A THOUGHTFUL APPROACH TO FAMILY DATA
Privacy at BrainBloom
V1 review notice. The rebuilt BrainBloom V1 has not launched. This new notice describes this website and the planned V1 service. Its operator, hosting, retention and parental-consent details need final review before family enrollment. The existing Android release has a different, local-only design and remains subject to its existing published policy until the corresponding Play update.
BrainBloom is a Japrinix Labs product designed to help children aged 6–10 practise everyday skills with their parents. This page explains what the V1 service is designed to use, why it is needed, and the controls available to families. “BrainBloom” is the product name; brainbloomworld.in is its website address.
1. Visiting this website
The public website introduces BrainBloom and provides privacy and support information. There is no parent or child web account, child input form, advertising tracker or analytics SDK added to these pages. Your browser requests pages, illustrations and fonts from our hosting service. Hosting and security systems may process technical request information, such as an IP address, requested URL, browser information and request time, to deliver and protect the website.
Links to Google Play, Japrinix Labs and email open other services. Those services have their own privacy practices. Selecting a district preview on this website changes the illustration locally; it does not create learning progress or a family profile.
2. Information used by the V1 mobile service
- Parent account: email address, password/PIN verification material, account language, verification and consent records, account status, and security/session records. Passwords and PINs are stored as salted hashes; the service does not need their original readable values.
- Child profile: a parent-managed nickname, age band, chosen avatar, learning language and linked family/device records. The rebuild does not request an exact birth date, a child email address, a photograph, precise location, race or ethnicity. Choosing an avatar does not ask a child to declare those characteristics.
- Learning activity: predefined choices, quest/content version, completion and sync information, rewards, and observations used for parent practice summaries. These records support everyday-skill practice; they are not an intelligence score or a medical assessment.
- Device and notification records: app-generated device/session identifiers and, when a parent enables notifications, a Firebase registration token and notification preferences.
- Support and parent requests: information a parent supplies in a support message, profile-limit request, export or deletion request, along with the request’s handling status. Please avoid including unnecessary sensitive information about a child.
3. Why the information is used
The service uses this information to authenticate parents and linked devices, provide age-appropriate adventures in the selected language, restore and synchronise saved activity, prevent duplicate rewards, show parent insights, respond to support and privacy requests, and investigate misuse or security incidents. Early Access is planned for approved families living in India; eligibility and consent checks are part of enrollment.
V1 is designed without advertising, data sales, public chat, public rankings, child free-text input, microphone input or runtime AI. Optional voice guidance and sound effects are prerecorded assets bundled in the Android app. No child speech is recorded or sent for synthesis. Profile provides voice, effects and mute controls.
4. Children and parent involvement
Parents create and manage family accounts, complete the applicable consent process, set child profiles and control linked devices. Children use predefined tap choices inside the Android application. A protected Parent Mode keeps adult account and family controls separate from the child experience.
The parental-consent process, eligibility checks and applicable legal requirements must be reviewed before V1 enrollment opens. A parent who believes that a child’s information was supplied without appropriate authorisation should contact us using the details below.
5. Hosting and service providers
The deployment design uses Hostinger for the website, API and a dedicated BrainBloom MariaDB database in the owner’s hosting subscription. HTTPS protects web/API transport. App credentials and saved offline activity use Android secure storage and an encrypted app cache. These measures reduce risk; no system can guarantee absolute security.
Google Firebase Cloud Messaging supports optional parent notifications. A registration token and the technical information needed for delivery are processed by the messaging service. BrainBloom’s notification payload is a generic refresh notice; it does not contain a child’s name or learning results. Current family information is fetched from BrainBloom after normal authentication. Delivery can be delayed or unavailable.
Parent verification, password reset and support communications may also use the configured email service. Service providers process information needed for their role. Final hosting location, processor arrangements and any cross-border handling will be confirmed before V1 enrollment; this notice does not claim that every provider processes all data only in India.
6. Choices and requests
V1 Parent Mode includes controls to manage profiles and linked devices, choose English or Tamil, manage optional notifications, export family information and request account deletion. Profile also controls optional app audio. Android notification settings can block notifications independently.
Account deletion and other sensitive actions require fresh parent authentication and may require proportionate identity verification. If you cannot access the app, use the contact route below. We will explain what is needed to identify and handle the request; please do not send a password or PIN by email.
Read the account-deletion process.
7. Keeping and deleting information
Family and learning records are kept to provide the account and its learning history, subject to the applicable retention and deletion policy. An approved deletion request revokes family sessions and is targeted to remove active family data within approximately seven days. That target is an operational aim, not a guaranteed statutory response period.
Minimal restricted security/audit records may be retained after active family data is removed. The current V1 implementation uses a 180-day restricted-audit retention setting, with a scheduled policy change before May 2027. Provider backups follow separate rotation and recovery procedures. Exact backup expiry, any legally required longer retention, and the final schedule need confirmation before enrollment; deleted data must not be silently reintroduced from a backup.
8. Updates and scope
We will update this page when the service, providers or privacy practices change. Material changes affecting family accounts will require an appropriate notice and consent handling where applicable. A website deployment is not the release of the V1 Android update. Google Play’s policy link and Data safety information must be reviewed together with the actual binary and backend before that update is rolled out.
9. Contact Japrinix Labs
For BrainBloom privacy questions, access/correction/deletion requests, or a concern about a child’s information, email contact@japrinix.com and put “BrainBloom privacy request” in the subject. This is the public contact address published by Japrinix Labs. A dedicated BrainBloom privacy/grievance contact and responsible legal-entity details remain subject to operator confirmation before enrollment.
Please provide only the minimum account information needed to locate your request. Do not include a password, PIN, identity document or private child information unless a verified, proportionate follow-up process specifically requires it.