Privacy Policy

1. Introduction

This Privacy Policy explains how Ideadox Private Limited, doing business as Mindful Minis ("Mindful Minis", "we", or "us"), collects, uses, shares, and safeguards personal information when you visit our website, use our mobile applications, or otherwise interact with our services (collectively, the "Service"). We are committed to protecting the privacy of caregivers and children who use Mindful Minis to build mindful routines.

Ideadox Private Limited is the data controller for individuals located in the European Economic Area (EEA), the United Kingdom, Switzerland, and India. Our registered address is 29 B Kachi Mada St, Kanchipuram 631502, Tamil Nadu, India, and you can contact us at info@mindfulminis.in.

2. Personal Information We Collect

We collect the following categories of information to operate the Service. Some of this information may be considered sensitive or special category data under applicable laws.

• Account and profile data: caregiver name, email address, child nickname, age range, and settings you provide when creating or updating an account.
• Wellbeing check-ins: mental state reflections, mood ratings, journaling prompts, and activity responses you optionally record to track a child’s emotional wellbeing. These entries are encrypted in transit and treated as sensitive personal data.
• Subscription and transactional data: plan selection, renewal status, and purchase identifiers supplied by the Apple App Store, Google Play Store, or other marketplaces. We do not receive full payment card information.
• Usage and device information: app interactions, content viewed, feature engagement, diagnostic logs, crash reports, IP address, device identifiers, operating system, and app version. We collect coarse location signals (such as city or country) for localization but do not perform background or precise GPS tracking.
• Cookies and similar technologies: we use cookies, SDKs, and pixels to remember preferences, maintain sessions, and measure product performance. You can manage preferences through your browser or device settings.
• Support communications: messages, attachments, and contact details you share with our support or caregiver success team.
• Marketing preferences: your choices for receiving newsletters, product updates, or educational resources.

3. How We Use Personal Information

We use personal information for the purposes described below. We do not sell or rent personal data.

• Providing, personalizing, and improving mindful activities and routines.
• Curating adaptive content using AI within the guardrails defined by our educators.
• Managing subscriptions, renewals, rewards, and caregiver communications.
• Monitoring engagement to plan product improvements and measure outcomes.
• Performing analytics, debugging, and crash diagnosis to maintain reliability.
• Complying with legal obligations, enforcing our Terms, and preventing misuse.
• Responding to support requests, safety concerns, or wellbeing escalations.

4. Legal Bases for Processing (EEA/UK/Switzerland)

When we process personal data of individuals in the EEA, UK, or Switzerland, we rely on the following legal bases under the GDPR:

• Consent: for optional wellbeing check-ins, marketing communications, and analytics where required.
• Contract: to deliver the Service when you create an account or subscribe.
• Legitimate interests: to improve the Service, safeguard users, and defend our legal rights. We balance these interests against your privacy rights.
• Legal obligations: to meet bookkeeping, tax, consumer protection, or regulatory requirements.
• Vital interests: to address urgent safety concerns where allowed by law.

5. How We Share Personal Information

We share personal information only with trusted service providers and as required by law. We do not sell personal data. We currently use or may use:

• Analytics and product measurement: Firebase Analytics, Google Analytics, Mixpanel, and Amplitude to understand feature usage and improve product experience.
• Deep linking and attribution: Branch.io to power referral links and campaign measurement.
• Crash reporting and diagnostics: Crashlytics and platform tools to resolve stability issues.
• Customer support and communications: in-app chat or ticketing tools that process the messages you send us.
• Marketing measurement: Meta Pixel and Apple platform insights to evaluate the performance of advertising campaigns. We do not use wellbeing check-ins for targeted advertising.
• Compliance and legal: regulators, authorities, or advisers when necessary to comply with the law, enforce our Terms, or protect the rights, safety, or security of users.

Where required, we execute data processing agreements and ensure that partners commit to appropriate confidentiality and security obligations.

6. Subscriptions and Payments

Subscription purchases made through the Apple App Store, Google Play Store, or other marketplaces are processed directly by those platforms. We receive confirmation of your purchase, plan type, and renewal status but do not collect or store full payment card numbers. Please review the privacy notices of the relevant app store for more information on their data practices.

7. AI-Assisted Experiences

We use AI tooling to recommend content and generate supportive prompts. Human experts design the guardrails for these systems. AI is never used to make automated decisions that produce legal or similarly significant effects about you or your child. We monitor AI outputs for quality and safety and encourage caregivers to review recommendations before sharing them with children.

8. Data Retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Wellbeing check-ins are stored until you delete them or request removal. We retain aggregate, de-identified insights for analytics after personal data is deleted.

9. Children’s Privacy

Mindful Minis is intended to be used with parental or guardian supervision. We do not knowingly collect personal information directly from children without verifiable parental consent. If we learn that a child under the age thresholds required by the United States Children’s Online Privacy Protection Act (COPPA), the EU/UK GDPR, or India’s Digital Personal Data Protection Act (DPDP Act) has provided information without their caregiver’s consent, we will delete it promptly.

Caregivers may review, modify, or delete a child profile or wellbeing entry at any time from within the app or by submitting a request through our Data Rights Request Center.

10. International Data Transfers

We operate from India and may process data on servers located in other countries. When transferring personal data outside your home jurisdiction, we use appropriate safeguards such as Standard Contractual Clauses, intra-group agreements, or other lawful transfer mechanisms. You can contact us for more information about these safeguards.

11. Security

We employ administrative, technical, and physical safeguards—including encryption in transit, access controls, secure development practices, and regular monitoring—to protect personal information. No system is completely secure, so we encourage caregivers to use strong passwords, keep devices updated, and contact us immediately if they suspect unauthorized access.

12. Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy.
• Request correction of inaccurate or incomplete data.
• Request deletion or anonymization of your personal information.
• Object to or restrict certain processing, including analytics or marketing.
• Withdraw consent at any time without affecting the lawfulness of prior processing.
• Lodge a complaint with your local data protection authority (EEA/UK/Switzerland), the US Federal Trade Commission, or India’s Data Protection Board, as applicable.

California residents may request a list of categories of personal information shared for business purposes under the California Consumer Privacy Act (CCPA). We do not sell personal information or share it for cross-context behavioural advertising.

13. How to Exercise Your Rights

You can exercise your rights or submit account deletion requests through our Data Rights Request Center. After verifying your identity, we will respond within 30 days or the timeframe required by applicable law. You may also email info@mindfulminis.in if you prefer not to use the form.

We may ask for additional information to confirm your identity and relationship to the child user before fulfilling requests. Authorized agents may submit requests on behalf of another individual where allowed by law.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will post the updated policy and revise the "Last updated" date. We may also notify you through the Service or by email. Continued use of the Service after an update signifies your acceptance of the revised policy.

15. Contact and Grievance Officer

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact:

In India, our Grievance Officer can be reached at the same contact details. We aim to resolve inquiries within 30 days. If you are dissatisfied with our response, you may escalate the matter to the appropriate data protection authority in your region.