1. Why Parental Consent Exists
The Digital Personal Data Protection (DPDP) Act, 2023 treats every person under 18 years as a Child. It requires a Data Fiduciary (us) to obtain verifiable consent of the parent or lawful guardian before processing any child's personal data — and forbids tracking, behavioural monitoring and targeted advertising directed at children.
We welcome this. It matches what we've believed since our first baby onesie: children deserve the highest protection, not the lowest bar.
2. What Consent We Take Today (Waitlist Phase)
Only a parent/guardian (18+) fills the waitlist form. We ask for the parent's name, parent's email, and the child's age group (a range like "6–8 years" — never a birth date).
You tick an explicit consent checkbox describing exactly what we'll do (send launch updates) and your rights (withdraw anytime). Silence or pre-ticked boxes are not consent.
We email you a confirmation from education@nappilos.com — creating a dated record of consent (what, when, to whom), as good practice under the DPDP framework.
No child identity is stored. We never ask a child's name, photo, school, contacts or documents at this stage.
3. What Consent Will Look Like at Platform Launch (Stronger Verification)
When the learning platform opens, accounts will be parent-created and parent-controlled. Consent verification will follow the DPDP Rules (as notified, fully in force by 2026), using methods such as:
- Parent account first: the parent registers and verifies their own email/mobile before any child profile can exist;
- Voluntary verification options as permitted by the Rules — e.g., OTP-based verification, or token-based verification through DigiLocker / government-issued digital services (only if you choose that route — alternatives will always be available);
- Re-consent prompts when a child crosses age bands or new processing begins;
- Zero tracking of children: no behavioural ads, no cross-site profiling, no selling of data — now and forever.
We will publish the exact verification flow on this page before launch and give waitlist families early notice.
4. Your Parent Controls — The Full Toolkit
| You Can… | How | Our Timeline |
|---|---|---|
| 📝 See exactly what we hold | Email "ACCESS" to education@nappilos.com | Within 30 days (usually 48h) |
| ✏️ Correct any detail | Email "CORRECT" + the fix | Within 30 days |
| 🗑️ Delete everything | Reply "DELETE" or email us | Within 30 days + written confirmation |
| 🚪 Withdraw consent entirely | Reply "UNSUBSCRIBE" to any email | Immediate stop; data erased in 30 days |
| 👤 Nominate a guardian to act for you | Email us the nomination (DPDP right) | Recorded within 30 days |
| 📣 Complain if unhappy | Grievance Officer (below) → Data Protection Board of India | 48h acknowledgment / 30-day resolution |
5. What We Will Never Do (Our Undertaking to Parents)
- ❌ Never advertise to children or profile them for ads (banned by DPDP 2023 and by us)
- ❌ Never sell, rent or trade any family's data
- ❌ Never use dark patterns, guilt mechanics or purchase pressure on kids
- ❌ Never ask children for identity documents, selfies or location
- ❌ Never let children bypass parental controls
- ✅ Always design to the best interests of the child, benchmarked to COPPA, the UK Age Appropriate Design Code and EU GDPR-K
6. Consent FAQ
India's DPDP Act 2023 classifies everyone under 18 as a child and requires verifiable consent from a parent or lawful guardian before processing a child's personal data. Nappilos follows this fully — no child data is processed without it.
Today: tick the consent checkbox on the waitlist form (parent only) and watch for our confirmation email. At launch: parent-account creation plus verification options permitted under the DPDP Rules (such as OTP or DigiLocker-based methods). Full flow will be published here before launch.
Reply UNSUBSCRIBE or DELETE to any of our emails, or write to education@nappilos.com. We act within 30 days and confirm in writing.
Only the age group you selected (a range, not a birth date). We never collect a child's name, photo, school, location or identity documents. Data minimisation is the law — and our design principle.
Simply email us at education@nappilos.com and we will remove the entry, or transfer it to the correct parent's details with fresh consent. No questions asked.
A parent, or a person legally caring for the child (as recognised under Indian law, e.g., under the Juvenile Justice Act 2015 or Guardians and Wards Act 1890). If you are the child's lawful guardian, the same consent rights apply to you.
7. Contact — Consent & Data Protection
Data Protection Officer & Grievance Officer: [Mr.Reddy]
📧 education@nappilos.com • ☎️ [73825 83039]
🏢 [Hyderabad, Telangana], India
Acknowledgment within 48 hours; resolution within 30 days (IT Rules 2021).