Who We Are
Ojasly ("we", "our", "us") operates BrainQuest Jr, a children's educational application. We are committed to protecting the privacy of children and their families.
Scope of This Policy
This policy applies to all users of BrainQuest Jr globally. We comply with the following regulations, and where laws conflict, we apply the stricter standard:
What Data We Collect & Why
We collect the minimum data necessary to deliver the learning experience. All data is entered by a parent or guardian — never directly by the child.
| Data Collected | Purpose | Legal Basis |
|---|---|---|
| Child's First Name | Personalise the learning experience | Parental consent |
| Child's Age (in years) | Deliver age-appropriate content | Parental consent |
| Location (City / Region) | Localise curriculum and language | Parental consent — collected only with explicit approval |
| School Name | Link content to school curriculum | Parental consent |
| Parent / Guardian Email | Account communication, consent verification, data deletion requests | Legitimate interest + parental consent |
| Consent Timestamp | Compliance record-keeping | Legal obligation |
Parental Consent
Before any data is collected, we require verifiable parental consent. By law (COPPA, GDPR-K, DPDP), we will not collect any data about a child without this verified consent. If we discover consent was not properly given, we will delete all associated data immediately.
How We Store & Protect Data
Storage
All data is stored in Supabase, a SOC 2 Type II compliant cloud database.
Encryption
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
Access Control
Only authorised personnel with a business need can access data. All access is logged and audited.
Retention
Data is retained for as long as the account is active. Parents may request deletion at any time (see Section 7).
Data Region
We store data in ap-south-1 (Asia Pacific — Mumbai).
Data Sharing
We share data only in these limited cases:
- Supabase (infrastructure provider) — bound by data processing agreements
- Legal authorities — only when required by law, court order, or to protect safety
Your Rights as a Parent or Guardian
You have the following rights at any time:
Access
Request a copy of all data we hold about your child
Correction
Ask us to correct any inaccurate information
Deletion
Request deletion of all data — actioned within 30 days
Withdraw Consent
Withdraw at any time; we will stop processing and delete data
Portability
Request your data in a machine-readable format where applicable
We will respond within 30 days and verify your identity before actioning any request.
No Advertising
BrainQuest Jr contains no advertising, no in-app purchases directed at children, and no behavioural profiling. We do not use advertising SDKs or analytics tools that track children.
Changes to This Policy
If we make material changes to this policy, we will:
- Notify the parent/guardian by email at least 30 days before the change takes effect
- Require fresh consent if the change affects how children's data is processed
Contact Us
If you have questions, concerns, or complaints about this policy: