Privacy Policy

1. Information we collect

When you register an account or use the Platform, we may collect:

• Parent or guardian full name and email address.
• Password, stored in encrypted form.
• Phone number, for verification and support.
• Teen learner name and age or date of birth, for age-appropriate content delivery.
• Payment information, processed securely through third-party payment providers.
• Your communications with our support team.

When you use our Platform, we automatically collect:

• Device type, browser, operating system and IP address.
• General geographic location, at city or country level.
• Pages visited, features used and time spent on the Platform.
• Course progress, scenario choices and learning outcomes.
• Cookies and similar technologies — see section 5.

2. How we use your information

We use the information we collect to:

• Create and manage your account.
• Deliver personalised learning content appropriate for your teen’s age.
• Track and display learning progress in the parent dashboard.
• Process payments and send receipts.
• Provide customer support and respond to queries.
• Send important platform updates, new course announcements and learning tips. You can opt out at any time.
• Improve our platform through anonymised usage analytics.
• Comply with applicable legal obligations.

3. Children’s privacy

SPAFA is designed for teenagers aged 12 to 18, and we take the privacy of minors extremely seriously. All teen learner accounts are created and managed by a parent or guardian. We do not collect more information from minors than is necessary for the learning service, and we do not display advertisements to minors.

We comply with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 under India’s IT Act.

4. Data sharing

We do not sell your personal data. We may share limited data only in the following circumstances:

• Service providers — trusted third parties who help us operate the Platform. These providers are contractually bound to protect your data.
• Legal requirements — if required by law, court order or government authority.
• Business transfers — in the event of a merger, acquisition or sale of assets, your data may be transferred. You will be notified in advance.

The service providers SPAFA uses today are:

• Razorpay, which processes payments made through the Platform.
• SendGrid, which delivers transactional email such as verification codes and receipts.
• Zoho CRM, which holds enquiry and reservation records so our team can follow up.

5. Payment information

Payments are collected by Razorpay. Card numbers, CVV codes, UPI credentials and net-banking credentials are entered with the payment provider and are not stored by SPAFA. What we keep is the record of the transaction — its reference, amount, status and date — so that we can issue a receipt and answer questions about it.

6. Cookies

We use cookies and similar technologies to keep you logged in to your account, remember your preferences, and analyse how the Platform is used using anonymised data. Your browser also stores small amounts of information locally so that a form you have part-filled, or the name you gave us, survives a page reload.

You can control cookie settings through your browser. Disabling cookies may affect certain Platform features, including staying signed in.

7. Data retention

We retain your personal data for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by contacting privacy@leanhyphen.com. We will process deletion requests within 30 days.

8. Data security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using SSL/TLS.
• Passwords are stored in hashed and salted form.
• Payment data is handled by PCI-DSS compliant payment processors.
• We conduct regular security reviews.

9. Your rights

As a user, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, email privacy@leanhyphen.com.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or a prominent notice on the Platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.

11. Contact us

For privacy-related queries or requests, please contact the LeanHyphen Privacy Team by email at info@leanhyphen.com or visit leanhyphen.com.