child's data to protect their privacy. You can reactivate any time before that.
After cancellation: If you cancel, we delete your child's data after 90 days, or immediately on request.
Anonymised learning data: Anonymised learning patterns (stripped of identifying information so they cannot be connected back to your child) are used, with your permission, to improve the platform. Because this data is already anonymised, it cannot be individually deleted.
Your rights as a parent or guardian
You can, at any time:
- Review your child's profile, progress, stored personalisation details, audio clips, and photos through your dashboard, or request a full export ("Download my child's data").
- Correct inaccurate information about your child.
- Delete individual items, or all of your child's data ("Delete my child's data"). We complete deletion within 30 days and confirm by email.
- Stop further collection by pausing or cancelling the subscription.
- Change your permissions — enable/disable audio clips, opt in/out of anonymised learning improvement.
- Nominate another person to exercise these rights on your behalf in the event you are unable to (for children in India, as provided under Indian law).
To exercise any right, use your dashboard or contact privacy@taiboli.ai. We respond within 7 business days.
If you are not satisfied (India): you may raise a grievance with our Grievance Officer (above). If unresolved, you may complain to the Data Protection Board of India.
How we protect your child's information
We maintain a written information security program:
- Data is encrypted at rest and in transit.
- Access to your child's data is restricted to authorised personnel using multi-factor authentication, with access logging.
- We conduct regular security assessments.
- Employees who handle children's data receive privacy and security training.
- Service providers must maintain equivalent security standards.
- We have an incident response plan — if a data breach affects your child's information, we will notify you (and, where required, the relevant regulator) within 72 hours.
Persistent identifiers
We use persistent identifiers (session and device tokens) only to: keep you logged in; deliver session reminders to you (the parent — not your child); and monitor app stability (crash reports, error logs). We do not use persistent identifiers for targeted advertising or for tracking across other apps or websites.
Children's design
- The avatar never asks your child for their last name, home address, school name, or contact information.
- The avatar never encourages your child to share the app with friends or to contact other children.
- There are no social features, chat rooms, or ways for children to communicate with each other.
- There are no ads, no in-app purchases, no premium currency.
- There are no "guilt" mechanics — your child is never made to feel bad about a missed session.
- If your child inadvertently shares sensitive information during a session, our system automatically removes it from the stored transcript.
Where your child's data is processed
We host data with a cloud provider on secure, encrypted infrastructure. Where your child's data is transferred across borders, we do so in accordance with applicable law, including any restrictions and conditions set by the Government of India and any safeguards required for children in other regions.
Changes to this policy
If we make material changes, we will notify you by email, display a notice in the app, and — where the change involves new categories of data collection or new uses — obtain your consent again. Minor changes may be made without individual notice and reflected in the "Last updated" date.
Contact us
If you believe we have collected information from your child without proper parental consent, contact us immediately at privacy@taiboli.ai and we will promptly delete it.
For children in India, you may also contact the Data Protection Board of India if a concern is unresolved.
For children in the United States, you may contact the Federal Trade Commission: