Privacy policy

About you: your name, a contact mobile number, your email address, the time of day you prefer a call (morning, afternoon or evening), and a delivery address with the recipient's name and phone number.

About your child: first name or nickname, age, gender (you can choose “Prefer not to say”), the languages they understand and read, and, if you choose the questionnaire, your answers about how they enjoy books.

We do not ask for your child's date of birth, school, photos, location or any medical or developmental information.

With an order we also store the campaign that brought you to us (if any) and an analytics identifier, so we can measure which pages lead to orders. To stop abuse of sign-in and checkout, we keep a scrambled (hashed) form of your IP address and email address for up to two days.

Only to choose books for your child, deliver them, contact you about your order, and confirm your payment.

MindLibrary is designed for parents and legal guardians of children.

By providing a child's information, you confirm that you are the child's parent or legal guardian, are at least 18 years old, and consent to MindLibrary using the information to understand the child's reading preferences, curate books, and fulfil the subscription.

We use this information only for the purposes explained in our Privacy Policy and share it with service providers only where necessary to deliver our services.

You may contact privacy.mindlibrary@gmail.com to request access to, correction of, or deletion of personal information, subject to applicable legal requirements.

Before we save any details about a child, you confirm this by ticking a box. We record when you confirmed it, which version of this policy applied, and the account that signed in with the emailed code.

We use these service providers to run MindLibrary. Each receives only what it needs for its role:

• Vercel: hosts this website and the servers that run it.
• Supabase: our database and the sign-in codes we email you. Our database is hosted in Mumbai, India.
• Razorpay: takes your payment. We never see or store your card or UPI credentials.
• Resend: sends our order and sign-in emails.
• Slack: alerts our team about each paid order, including your name and contact details and your child's name, age, gender and questionnaire answers (not your address).
• Google: our support email inbox, and Google Analytics (see below).

Your child's details and questionnaire answers are not sent to analytics or advertising tools.

We use Google Analytics to understand how people use the site (for example, which pages are visited and whether checkout completes). We never send names, contact details, children's details or questionnaire answers to it.

Details you entered but did not complete an order with, including your child's details, are deleted after 7 days, or 30 days if you had signed in.

If you signed in, we keep your account email address, and any name, phone number and delivery address you saved, so you can use them again. You can ask us to delete them (see below).

For a cancelled order where no money was taken or held, personal details are removed 90 days after cancellation. If money was taken or held for a cancelled order, we keep its details so we can complete the refund or release.

We retain financial and transaction records for up to eight years, or longer where required by law.

Other personal information is retained only as necessary to provide our services and meet legal obligations. Parents may request deletion of their information, subject to applicable legal requirements.

You can ask to see a copy of the personal data we hold about you or your child, to correct it, or to delete it, by emailing privacy.mindlibrary@gmail.com. We may need to keep some records, such as payment and tax records, where the law requires it.

Complaints about how we handle your data go to our Grievance Officer and Nodal Data Officer, Shweta Shinde, at privacy.mindlibrary@gmail.com. We acknowledge complaints within 48 hours.