Privacy policy

Your child’s privacy comes first

Last updated: 2 October 2026

The short version

  • Nothing about your child. No child accounts, no names, no photos, no voice recording, no chat.
  • No ads and no trackers. No advertising, no third-party analytics. The only cookie is one sign-in cookie, and only for parents who sign in.
  • Parent email only if you choose. We only have your email if you sign up for the founding-family offer, ask us to tell you when a new story is ready, or buy a plan.
  • We never see your card or UPI details. Payments go straight to Paytm or Stripe.
  • We never sell or share your data for marketing.
  • Delete any time. Email info@techsahyogi.com and we’ll delete it.

Who we are

Nani Katha (nanikatha.com) is run by Tech Sahyogi Innoventure Pvt Ltd, a company in India. We decide how the information described here is used. Our full details are on the contact page.

Questions, requests or complaints: info@techsahyogi.com. This address also reaches the person responsible for handling privacy complaints (our grievance officer under India’s data protection law).

What we collect, and why

Founding-family sign-up
only if a parent fills in the form		 Your email, your country, your child’s age (a number only, never a name), the language you’d like next, the language of the page, and the link tag described below if you arrived through a shared link. We use it to email you the founding-family offer and big news about Nani Katha, and to decide which stories and languages to make next.
“Tell me when it’s ready”
only if a parent asks, on a “Coming soon” story		 Your email, which coming-soon story you asked about, the language of the page, and the link tag described below if you arrived through a shared link. In the game, this form is behind the grown-ups check. We use it to email you when that story (and other new stories) are ready, and to decide which stories to make first.
Buying a plan
only if a parent buys one		 Your email, the plan you chose, your region (India or outside India), your language, and the payment references the payment company sends us: payment and subscription IDs, amount, currency, date and status. We use it to give you access, send receipts and reminders, handle cancellations and refunds, and keep the accounts the law requires. We never receive your card, UPI or bank details.
Signing in
only for parents who sign in		 When you sign in, we email you a one-time link that works for 30 minutes. We keep a record that a sign-in happened (when, and for which account), so we can keep you signed in and stop misuse.
Anonymous play events
while a story is played		 Which story was opened (or which “Coming soon” story was tapped), the language, how far it got, choices made inside the story, badges earned, and the time. Each visit gets a random code that is forgotten when the page closes. Two plain numbers are added: how many different stories this device has started before, and how many times it has finished this story before. They are counts, not identifiers. If you arrived through a link we shared, the events also carry that link’s tag: a short label for where the link was posted, such as a social media post, a newsletter or a friend who passed it on (for example ig-reel or amb-priya). If you tap “Send to Nani or Dadi” after a story, we record only that a share happened. These records contain no name, email or IP address, and can’t be linked to a person, even when a parent is signed in. We use them to see which stories children finish, where they get stuck and whether they come back to play again.
Web server logs Like every website, our server briefly records each request: the IP address, the page asked for, and the browser type. We use these only to keep the site running and secure. They are deleted automatically after 14 days.

Payments

Payments in India, including UPI Autopay and cards, are handled by Paytm (Paytm Payments Services). Payments outside India are handled by Stripe. You enter your card, UPI or bank details on their secure payment page, and they process the payment under their own privacy policies. We pass them your email and an account number of ours, so they can send you their own receipts and autopay alerts. They tell us only whether the payment worked, along with the references listed above.

Cookies and what stays on your device

One sign-in cookie. If you sign in or buy a plan, we set one strictly necessary cookie, called nk_session, which keeps you signed in on that device. It lasts up to 400 days, or until you sign out. It isn’t used for tracking or advertising. We don’t use any other cookies, and families who just play the free stories get none.

Local storage. The game saves the chosen voice and text languages, sound settings, badges and story progress in your browser’s local storage, so your child can pick up where they left off. It also keeps the link tag above for 30 days. This stays on your device and is not sent to us, except for the two counts and the link tag described above. To remove it, clear this site’s data in your browser settings.

Emails we send

  • Emails about your plan: sign-in links, payment receipts, renewal reminders, payment problems and cancellation confirmations. These are part of the service, so we send them to anyone who buys a plan or asks for a sign-in link.
  • News and offers: only if you opted in on the founding-family form or asked to hear when a story is ready. You can unsubscribe any time.

Children

Nani Katha is made for children aged 4 to 8, so we designed it to work without collecting any personal information from children. Children never need to type anything, sign in, or share anything to play.

The sign-up form, buying a plan and the parent account are for parents and guardians only. Buying a plan, and opening the parent area from inside the game, both sit behind a “grown-ups only” check. If we learn that a child has sent us personal information, we will delete it.

We follow the principles of the US Children’s Online Privacy Protection Act (COPPA), the UK Age Appropriate Design Code (the Children’s Code), the EU and UK GDPR, and India’s Digital Personal Data Protection Act, 2023.

Who else is involved

  • Hosting: the site and all data are stored on our server with Amazon Web Services in Mumbai, India. If you live outside India, your details are transferred to and stored in India.
  • Email: emails about your plan are sent through Amazon Web Services’ email service (Amazon SES), which receives your email address and the message.
  • Payments: Paytm (India) and Stripe (outside India), as described above.
  • WhatsApp and social media: if you message us on WhatsApp, or follow or message us on Instagram, Facebook or YouTube, those services are run by Meta and Google under their own privacy policies, and we see your name, number or profile and your message. We use it only to reply. The “Send to Nani or Dadi” button, behind the grown-ups check, opens WhatsApp with a ready message that you choose whether to send. Our pages only link to these services; they don’t load anything from them.
  • Our YouTube channel: we post our own story videos to the Nani Katha YouTube channel using the YouTube API Services. This only uploads our videos to our own channel; it doesn’t collect or receive anything about people who watch them or use this site. YouTube’s Terms of Service and the Google Privacy Policy apply on YouTube.
  • Fonts: the page loads its fonts from Google Fonts, so your browser connects to Google, which sees your IP address. Google says it does not use this to build profiles.
  • Read aloud: most lines are recorded voices that come from our own server. If a recording is missing, the game uses your device’s built-in speech voice; on some browsers this voice is an online service run by the browser maker, which receives only the story sentence being spoken.

We don’t use any other outside services, and we never sell, rent or share your information for advertising.

How long we keep it

  • Sign-up details are kept until you ask us to delete them or unsubscribe, or until the founding-family programme ends, whichever comes first.
  • Your account is kept while you have a plan, and deleted when you ask us or when we no longer need it.
  • Billing records (the payment references and your email) are kept for 8 years, because Indian tax and company law requires it, even if you delete your account.
  • Anonymous play events are kept while they help us improve the stories.
  • Server logs are deleted after 14 days.
  • Backups are copies of the same data, kept for up to 30 days on our server and in storage our team controls.

Your choices and rights

Email info@techsahyogi.com from the address you used with us to:

  • see what we hold about you,
  • correct it,
  • delete it, or stop receiving news emails (you can also just reply “unsubscribe” to any news email from us),
  • delete your account: we cancel your plan and delete the account, keeping only the billing records the law requires.

We’ll reply within 30 days, and usually much sooner. You can withdraw your consent at any time. If you’re not happy with our answer, you can complain to your data protection authority, such as the Information Commissioner’s Office in the UK or the Data Protection Board of India.

Keeping data safe

The site uses HTTPS. Your details are kept on our own server, which only our team can access, and are never put in public places. Sign-in links work only once and expire after 30 minutes.

Changes to this policy

When we add a new service or change how we use information, for example when we launch the app, we’ll update this page first and change the date at the top. If a change affects how we use your email, we’ll tell you by email before it applies.