Privacy Policy
The short version. We collect only what we need to help a student study. A parent must give permission before we process any data about a child, and can see, correct, delete or withdraw it at any time. We show no advertising, we do not track anyone across other apps or websites, and we never sell student data. Student data is stored in India.
1. Who we are
Hoody is operated by Hello World Technologies, registered at B302, Kumar Sahawas, Baner Pashan Link Road, Pune, Maharashtra, India 411021 ("Hoody", "we", "us"). We are the Data Fiduciary for the personal data described in this policy, except where we process data on behalf of a school under a separate agreement, in which case the school is the Data Fiduciary and we act as a Data Processor on its documented instructions.
For anything in this policy, contact hello@hoodyapp.in.
2. What we collect
| From | What | Why |
|---|---|---|
| Parent | Name, email address, password (stored hashed), consent record | To create and secure the account, and to record permission for a child's data |
| Student | Name, class, section, board/curriculum, subjects, language | To serve the correct syllabus content |
| Student — study data | Answers, scores, time spent, topics found difficult, questions typed or photographed | To build the study plan, track progress, and show the teacher which topics the class is struggling with |
| Teacher | Name, school email, class assignment | To provide the teacher portal |
| School | Student and parent names and email addresses, class lists | To create accounts under a school licence |
| Automatic | Device type, app version, operating system, error logs, approximate region derived from IP | To keep the service working and diagnose faults |
We do not collect email addresses, phone numbers or precise location from children. Students sign in with a class code, their name from the class list, and a PIN issued by their teacher.
3. Children's data and parental consent
Under the Digital Personal Data Protection Act, 2023, a person under 18 is a child. We do not process a child's personal data until a parent or lawful guardian has given consent through a verified account.
Before a student can use Hoody, their parent must:
- Verify control of their email address using a one-time code;
- Review an itemised notice describing exactly what we collect and why; and
- Give a separate, specific, affirmative consent for their child's data. This is not bundled with acceptance of our Terms of Service.
We record the consent, the version of the notice shown, and the date and time it was given. A parent may withdraw consent at any time from their account settings or by writing to us; it is as easy to withdraw as it was to give. When consent is withdrawn we stop processing the child's data and delete it in line with section 7.
We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children, and we do not run advertising of any kind.
4. Why we process personal data
- To create and secure accounts, and to authenticate users
- To identify what a student already knows and build a study plan
- To generate and grade practice, and to show progress
- To show a teacher which concepts their class is finding difficult
- To send a weekly progress summary to a parent
- To keep the service reliable, secure and free of misuse
- To comply with law
We do not use student data to build advertising profiles, and we do not use it to train third-party AI models.
5. Who we share data with
We do not sell personal data. We share it only with the following, and only as needed:
| Recipient | Purpose | Location |
|---|---|---|
| The student's school and teacher | Progress and topic-level results for students in that teacher's class | India |
| The student's parent | Their own child's progress | — |
| Amazon Web Services | Hosting, database, email delivery | India (Mumbai) |
| Anthropic | Generating and checking study content. Where a student's typed question is processed to produce an answer, it is sent without their name or account identifier. | Outside India |
We may also disclose data where required by law, or to protect the safety of a child or another person.
6. Where data is stored
Student accounts, study data and school data are stored on servers located in India, encrypted in transit (TLS) and at rest. Limited processing may occur outside India where a service provider listed above operates internationally; in those cases we transfer the minimum necessary and require appropriate contractual protections.
7. How long we keep data
- Active accounts: for as long as the account is in use.
- School licences: until the licence ends, then deleted or returned within 90 days unless the school instructs otherwise.
- After consent is withdrawn or an account is deleted: personal data is deleted within 30 days, except where we must retain it by law.
- Consent records: retained after withdrawal, because we may need to demonstrate that consent was properly obtained. These contain no study data.
- Anonymised, aggregated statistics that cannot identify anyone may be kept to improve the service.
8. Your rights
You may:
- Access the personal data we hold about you or your child
- Correct anything inaccurate or incomplete
- Erase personal data
- Withdraw consent at any time
- Nominate another person to exercise these rights if you are unable to
- Complain to us, and to the Data Protection Board of India
Use the controls in your account, or write to hello@hoodyapp.in. We respond within 30 days.
9. Grievance Officer
If you are unhappy with how we have handled your data or a request, contact our Grievance Officer:
Mrs. Shalini Dilip Pradhan
hello@hoodyapp.in
B302, Kumar Sahawas, Baner Pashan Link Road, Pune, Maharashtra, India 411021
If you remain dissatisfied you may complain to the Data Protection Board of India.
10. Security
We encrypt data in transit and at rest, hash passwords, restrict access to the small number of people who need it, keep audit logs of access to consent and student records, and take regular backups. No system is perfectly secure; if a breach affects your data we will notify you and the Data Protection Board as required by law.
11. What we never do
- Show advertising to students
- Track users across other apps or websites
- Sell, rent or trade personal data
- Allow students to message each other, or to be contacted by strangers
- Use children's data for behavioural profiling or targeted advertising
12. Cookies
Our website uses only what is necessary to make it work and to remember your preferences. We do not use advertising or cross-site tracking cookies. The Hoody apps use local device storage to keep you signed in and to hold study content for offline use.
13. Changes to this policy
If we make a material change we will notify account holders by email and, where the change affects what we do with a child's data, obtain fresh parental consent. Every version is archived and identified by number, so a parent can always see the version they agreed to.
14. Contact
hello@hoodyapp.in
Hello World Technologies, B302, Kumar Sahawas, Baner Pashan Link Road, Pune, Maharashtra, India 411021