Who We Are
Spell Wizards is a learning application for children, operated by Yugaya Health Private Limited, a company incorporated in India having CIN U86900TS2024PTC191073. In this policy, "we", "us" and "our" mean Yugaya Health Private Limited. "You" means the parent or legal guardian who holds an account. "The app" and "the service" mean the Spell Wizards mobile application and the website at thespellwizards.com.
Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described in this policy.
This policy explains what personal data we collect through the Spell Wizards app and website, why we collect it, who we share it with, and what rights you have. It applies to parents and guardians who create accounts, and to the children whose profiles are created within those accounts. It does not apply to any third-party website or service you reach through a link from our app or site, and should be read alongside our Terms and Conditions.
How Accounts Work, and Who Consents
Spell Wizards uses a single account model designed to keep children out of the sign-up process entirely.
Only a parent or legal guardian aged 18 or over may create an account.
The parent then creates one or more child profiles from within their account. Only the parent can enter or change a child's details.
A child signs in to their own profile using a simple login created by the parent. This gives access to learning content and progress — it does not allow the child to change account details, make purchases, or enter personal information.
By creating a child profile, you confirm that you are that child's parent or legal guardian and that you consent, on the child's behalf, to the processing described in this policy. You may withdraw that consent at any time — see the "Your Rights" section.
What We Collect, and Why
We collect only what the service needs. Each purpose below is separate — we do not reuse data for unrelated purposes without asking you first.
Parent or Guardian Data
Name
To identify the account holder and address you in communications
Email address
To create the account, send progress reports, receipts and service notices
Mobile number (if provided)
Account recovery and, where you have asked for it, service messages
Password
Stored only as a salted cryptographic hash — we never store or see your password
Subscription and payment records
To process payments, provide receipts and meet tax and accounting obligations
Child Profile Data — Entered by the Parent
Child's first name or nickname
To personalise the app and label the child's profile
Age, or class or grade
To place the child at the right learning level
Avatar chosen from our set
Personalisation. We do not accept uploaded photographs of children.
Learning progress: words attempted, scores, streaks, levels completed
To adapt difficulty, run spaced repetition, and produce the progress reports we send you
Technical Data
Device model, operating system, app version
To make the app work correctly on your device and to fix faults
Crash and error reports
To diagnose and fix problems
IP address and approximate region (country or state level)
Security, fraud prevention, and showing the correct currency and pricing
We do not collect precise or GPS location from any user.
Children's Personal Data
Under the DPDP Act, anyone under the age of 18 is a child. Spell Wizards is built for children aged roughly 5 to 14, so we treat every child profile as a child's data and apply the strictest handling to it.
We process a child's data only after their parent or guardian has given verifiable consent.
Children cannot create accounts, change account settings, or make purchases.
Children are not required to share personal information, and cannot message other users. There is no chat, no comments, no user-to-user contact of any kind.
A child's learning data is used to teach that child and to report their progress to their own parent. It is not used for any other purpose.
We do not undertake any processing that is likely to have a detrimental effect on a child's wellbeing.
What We Never Do
We do not display advertisements to children anywhere in the app.
We do not carry out targeted or behavioural advertising directed at children.
We do not sell, rent or trade personal data, of parents or of children, to anyone.
We do not share a child's data with third parties for their own marketing purposes.
We do not collect precise location data.
We do not use children's data to train third-party advertising systems.
Storage, Transfers & Retention
Personal data is stored on servers located in India. Some of our service providers may process data outside India. Where personal data is transferred outside India, we do so in accordance with the DPDP Act and any restrictions notified by the Central Government on transfers to particular countries or territories, and we put contractual safeguards in place with the receiving provider.
How Long We Keep Data
Account and child profile data
For as long as the account is active
All account data after you delete the account
Deleted or irreversibly anonymised within 30 days, except where law requires otherwise
Inactive accounts
If an account has had no activity for 24 months, we notify you and then delete the data unless you sign in
Payment, invoice and tax records
Retained for the period required under Indian tax and company law, currently 8 years
Compliance records
Retained for the minimum period the law requires
Deleting a single child profile removes that child's data on the same basis, without affecting the rest of the account.
How We Protect Data
We use reasonable security safeguards appropriate to the sensitivity of children's data, including:
Encryption of data in transit (TLS) and at rest
Passwords stored only as salted cryptographic hashes
Access to personal data restricted to staff who need it, under access controls and logging
Regular backups, and monitoring for unauthorised access
No system can be guaranteed completely secure. Please keep your account password confidential and tell us at once if you believe your account has been accessed without your permission.
Your Rights
As the account holder, you may exercise the following rights for yourself and on behalf of your children:
Access
Obtain a summary of the personal data we process about you and your children.
Correction and completion
Correct data that is inaccurate or misleading, and complete data that is incomplete. Most details can be edited directly in the app.
Withdraw consent
Withdraw your consent at any time. Withdrawing consent will end the service, because we cannot run the app without the data described above. Withdrawal does not affect processing carried out before you withdrew.
Grievance redressal
Raise a complaint with our Grievance Officer, as set out below.
To exercise any of these rights, use the account settings in the app or write to our Grievance Officer. We may need to verify your identity before acting on a request. We respond to requests without undue delay and in any event within the timelines the law requires.
Grievance Contact
Response time
We acknowledge complaints within 7 working days and work towards a resolution within 90 working days of receipt.
Data breaches: If a personal data breach occurs, we will inform every affected user without delay, describing what happened, the likely consequences, what we are doing about it, and what you can do to protect yourself.
Changes to this policy: We may update this policy from time to time. If a change materially affects how we handle your family's personal data, we will notify you by email and in the app before it takes effect, and where the law requires it, we will ask for your consent again. The version number and effective date at the top of this document always show the current version. Previous versions are available on request from our Grievance Officer.
Questions About Your Privacy?
For anything not covered above, or any privacy-related questions and complaints, write to us and we'll get back to you as soon as possible.
support@thespellwizards.com© 2026 Yugaya Health Private Limited. All rights reserved.