Privacy policy

Who we are

TypeMasti is a learning app for children under 10 and an initiative by InfiWebs. It is run by InfiWebs Pvt. Ltd., Pune, India. In this policy, "we" means InfiWebs Pvt. Ltd. and "you" means the parent or guardian who holds the account. It covers typemasti.com and the TypeMasti app, and it says the same thing as the promises you agree to on the consent screen, in more detail.

What we collect

We keep the smallest set of information that lets the app work:

• About you: your email address and your name, so you can sign in with a one-time code and receive the weekly summary.
• About your child: first name, age band (Explorer, Builder or Master) and the avatar they pick. We never ask for a surname, date of birth, photo, school or address.
• Learning progress: lessons completed, answers and scores, stars, medals, streaks and minutes spent. This is what the weekly report is made of.
• Masti Buddy exchanges: what your child asks the AI buddy and what it answers, kept so you can read every exchange in your child's report.
• Billing records: your plan, seats and invoices. Card, UPI and bank details are entered on Razorpay's secure page and held by Razorpay, never by us.
• Technical basics: one session cookie that keeps you signed in, and request logs (IP address and browser type) kept briefly to keep the service secure.

Why we use it

We use this information only to:

• sign you in and keep your account secure;
• pick up each lesson where your child left off and choose the next one;
• show you what was learned each week, in the app and by email;
• run Masti Buddy and show you every exchange;
• bill your plan and send invoices;
• answer when you write to us.

Nothing else. We do not build profiles of children, do not use their data for advertising and do not sell, rent or share personal data with anyone except the providers listed below.

Children

• Children never create accounts. A parent signs up, agrees to this policy and creates each child profile. A child gets in only by tapping their name on the family device, and the parent area sits behind a grown-ups gate.
• Children under 7 never chat freely with anyone. For the Explorer (3 to 5) and Builder (5 to 7) bands, Masti Buddy only explains the lesson in front of them and reads stories built from words they already know. There is no open chat box.
• Ask Buddy, where a child types a question, is available only in the Master band (7 to 10) and only after you turn it on in Settings. Every exchange is visible to you in your child's report.
• The child's screens carry no advertising, no prices, no links out of the app and no third-party trackers.

Consent and your rights

Under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, a child's personal data may be processed only with the verifiable consent of a parent or lawful guardian, only for the purpose it was given for, and must be erased when it is no longer needed. This is how that works in TypeMasti:

• Verifiable consent: before any child profile is created, you confirm as the parent or guardian that you agree to the promises on the consent screen and to this policy. We record the date and time, and we send the code that signs you in to your own email address.
• Purpose limitation: we use the data only for the purposes listed above.
• Access and download: Download data in Settings gives you a copy of everything we hold about a child.
• Correction: change a child's name, age band or avatar in Settings at any time.
• Erasure: to delete your child's data, open Settings and choose Delete this child. It removes the profile and every lesson, star, medal, setting and Masti Buddy exchange. You can also email [email protected] and we will do it for you. To close your whole account, email us.
• Withdrawing consent: deleting a child, or asking us to, withdraws your consent for that child. The app cannot keep working for them without the data, so their profile ends there. Nothing else about your account changes.
• Complaints: write to us first. If you are not satisfied with our answer, you may approach the Data Protection Board of India.

How long we keep it

• Progress, settings and Masti Buddy exchanges are kept while the child's profile and your account exist, so your child can always pick up where they left off.
• When you delete a child or ask us to, the data is removed from our systems within 30 days, backups included.
• Sign-in codes expire within minutes and are not kept after use.
• Invoices name the parent, not the child, and are kept for as long as Indian tax law requires, even after an account is closed.
• The session cookie ends when you sign out or after a period without use.

Who processes data for us

We use a small number of service providers. Each receives only what it needs for its job, under terms that forbid any other use:

• Cloudflare hosts the app and stores your data in its Asia-Pacific region.
• Razorpay processes payments. Razorpay holds your payment details; we see the plan, the amount, the status and the last digits of the method used.
• Anthropic generates Masti Buddy's answers. The text of the exchange and the lesson it came from are sent to produce the reply; your email address and billing details are never sent.
• ElevenLabs and OpenAI are used by our team when we create lesson content, for narration audio and pictures. They never receive any information about you or your child.
• Zoho ZeptoMail (Zoho Corporation) delivers sign-in codes, weekly summaries and account emails to your address.

No other company receives personal data from us. We do not use an advertising network, an analytics kit or a social media plug-in anywhere in the app.

Cookies and your device

TypeMasti sets one cookie: a session cookie that keeps you signed in. It is not used for advertising or for tracking you across other sites, and there is no cookie banner because there is nothing to opt into. The app also keeps a little data on your device, such as which child was chosen last, so it opens quickly and works offline; that stays on the device.

Security

Everything travels over HTTPS. You sign in with a one-time code sent to your email, so there is no password to steal or forget. Access to data inside InfiWebs is limited to the people who run the service. If a breach ever affects your data, we will tell you and the Data Protection Board of India as the law requires.

Changes to this policy

If we change this policy, we update the date at the top. For a change that affects how your child's data is used, we email you before it takes effect and ask for your consent again where the law requires it.

Contact

Questions about privacy go to [email protected]. By post: InfiWebs Pvt. Ltd., Pune, Maharashtra, India. For how to reach us and how quickly we reply, see the contact page.