This Privacy Notice explains how CRAFTZ STUDIO (“we”, “us”, “our”), operator of DigixSkill Kids Learning Studio (the “Service”), collects and uses personal data. CRAFTZ STUDIO trades as DigixSkill.

Who is the controller

CRAFTZ STUDIO is the data controller for personal data processed through the Service. For any questions about this notice or your data, contact us at info@digixskill.in.

What data we collect

• Parent account: email address, sign-in identifiers, verification codes.
• Child profile (created by the parent): nickname, avatar, age band, learning progress, rewards, streaks and certificates. We do not ask for a child's email, phone, address, photo or contact details.
• Purchase data: plan purchased, order and transaction identifiers, invoice number, amount, currency, region, and whether the purchase is active. We do not store card numbers.
• Support messages: anything you send us by email or through the in-app “Report an Issue / Feedback” link.
• Technical data: IP address (used briefly for region detection and abuse prevention), browser type, device type, coarse country, and standard server logs.

Why we use it (purposes and legal basis)

• Provide the Service (create your account, save progress, sync entitlement across devices) — legal basis: performance of the contract with you.
• Process purchases and issue receipts — legal basis: performance of the contract and our legal obligations (tax and accounting).
• Keep the Service secure (rate limiting, fraud and abuse prevention) — legal basis: legitimate interests.
• Respond to support requests — legal basis: legitimate interests and, where you initiate contact, your request.
• Improve the product (aggregate, non-identifying usage patterns) — legal basis: legitimate interests.

We do not run behavioural advertising. We do not sell personal data. Kid Mode contains no third-party advertising SDKs and no chat with other users.

Who we share data with

• Paddle.com Market Ltd (“Paddle”) — our Merchant of Record for international sales. Paddle processes your payment, calculates and remits taxes, issues the invoice, and handles refund and billing enquiries. Data shared with Paddle includes your email, billing details you enter at checkout, purchase amount, and IP address. See Paddle's Privacy Policy and Buyer Terms.
• Razorpay Software Private Limited — payment processor for orders in India. Data shared includes email, purchase amount and payment identifiers.
• Hosting and infrastructure providers — used to run the Service, store your account, and deliver pages. Providers act as processors under contract.
• Email delivery providers — to send sign-in codes and receipts.
• Professional advisers (legal, accounting) where necessary.
• Authorities when required by law or to protect our rights.

International transfers

Some of our providers (including Paddle) may process data outside your country. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

How long we keep data

• Account and child profiles: kept while your account is active. Deleted or anonymised within 30 days of account deletion, unless a longer period is required by law.
• Purchase records and invoices: retained for up to 8 years to meet tax and accounting obligations.
• Server and security logs: up to 90 days.
• Support correspondence: up to 24 months after the issue is resolved.

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), encryption at rest for our database, access controls with least-privilege service roles, row-level security on user data, signed and verified payment webhooks, and secrets stored outside source code.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your account and personal data.
• Restrict or object to certain processing.
• Port your data to another service.
• Withdraw consent, where processing is based on consent.
• Complain to your local data protection authority.

You can export or delete your account and child profiles from Parent Settings, or email us at info@digixskill.in. We aim to respond within 30 days.

Children

The Service is designed to be used by children under a parent's account. Only parents can create the account and any child profiles. We do not knowingly collect direct contact information from children. If you believe a child has provided us with personal data other than what a parent entered in a profile, please contact us and we will delete it.

Cookies

We use only essential cookies and local storage needed to keep you signed in, remember your preferences and run the app. We do not use advertising or cross-site tracking cookies.

Changes to this notice

We may update this notice from time to time. Material changes will be highlighted on this page and, where appropriate, notified by email.

Contact

CRAFTZ STUDIO · info@digixskill.in