Privacy Policy

1. What we collect

• Account data: name, email, password (hashed by our auth provider, Supabase). We never see or store your plaintext password.
• Profile data you choose to add: English level, learning goals, occupation, native language, age band (18+ or under 18).
• Practice data: game scores, session transcripts, streaks, XP, BolCoins, and progress metrics — used to show your dashboard and personalise coaching.
• Voice audio: when you use voice mode, your audio is sent to Sarvam AI for speech-to-text and is not permanently stored by us during the pilot.
• Waitlist email: if you join the waitlist, we store your email to contact you about the launch.

2. Anonymous data contribution (opt-in)

At signup you can opt in to "Help build Indian AI". If enabled, anonymised practice data (never your name, email, phone, or any identifier) may be used to improve Indic speech AI. This is opt-in, reversible any time from your dashboard (Section 6, DPDP Act — consent and withdrawal). Turning it off stops future contribution immediately.

3. What we never do

• We never sell personal information.
• We never share your email, name, or phone with data buyers.
• We never show your email publicly — leaderboards display only your chosen name.
• We never store payment card details (payments are not live during the free pilot).

4. Processors we use

• Supabase — authentication and database (row-level security on all personal data).
• Vercel — hosting and serverless API.
• Sarvam AI / Groq — AI speech and language processing. Messages are processed to generate responses and scores; API keys and processing stay server-side.

5. Children

Users who select "Under 18" at signup get a school-safe experience: adult-themed question banks are disabled server-side and cannot be enabled by the client. We do not knowingly collect more data from minors than needed to run the service.

6. Moderation and safety

Conversations pass through safety filters. Abusive or explicit content earns strikes; repeated violations block the account. Crisis-related messages surface Indian helpline information (iCall: 9152987821).

7. Cookies and analytics

We use localStorage for your login session and preferences — no advertising cookies, no third-party trackers. If product analytics are enabled, they run cookieless and anonymised.

8. Your rights

You can access and correct your profile from the dashboard, withdraw data-sharing consent any time, and request account deletion by emailing info@bolnaseekho.in. We respond within 30 days.

9. Changes

We will update this page and the "Last updated" date when the policy changes. Material changes will be announced in-app.