Your child's privacy is non-negotiable.

Saurabh Khatri, trading as Vokido ("Vokido," "we," "our," or "us") respects your privacy. This Policy explains what personal data we collect, why we collect it, how long we keep it, and how you and your child can control it when using the Vokido app (the "App") and related services.

Vokido Beta Privacy Principles

We're deeply committed to creating a safe and secure online environment for all of our users.

1 Scope

This policy applies to learners using Vokido and, where applicable, parents and guardians providing consent for learners under 18.

2 What data we collect

A) Data you provide

• Phone number (OTP sign-in, sign-up, and WhatsApp progress updates to parents)
• Email (optional, if you provide it)
• Learner age or date of birth (onboarding)
• Learner preferred name (onboarding)
• Parent or guardian name and consent record (only where learner is under 18)

B) Learning data

• Voice audio recordings (when you use voice)
• Chat transcripts and responses
• Learning progress signals (session duration, practice history, progress and streaks)

C) Device and diagnostics (no extra permissions required)

• Device model, OS version, app version and build
• Language, locale, timezone
• Crash logs and performance diagnostics
• Network info (e.g. connection type)

D) Push notification data

• Device push token (generated by your device OS when you grant notification permission)
• Whether a notification was delivered or opened
• Your notification preferences as set within the App

E) Analytics and advertising data

• In-app behaviour events (e.g. screens visited, features used, session frequency) collected via Mixpanel for product improvement only
• Advertising measurement data (installs, in-app actions, identifiers for audience matching) — adult users aged 18+ only

F) Subscription and purchase data

• Subscription status, purchase token, and order ID received from Google Play Billing to manage your subscription
• We do not collect or store your payment card, bank, or UPI details — these are handled entirely by Google Play

G) What we do not collect

3 Why we use this data

• Authenticate accounts and prevent fraud and abuse
• Deliver the learning experience (voice, chat, exercises, progress)
• Generate learning feedback, transcripts, and summaries
• Troubleshoot crashes and improve app performance
• Assess your child's spoken English proficiency across grammar, fluency, pronunciation, vocabulary, and content using automated systems, and assign and update CEFR-aligned proficiency levels that personalise their practice and progression
• Send learning reminders and progress-related push notifications, with your consent. We take a non-manipulative approach — notifications are tied strictly to your learning progress. You can withdraw this consent anytime from device settings or within the App
• Send parents updates via WhatsApp including learning progress summaries, session activity, milestones, and other app-related communications, using the phone number provided at onboarding. Consent is collected during account creation
• Understand how learners use the App and improve the product experience (Mixpanel analytics — all users)
• Advertising measurement features apply only to adult users (18+), governed by additional disclosures in Section 5
• Manage subscriptions, billing status, and access to paid features

4 Children's privacy (under 18)

If the learner is under 18, Vokido requires parent or guardian consent before processing the learner's personal data. Vokido does not run ads and does not do targeted advertising for children. We strictly do not engage in behavioural tracking of children beyond what is strictly necessary to deliver the learning experience and provide feedback.

5 Ads and marketing

Vokido does not show ads within the app. We do not use children's data for any advertising or marketing purpose.

We run ads on external platforms and use third-party tools — Firebase/Google Analytics, Google Tag Manager, and Meta Ads — to measure campaign performance, track app installs & in-app interactions, and reach similar audiences. This applies only to adult users aged 18 or older. Advertising SDKs are not active for learners under 18.

If you are an adult user and wish to opt out of advertising measurement, contact us at support@vokido.co to limit ad tracking.

6 Sharing and service providers

We may share data with vetted service providers strictly to operate Vokido, such as:

• SMS provider to send OTP messages
• Cloud infrastructure for hosting and storage (Supabase, Vercel)
• AI and ML providers including Gemini, CartesiaAI to process transcripts and feedback for the learning experience
• Mixpanel — product analytics to understand how learners use the App (all users; no advertising use)
• Sentry — crash reporting and error diagnostics to improve app stability
• LiveKit — real-time voice infrastructure for processing live voice sessions
• Firebase/Google Analytics, Google Tag Manager, Meta Ads — advertising measurement and campaign performance (adult users 18+ only)
• Meta (WhatsApp Business Platform) — messaging platform used to send progress updates to parents via WhatsApp (parent users only)
• Google Play Billing — processes subscription payments. Vokido does not receive or store your card, bank, or UPI details

7 Partner centres

Some children join Vokido through a partner learning centre, using the centre's referral link or code. If your child joins this way, you agree that we may share a limited set of information with that centre so they can verify their students' participation:

• Your child's name and the registered phone number
• Engagement information — daily and weekly activity, session counts, and streaks

We do not share chat content, voice recordings, transcripts, assessment detail, or any other learning content with partner centres.

This applies only where your child joined through a partner centre, and only with that specific centre. Partner centres use this information for their own record-keeping and are responsible for how they handle it under their own privacy obligations.

You can stop this sharing at any time by emailing support@vokido.co. Doing so does not affect your child's use of Vokido, though any centre discount may no longer apply.

8 Security

We use reasonable measures such as encryption in transit, access controls, and least-privilege practices.

9 Data retention and deletion

We retain data only for as long as needed for the purposes above, unless a longer period is required by law.

Default retention (Beta baseline):

• OTP and security logs: up to 180 days (fraud prevention/audit)
• Account profile data: while the account is active
• Audio recordings: retained only briefly for real-time speech evaluation (under 1 hour), then automatically deleted
• Chat transcripts: up to 12 months or until deletion is requested, whichever is earlier
• Crash logs and diagnostics: up to 24 months (stability improvements)
• Analytics events (Mixpanel): up to 24 months from the date of the event, after which data is aggregated and de-identified
• Advertising measurement data (Firebase/Google Analytics, Google Tag Manager, Meta Ads — adult users only): up to 13 months from the date of the conversion event, in line with platform standards
• Subscription and purchase records: retained for the duration of the subscription and up to 8 years thereafter, as required by Indian tax and accounting law

10 User rights and requests

Users (or parents and guardians where applicable) can:

• Access a copy of your data (by email)
• Correct inaccurate details (by email)
• Request to delete your account and data (via in-app deletion or by email)
• Withdraw consent for WhatsApp updates (via WhatsApp or within the App)
• Withdraw consent for advertising measurement (by email)

11 Grievance redressal

12 International transfers

If personal data is stored or processed outside India (e.g. via cloud infrastructure providers), we do so only as necessary to operate Vokido and in accordance with the Digital Personal Data Protection Act 2023, including any rules or government notifications issued thereunder governing cross-border data transfers.

13 Updates

We may update this policy as Vokido evolves. We'll update the "Last updated" date and provide notice for material changes.