Privacy Policy
1. Who we are
Arithlo is a Vedic Maths practice app provided by Giane Future Gurukull ("we", "us", "our"), a proprietorship providing educational services, for students enrolled in its classes.
Giane Future Gurukull decides how and why personal data in Arithlo is used, and is responsible for it. We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
The app is published on Google Play by International Institute of Handwriting Analysis, a sister concern of Giane Future Gurukull, on our behalf. It provides publishing and technical services only and does not use student data for its own purposes.
Giane Future Gurukull
Office No. 03, First Floor, Daji Darshan Apartment, Opp. Secure Hospital, Harni–Warasia Ring Road, Vadodara, Gujarat 390006, India
2. Who this policy is for
Arithlo is made for children aged about 7 to 13. Children do not create accounts themselves. Each account is set up by our staff when a child enrols, and is linked to a parent's or guardian's WhatsApp number.
This policy is written for parents and guardians. Where it says "you", it means the parent or guardian. Where it says "your child", it means the enrolled student.
It covers:
- the Arithlo app for Android and iOS,
- the Arithlo website at arithlo.in, and
- the challenge pages that open when someone receives a "Challenge a friend" link (section 6).
3. Your consent
We confirm who your child's parent or guardian is in person when your child enrols, and we sign you in only through the WhatsApp number registered at that time.
Before you first sign in, we ask you, as the parent or guardian, to confirm that you have read this policy and the Terms of Use and agree to your child's data being used as this policy describes. We record your number, when you agreed, and which version of this policy you agreed to. If we change this policy, we ask you to agree again.
You can withdraw consent at any time by asking us to delete your child's account (section 10). We will then close the account and delete your child's data as described in section 9.
4. What we collect
4.1 About your child
| What | Why |
|---|---|
| Name, as given at enrolment | To identify your child's account and show it in the app |
| Date of birth, if you gave it at enrolment | Kept on your child's enrolment record. The app does not use it |
| Enrolment reference and batch | To link the account to your child's classes |
| Practice record: every question your child answers, the answer given, whether it was right, how long it took, and whether the app was left mid-question | This is what Arithlo is for. It powers your child's progress, fact grid, belts, streaks and the summary you see as a parent |
| Progress built from that record: results, streaks, points (XP), badges, belts | To show progress and keep practice motivating |
| Whether "Challenge a friend" is switched on for your child, and whether friends see their first name or initials | So we can control what is shared (section 6) |
We keep the full practice record, question by question, because the progress features depend on it. It is used only to support your child's learning and to help their teachers at Giane Future Gurukull.
4.2 About you (the parent or guardian)
| What | Why |
|---|---|
| Your WhatsApp number | To sign you in with a one-time code |
| When your number was first verified | To confirm the account belongs to you |
| Your parent PIN, stored only in scrambled (hashed) form | To keep the parent area private from your child |
| Your consent record: your number, the date and time, and the policy version | To show that you agreed to this policy |
| Anything you write in a device change request, or when you message us | To handle your request |
4.3 About the device and sign-in
To keep each account on one device, and to stop misuse, we collect:
| What | Why |
|---|---|
| A random ID the app creates when installed | To link the account to that device |
| A device identifier limited to Arithlo (Android ID on Android, "identifier for vendor" on iOS). It cannot be used to track you across other apps | To recognise the same phone after the app is reinstalled |
| Device make, model, operating system and version | To show you which device is linked, and to fix technical problems |
| When anyone requests a sign-in code: the phone number entered, the IP address and the number of attempts. This includes numbers that are not registered with us | To prevent abuse of the sign-in system |
4.4 What we do NOT collect
Arithlo does not collect your child's location, contacts, photos, camera or microphone. It does not use advertising IDs, show ads, or contain analytics or tracking tools. Daily reminders are scheduled on the phone itself; we do not send push notifications from our servers.
4.5 This website
arithlo.in sets no cookies and has no analytics, advertising or third-party scripts. Its fonts and images are served from our own server. Our web server does not keep a record of visitors.
5. How we use it
We use personal data only to:
- run your child's account and practice,
- show progress to your child and to you,
- let your child's teachers at Giane Future Gurukull follow their progress and support them,
- sign you in securely and protect accounts from misuse,
- respond to your requests and messages, and
- meet our legal obligations.
We do not sell personal data, use it for advertising, or build profiles of children for any purpose other than their learning.
6. "Challenge a friend"
Your child can share a challenge link, usually with another family on WhatsApp. This feature is switched on by default. The person who opens the link can play the challenge on a web page, without an account.
