1. Who we are
BolBolo is provided by Prime Depth Labs (“we”, “us”). For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it, we are the data fiduciary for the personal data described here.
Questions about privacy go to privacy@bolbolo.com. Our grievance officer can be reached at grievance@bolbolo.com.
2. Children and parental consent
BolBolo is designed for children aged 3 to 10. Children cannot sign up on their own. A parent or lawful guardian creates the account, adds each child and gives verifiable consent before we process the child’s personal data, including recordings of their voice.
We do not track children across other apps or websites, we do not monitor their behaviour for advertising, and we never show targeted advertising to children. BolBolo shows no ads at all.
A parent can withdraw consent at any time by deleting the child’s profile or the account (see your rights). Withdrawing consent stops further processing; it doesn’t affect processing that happened before.
3. What we collect
About parents and guardians
- Name, email address and password (stored only as a secure hash). A phone number only if you choose to give it.
- The date and time you gave consent, your app settings (reminder time, daily limit, leaderboard choice) and a push-notification token if you allow notifications.
About each child
- Profile: first name, an animal avatar (never a photo), class, school board, helper language, chosen subjects, the name they give their buddy and, if you enter one, a class code from their school.
- Speaking practice: the text of what your child says (made by speech recognition), the buddy’s replies, corrections, hints and scores.
- Voice recordings: short recordings of answers, used to give feedback and to let you hear their best answers.
- Progress: level, XP, streaks, badges, words learned, minutes practised and weekly reports.
- Safety records: messages our filters flag as possibly unsafe or containing personal details, kept for review by our team.
Technical information
- Basic information our servers need to work and stay secure, such as IP address, device type, app version and error logs.
We don’t ask for, and our AI buddy is instructed never to ask for, a child’s full name, address, phone number, school name, photos or location.
4. Why we use it
- To run BolBolo: create accounts, match lessons to your child’s class and board, hold conversations, give feedback and track progress.
- To keep children safe: check messages for unsafe content and personal details, and review anything flagged.
- To show you progress: the parent dashboard, weekly reports and saved best answers.
- To send reminders and notices you’ve asked for, and important service messages.
- To keep BolBolo secure, fix problems and improve lessons, using information that is aggregated or that no longer identifies anyone wherever we can.
- To meet our legal obligations.
5. How AI and voice work
Listening. When your child taps the microphone, the speech recognition built into their phone turns speech into text. Depending on the device and its settings, Apple or Google may process that audio under their own privacy policies. The app only listens while the microphone button is active.
Replies. An AI language model writes the buddy’s replies, role-play lines, corrections and the weekly report. For each reply we send only what it needs: the child’s first name, buddy name, level, helper language, the topic and the conversation text. We never send your email, phone number, address or voice recordings to the AI provider.
Voice. The buddy’s voice is made on our own servers with an open-source text-to-speech model. Short audio clips of the buddy’s replies are stored to play them quickly and are deleted after 30 days.
AI can make mistakes. Replies pass through our safety filters, but please keep an eye on how your child uses the app.
6. Who we share it with
We never sell personal data or share it for advertising. We use a small number of service providers who process data for us under contract, only to run BolBolo:
| Provider | What for | Data involved | Where |
|---|---|---|---|
| DeepSeek | AI language model for replies, corrections and reports | Child’s first name, buddy name, level, conversation text | China |
| Neon | Database hosting | Account, profile, progress and conversation data | United States |
| Our cloud hosting provider | Running our servers, storing voice recordings and voice clips | All data the app processes | As set out in our records of processing |
| Expo, Apple and Google | Delivering push notifications and on-device speech recognition | Push token, notification text; audio as described above | United States and other countries |
If your child joins a class with a school’s class code, their first name, avatar and weekly XP appear on that class leaderboard to classmates, unless you turn the leaderboard off. Schools don’t get access to conversations or recordings.
We may also disclose data if the law requires it, to protect a child’s safety, or as part of a merger or sale of our business, in which case this policy will continue to protect it.
7. Processing outside India
Some of our providers process data outside India, as listed above. We only transfer data to countries that are not restricted by the Government of India under the DPDP Act, and we require providers to protect it. We will update this policy if our providers or their locations change.
8. How long we keep it
- Voice recordings: deleted automatically after 30 days, except a few “best answers” kept for parents to hear until you delete them.
- Buddy voice clips: deleted after 30 days.
- Conversations, progress and reports: kept while the child’s profile exists, and deleted when you delete the profile or account.
- AI usage and cost records: kept for accounting and abuse prevention, with the link to your child removed when their profile is deleted.
- Backups: deleted data disappears from encrypted backups within 30 days.
9. Keeping it secure
Data is encrypted in transit, passwords are hashed, access tokens expire, and only a small number of our team can access personal data, for support and safety reviews. No system is perfectly secure; if a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.
10. Your rights
As a parent or guardian you can, for yourself and your child:
- Access a summary of the personal data we hold and how we use it.
- Correct or update details, most of which you can change in the app.
- Erase a child’s profile or your whole account from the app, or by writing to us. See delete your data.
- Withdraw consent at any time, as easily as you gave it.
- Nominate someone to exercise these rights if you are unable to.
- Complain to our grievance officer, and if you are not satisfied, to the Data Protection Board of India.
Write to privacy@bolbolo.com from the email on your account. We may need to confirm it’s you before acting.
11. Grievance officer
If you have a concern about your data or anything you see in BolBolo, contact our grievance officer at grievance@bolbolo.com. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
12. This website
bolbolo.com does not use advertising or analytics cookies. Our hosting provider keeps standard server logs (such as IP address and pages requested) for security. See our cookie policy.
13. Changes to this policy
We will update this page when our practices change and show the date at the top. If a change is significant, we will tell parents in the app or by email before it takes effect, and ask for fresh consent where the law requires it.