Privacy Policy

This policy explains what personal information we collect through the Abacus Striker app and this website, why we collect it, who can see it, and the choices you have. It is written for parents and guardians.

1. Who we are

Bauddhik Aabhyas Edutech Private Limited ("we", "us") publishes and operates the Abacus Striker app and runs this website.

Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data the app handles: your account, your Student Profiles, and everything your child does in practice, Games, Class Battles and Races. We also follow the Information Technology Act, 2000 and the rules made under it.

A competition entry made in the app also comes with its own terms, shown in the app before you register. The rules for using the app are in our Terms of Use.

2. Only adults hold accounts

Only a parent or guardian can create an account. A child never signs up and never has a password or login of their own. Children are Student Profiles, created and controlled by the adult who holds the account, and every consent or request about a child's data is made by that adult.

3. What we collect, and when

We ask for nothing until the feature you are using needs it.

• At sign-up: your name, your email address or mobile number, and the name you give each Student Profile.
• As your child practises: questions attempted, answers, times, scores, points, badges, ratings and streaks.
• Date of birth: asked only the first time your child joins a multiplayer game or is registered for a competition, because age categories depend on it.
• Postal address: asked only when something must be delivered to you.
• Technical data: the devices signed in to your account, the app version, and the error logs we need to fix faults.

Dates of birth and postal addresses are stored encrypted.

4. What we use it for

We use this information to run the app, and for nothing else:

• to sign you in and keep your account secure;
• to check answers on our servers and award points, badges and ratings fairly;
• to place each child in the right age category;
• to run scoreboards, challenges, Class Battles and Races;
• so that an item that must be sent to you can be delivered;
• to answer your questions;
• to detect cheating and misuse; and
• to keep the records Indian law requires.

5. Consent, and taking it back

Where the law requires your consent, a ticked box is not enough. Before we use a child's date of birth or a delivery address, we send a one-time password (OTP) to the parent's registered mobile number and record the confirmation.

You can withdraw a consent at any time by writing to our Grievance Officer. Withdrawal applies from then on and does not undo processing already carried out lawfully. Some features cannot work without their consent: without the date-of-birth consent, for example, a child cannot be placed in an age category and so cannot play multiplayer games.

6. How we contact you

Service messages are part of using the app and cannot be turned off: one-time passwords, security and sign-in alerts, replies to questions you raised, and notices about changes to this policy or our terms. They carry no promotion.

Promotional messages about our own products and services are your choice. We send them only while you are opted in, by email, in-app notification, WhatsApp or SMS. You can opt out at any time, at no cost, by writing to our Grievance Officer or by following the unsubscribe or stop instruction in the message. Opting out stops promotional messages on every channel.

We do not make marketing phone calls, and we do not give your number to anyone who does. We call you only about a service matter, such as an issue you raised.

7. We do not sell or share your data

We do not sell, rent, trade or share your personal data with anyone for their own purposes. The app has no advertising networks, data brokers, tracking pixels or analytics companies.

To run the service we use a small number of service providers: cloud hosting and database, app distribution, crash and error reporting, and delivery couriers. They act only on our written instructions and may not use your data for anything of their own.

Crash and error reporting tells us when something in the app breaks, so that we can fix it. It receives the technical details of the fault and a random identifier for the installation, which is not linked to your account. It is blocked from receiving names, mobile numbers, email addresses, one-time passwords, dates of birth, addresses or anything a child typed. It records faults, never usage.

Beyond these providers, we disclose data only when a court, a regulator or Indian law requires it, or when it is necessary to investigate fraud, cheating or a threat to someone's safety.

8. Children

Children are never shown advertisements in the app, and they are never tracked, profiled or targeted. We do not build interest profiles of children or use their data to market anything to them.

Other children see only a display name, points and badges. A child's date of birth, address and contact details are never shown to another family. Staff and teachers see only the details their own task needs.

9. How we protect it

• All traffic between the app and our servers is encrypted.
• Dates of birth and delivery addresses are stored encrypted. Only staff we have specifically authorised can open them, they must give a reason, and every access is logged.
• Passwords are stored only as hashes.
• An account can be signed in on up to 3 devices at once, and you can sign any of them out yourself.
• Scores and results are worked out on our servers, never accepted from a player's device.

No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board of India, as the law requires.

10. How long we keep it

• Account and Student Profile data: while your account is active.
• Practice and game history: while the Student Profile exists, because tracking progress is the point of the app.
• Consent records and access logs: kept as evidence that we handled your data correctly.
• Records Indian law requires us to keep: for the period the law sets.

When a period ends, the data is deleted or anonymised. When you delete your account, we erase your personal data at the end of the wait you chose, except records the law requires us to keep and winners' names, ranks and certificate numbers, which are kept as the public record of a competition.

From about May 2027, a new rule under the Digital Personal Data Protection Act, Rule 8(3), will require every company that holds personal data to keep that data, the traffic data that goes with it and its processing logs for at least one year, even after an account is deleted. Where it applies, it overrides the shorter periods above. We will update this policy before the rule comes into force.

11. Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• ask for a summary of the personal data we hold about you and your children, and how we process it;
• ask us to correct or complete anything inaccurate;
• ask us to erase data we no longer need;
• nominate someone to exercise these rights if you cannot;
• withdraw a consent you gave; and
• raise a grievance with us.

You can erase your data yourself: Delete Account in the app's account menu removes your account and every Student Profile under it after a wait of 15, 30 or 60 days, which you can cancel until it ends. For anything else, write to our Grievance Officer. There is no form and nothing to pay.

We acknowledge every request within 24 hours and resolve it within 7 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

12. This website

This website sets no cookies and has no analytics, tracking or advertising. It loads nothing from any other website, and it has no forms.

It is hosted on Netlify, which processes technical request data, such as IP addresses, in order to deliver the pages.

13. Changes to this policy

Every version of this policy has a version number and an effective date, shown at the top of this page. When we make a material change, we tell you in the app, by email or both before it takes effect, and ask you to accept it.

If you decline, you may keep using the app under the version you last accepted where that is possible. Where it is not, you should stop using the app, and you may delete your account. Using the app after the effective date of a change you were told about counts as acceptance. Where the law requires fresh consent for a new kind of processing, we ask for it separately.

14. Contact

For any question about this policy, to exercise a right, to withdraw a consent or to stop promotional messages, write to our Grievance Officer. Section 12 of our Terms of Use sets out the governing law.