What the friend sees about your child: only your child's first name (or initials) and their challenge score. No surname, school, class or contact details.
If you prefer your child not to share challenges, contact us and we will switch the feature off for them.
What we collect from the person who plays:
- To play: nothing is required. They may enter a first name, which is shown to the child who sent the challenge. The page stores a random ID in a cookie on their device for up to one year, so they can see their result if they come back, and we keep that random ID with their score.
- Only if a parent chooses to ask us about classes after the game: a form addressed to the parent or guardian, asking for their child's name, and optionally school, class and city, and the parent's own phone number. The form says clearly, before it is sent, that Giane Future Gurukull will contact them about classes. It cannot be sent unless the parent ticks a box confirming they are the child's parent or guardian and agree to be contacted. We record when they ticked it.
We use this information only to contact that parent about Giane Future Gurukull classes. If they do not enrol, we delete the enquiry and the first name after 6 months, or earlier if they ask (section 9). The random ID and score are kept without a time limit; once the name is deleted they do not identify anyone.
If your child's own account is deleted, enquiries made through your child's challenge links are deleted with it.
7. Who we share it with
We share personal data only with the service providers who help us run Arithlo, and only what each one needs:
| Provider | What they receive | Why |
|---|---|---|
| AiSensy, which delivers messages through Meta's WhatsApp Business service | Your phone number and your sign-in code | To send you sign-in codes on WhatsApp |
| Our hosting provider | All app data, stored on our own virtual private server | Hosting. The server is in Mumbai, India |
| International Institute of Handwriting Analysis | Access only as needed to publish and maintain the app | Publishing and technical support |
If you message us on WhatsApp, that conversation is also handled by WhatsApp under its own terms.
We may also disclose information if the law requires it, for example in response to a valid order from a court or government authority.
Within Giane Future Gurukull, only authorised staff can see student records, through a password-protected admin panel.
8. How we protect it
- All data between the app and our server is encrypted in transit (HTTPS).
- Sign-in codes, parent PINs and login tokens are stored only in hashed form, never as plain text.
- Phone numbers are masked in our system logs.
- The database is not reachable from the internet, and access to the admin panel is limited to authorised staff.
No system is completely secure. If a personal data breach affects you, we will inform you and the relevant authorities as the law requires.
9. How long we keep it
| Data | How long |
|---|---|
| Your child's account and practice record | While your child is enrolled, then deleted 6 months after Giane Future Gurukull records that they have left |
| Sign-in code requests (phone number, IP address) | 30 days |
| Failed message deliveries (which can contain your phone number) | 30 days |
| A friend's parent's challenge enquiry, and the first name a friend played under | Until they enrol, or deleted after 6 months if they don't |
| Server logs (your child's account number only, never names or phone numbers) | 14 days |
| Everything, after a verified deletion request | Deleted within 30 days of the request |
Our backups are kept for 14 days, so deleted data disappears from backups within 14 days after it is deleted from the live system.
After a deletion we keep only a record that a request was received and completed, with dates. It contains no name or phone number.
10. Your rights
We process your child's personal data based on your consent as their parent or guardian, as required by the DPDP Act. As the parent or guardian, you can:
- Access: ask for a summary of the data we hold about your child and you.
- Correct, complete or update: ask us to correct inaccurate data, or complete or update it.
- Delete: ask us to delete your child's account and all their data. You can start the request in the app (Settings → Delete account) or as described at arithlo.in/delete-account.
- Withdraw consent: at any time, by making a deletion request. This closes the account and deletes the data, as above.
- Nominate: name someone to exercise these rights on your behalf if you are unable to.
- Complain: contact us about your grievance (section 12). If you are not satisfied with our response, you can complain to the Data Protection Board of India.
To protect your child, we will verify that a request comes from, or names, the parent's registered WhatsApp number before acting on it.
11. Changes to this policy
If we change this policy in a way that affects how we use your child's data, we will tell you in the app and ask for your consent again. The version and effective date at the top show which version is current.
12. Contact and grievances
Privacy contact: privacy@arithlo.in
Grievances: for any grievance, you can contact us at grievance@arithlo.in, or write to:
Giane Future Gurukull, Office No. 03, First Floor, Daji Darshan Apartment, Opp. Secure Hospital, Harni–Warasia Ring Road, Vadodara, Gujarat 390006, India
(Under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under them.)
We acknowledge grievances within 24 hours and resolve them within the timeline required by law.